Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16681E2C5DB11EFA604FC41762E951A.roa
File: B16681E2C5DB11EFA604FC41762E951A.roa (raw, json)
Hash identifier: YC58wVklCaw10saNQkBwXMGG+6i5DbnjGkSn2DB/Xm0=
Subject key identifier: C4:ED:F4:B7:32:BD:E1:C7:19:F8:5E:58:98:69:70:C7:46:C6:A9:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16681E2C5DB11EFA604FC41762E951A.roa
Signing time: Sun 29 Dec 2024 11:54:44 +0000
ROA not before: Sun 29 Dec 2024 11:54:40 +0000
ROA not after: Fri 12 Dec 2025 11:54:40 +0000
asID: 984
IP address blocks: 154.210.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77086 (0x12d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 11:54:40 2024 GMT
Not After : Dec 12 11:54:40 2025 GMT
Subject: CN=67713884-7e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:1e:54:da:1f:80:30:0c:45:a2:4f:44:ac:
74:ee:52:25:cd:7f:ee:49:fe:e8:6c:1e:00:1e:14:
e0:35:0f:47:48:36:ef:40:1a:f7:a3:76:a7:61:d9:
6f:98:af:54:ee:43:53:33:d4:36:11:40:90:81:8b:
66:9f:4f:04:f7:14:ee:e5:65:3b:b5:b4:1f:f5:59:
5d:d9:00:27:d1:b3:9e:db:a0:8c:d4:74:72:f3:8e:
02:fd:6c:27:6a:93:09:c5:e9:11:a1:cf:4a:c6:60:
db:a8:9f:78:b1:f4:43:8e:73:bc:74:55:3b:f4:24:
7d:15:9d:8c:db:e2:a2:47:f3:fe:9b:33:9f:2a:2b:
8d:eb:34:8d:89:dd:1b:3b:51:15:49:68:75:c5:f3:
2b:f6:bf:3c:6f:73:1c:58:c9:f3:88:03:71:fc:20:
d5:c1:e9:14:56:08:6b:bd:7a:1b:49:67:81:bb:50:
5e:d8:44:28:5f:81:9d:30:de:c9:90:14:c5:93:ce:
94:80:28:e3:56:b0:ab:ea:6a:98:2b:b8:fa:ef:4a:
6f:12:90:d4:83:e9:c3:bb:57:4a:80:f0:91:6f:43:
82:d5:7d:e9:33:7b:ac:92:96:2d:a2:31:3c:b4:a6:
b4:07:b4:ae:21:3b:71:39:b7:f3:72:24:08:50:23:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:F4:B7:32:BD:E1:C7:19:F8:5E:58:98:69:70:C7:46:C6:A9:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B16681E2C5DB11EFA604FC41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.77.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bf:4e:36:ce:fd:bf:01:72:83:32:b2:de:a7:f7:f4:3f:9c:
5e:b5:b8:25:b7:3e:0d:76:13:f8:d0:01:6f:e5:21:f4:4f:b7:
90:da:f2:9c:1c:e2:7b:83:e7:5f:b8:82:57:c2:86:39:7c:12:
b3:7c:1a:8a:d5:57:07:de:e0:e4:27:ae:82:e3:a6:6d:c9:22:
6a:49:ae:f5:bd:e3:17:a4:cc:ac:ac:3d:83:10:95:65:8a:74:
46:da:02:c9:3e:f3:24:7b:8a:c3:4b:8e:51:82:cc:05:ce:d0:
e8:67:00:57:b1:d6:cd:60:31:48:e7:9e:dd:7d:77:5d:38:02:
a0:4f:af:b4:44:7b:be:72:21:9d:03:80:db:b2:11:e4:5f:ef:
17:07:ff:5a:1a:99:cf:f9:44:8b:fa:13:23:a9:ce:c6:a5:21:
99:45:94:47:22:0b:e2:58:55:2c:70:45:19:09:da:91:84:33:
e4:54:56:69:f2:56:6b:04:28:d6:b0:ef:00:4e:1e:a2:ce:b8:
18:97:65:f0:2c:4a:a3:1c:79:2e:ea:5b:40:bb:82:cd:12:23:
f4:73:0d:79:1a:88:1e:00:32:f8:d5:24:b3:a1:56:d9:04:ef:
85:43:36:5a:7b:17:8a:2c:45:0e:ea:4b:38:e2:88:ea:27:44:
10:f6:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:34 2025 by rpki-client