Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22F3440C37C11EFB4BB1BB2762E951A.roa
File: B22F3440C37C11EFB4BB1BB2762E951A.roa (raw, json)
Hash identifier: zWDJH1by0lnVlkiL3F4gpYco4POFzyK+JwmDl5M7viY=
Subject key identifier: B6:83:12:4C:FA:62:20:D9:5B:D7:E3:BC:00:80:AF:43:3A:27:49:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012732
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22F3440C37C11EFB4BB1BB2762E951A.roa
Signing time: Thu 26 Dec 2024 11:29:41 +0000
ROA not before: Thu 26 Dec 2024 11:29:37 +0000
ROA not after: Fri 12 Dec 2025 11:29:37 +0000
asID: 984
IP address blocks: 154.94.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75570 (0x12732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:29:37 2024 GMT
Not After : Dec 12 11:29:37 2025 GMT
Subject: CN=676d3e24-2883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:5f:35:ea:a6:e8:52:ee:b3:cf:89:54:32:
7c:1a:4c:a3:0e:f5:58:78:73:56:db:16:67:7a:b3:
61:2b:3a:40:19:16:91:ba:5a:d6:fc:d4:ba:98:6c:
95:fb:70:f2:8c:f0:f1:84:63:ae:46:b7:2c:87:2a:
e6:49:0c:f2:44:0b:17:7e:06:d2:59:f0:28:0f:86:
97:e4:6e:06:42:be:13:d8:38:20:d9:ce:31:07:d4:
68:0d:e4:6a:23:56:74:11:a6:e4:2e:d9:8a:e3:7e:
cf:76:0c:8a:0f:df:19:a9:22:20:3b:41:17:3d:47:
b4:12:e0:9b:7a:15:b0:81:c2:cd:1a:99:54:b8:3e:
fb:06:03:12:92:9c:22:5f:b3:79:e9:dd:4d:ce:e1:
dd:86:15:a4:94:d0:94:1c:a8:83:cf:1a:b5:3a:1b:
61:28:e7:ad:3c:ae:1e:1b:50:e8:11:69:b5:0d:1f:
b3:e5:0d:24:40:67:01:c4:f7:13:4c:2c:b0:c3:43:
90:0c:67:38:dd:d9:57:15:75:0c:f4:c0:b8:2e:41:
74:e7:c5:62:e0:c4:f6:fd:e4:27:d3:26:2c:43:e1:
ad:7d:2c:b2:7b:51:ae:b5:ec:fb:7a:7f:11:c1:dc:
04:fc:1e:82:9d:d2:a9:85:1b:7a:c3:85:5d:e5:a3:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:12:4C:FA:62:20:D9:5B:D7:E3:BC:00:80:AF:43:3A:27:49:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22F3440C37C11EFB4BB1BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:66:04:57:bc:ed:56:70:ee:7a:82:61:c3:65:6a:1d:ac:
1a:c6:fd:33:94:6e:38:f1:4a:bf:2a:23:ae:fd:86:87:c2:e8:
15:2d:87:c5:45:4a:43:5f:41:ab:6a:ff:d3:31:a4:28:76:b0:
ea:26:79:f3:1a:32:e9:e7:1a:c9:60:13:cc:e5:b8:47:7e:8e:
b9:b8:21:72:bd:82:bd:b7:c7:f8:1d:69:9f:9f:fa:fa:39:77:
fe:f4:0a:a3:92:6c:01:d2:1c:2c:bf:37:50:32:a2:c0:79:f1:
f2:f0:66:e7:6d:67:91:dc:ff:1c:93:49:c5:ef:9e:fc:6c:2c:
fd:39:95:86:fa:8e:ec:02:fe:bd:64:6c:dd:d3:d5:64:31:02:
bb:41:bb:8e:da:91:33:d7:70:ff:c2:5e:c7:30:fc:68:2b:6b:
ac:68:82:f9:a7:ce:26:2b:49:c5:28:74:ca:c7:b5:da:26:64:
eb:26:7e:04:f7:79:6f:9f:26:8f:34:91:2d:04:d8:6f:48:58:
94:26:a1:bb:1f:e5:fa:0f:e0:9e:67:e5:84:42:44:ed:43:93:
75:b2:1a:9d:e7:4d:c1:98:de:08:68:36:d0:98:7e:bf:ec:8e:
71:0a:15:6c:7d:02:89:35:57:f2:2b:42:54:2e:eb:5b:89:e0:
9f:cf:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:22:05 2025 by rpki-client