Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AD8608BE9411EF9A9CE5A7762E951A.roa
File: B1AD8608BE9411EF9A9CE5A7762E951A.roa (raw, json)
Hash identifier: 2ZBuvDwa5d5tXuqoB/DmGS5qrcnp5EL4l8u2n82g7rM=
Subject key identifier: 2F:1C:BF:A7:F0:0D:56:3F:B2:8B:63:25:36:D4:48:8C:C7:6A:D5:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AD8608BE9411EF9A9CE5A7762E951A.roa
Signing time: Fri 20 Dec 2024 05:38:52 +0000
ROA not before: Fri 20 Dec 2024 05:38:48 +0000
ROA not after: Wed 10 Dec 2025 05:38:48 +0000
asID: 984
IP address blocks: 154.82.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72766 (0x11c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:38:48 2024 GMT
Not After : Dec 10 05:38:48 2025 GMT
Subject: CN=676502ec-c40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:76:66:39:d9:bb:e1:46:34:30:31:68:1c:
ca:af:f3:2c:b6:95:b2:69:ef:33:ad:d9:be:8f:f7:
0d:e5:ce:41:5b:ee:a7:d9:79:24:fb:8d:3b:1b:73:
09:a3:5b:d8:e6:3b:0e:66:a4:7e:57:4d:56:83:13:
04:af:0c:84:6b:c8:0d:23:07:31:6d:b7:b1:bc:a5:
58:69:90:dd:86:50:3d:1c:ae:92:0a:b0:f3:29:28:
59:d8:6f:fb:60:08:02:48:e8:98:81:85:44:1e:47:
b9:64:cd:f0:f0:d4:2a:5a:d6:f2:b0:86:5d:d1:b2:
26:40:af:6e:6e:52:f8:c5:bb:82:6c:6d:11:ab:29:
c5:c6:65:19:4f:26:04:08:73:4e:a0:55:fe:26:a5:
78:2a:1a:d0:84:6d:fd:1b:13:48:a8:8a:a6:2a:ef:
b6:92:14:ca:c9:fa:a4:6c:ee:07:0a:8e:37:be:fe:
77:34:66:06:8b:22:83:55:db:ab:d3:07:a8:32:8b:
92:ed:4d:e7:40:cd:e0:14:d3:1f:6a:c7:80:b1:73:
66:2b:58:fe:c1:22:1e:89:ab:4d:a2:a0:51:be:12:
ef:69:26:4d:4d:26:73:10:91:db:34:b4:70:e5:0e:
33:69:f7:12:21:0f:7e:91:57:19:f5:bc:c5:dd:7f:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:BF:A7:F0:0D:56:3F:B2:8B:63:25:36:D4:48:8C:C7:6A:D5:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AD8608BE9411EF9A9CE5A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.209.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b3:d4:d7:47:6c:00:9c:ca:2e:35:79:1d:62:a1:9f:32:96:
e5:2b:ff:a9:02:19:32:a0:c4:cc:48:ce:8b:bf:7d:78:d8:2e:
9a:9a:ea:10:68:71:2a:65:3c:4e:f0:ab:65:a9:a8:03:b0:f2:
04:59:e2:fd:2e:bd:80:61:a7:62:6f:03:16:cc:06:24:05:40:
97:20:e7:93:d7:26:af:c4:db:40:cc:c6:50:73:2d:dd:2d:f6:
49:49:55:56:67:d7:3a:87:5d:16:ba:81:21:d4:d1:c5:c8:80:
52:f6:e0:ef:59:2b:2e:88:70:70:89:73:d1:cb:f3:4d:68:7a:
3e:02:32:41:b9:40:7a:76:05:02:e1:0c:cf:bb:90:8c:69:93:
ee:6c:c6:6e:f5:38:74:25:4c:b6:35:c8:3b:a1:5b:04:c8:fe:
36:87:31:5b:c0:16:03:a4:8d:dd:4a:4c:fc:06:6d:5a:35:f3:
93:18:41:68:3c:43:68:54:1b:c8:49:8c:12:1e:b6:d8:d2:7e:
32:ad:cc:4d:3d:96:b8:17:c3:f8:a8:c3:82:5f:3c:e2:40:76:
cd:0b:97:42:e8:f0:d7:e4:45:ee:15:ba:9d:63:57:91:89:7d:
21:39:2a:4d:bb:be:ba:73:0c:30:c3:7d:01:e3:37:24:c2:03:
0b:55:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:54 2025 by rpki-client