Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3AAA018C1D611EFBF7F5DAC762E951A.roa
File: B3AAA018C1D611EFBF7F5DAC762E951A.roa (raw, json)
Hash identifier: 5A65KVPeggrJrG+oRa45V9l6jVs7D0vG6RYZMwXnYoY=
Subject key identifier: CE:2A:1D:E7:1E:5F:AD:37:33:45:9F:FA:68:2F:61:90:EB:1B:A0:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3AAA018C1D611EFBF7F5DAC762E951A.roa
Signing time: Tue 24 Dec 2024 09:08:55 +0000
ROA not before: Tue 24 Dec 2024 09:08:52 +0000
ROA not after: Wed 10 Dec 2025 09:08:52 +0000
asID: 984
IP address blocks: 154.194.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74447 (0x122cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:08:52 2024 GMT
Not After : Dec 10 09:08:52 2025 GMT
Subject: CN=676a7a27-8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:b4:f8:14:79:68:48:43:f4:76:62:2e:d3:
4c:2f:2e:56:95:9e:f4:e3:1b:0f:8b:83:5e:aa:c0:
7a:8f:34:99:dc:e7:91:00:13:af:b8:68:da:3a:85:
9b:35:20:82:40:89:06:0b:01:ed:c4:ad:15:92:bb:
e0:c0:12:bb:7f:40:0c:77:36:e4:1e:d1:6c:29:58:
69:10:fa:4e:6d:f2:47:45:fb:81:11:df:1a:7d:fc:
64:eb:98:88:3b:60:df:a6:da:50:a2:76:48:ed:a7:
d9:ba:c6:05:94:95:22:c9:29:1b:4e:2b:90:d9:d2:
bd:59:ee:24:dd:54:9c:30:97:a6:af:56:05:c5:4d:
87:33:f3:e9:a0:a1:4e:6a:46:ce:c7:78:bd:13:3b:
a9:9a:db:74:8f:9a:b1:6e:6d:dc:a7:e1:80:a5:40:
33:70:73:d4:49:83:f5:72:09:72:f4:6c:cd:d1:75:
81:97:09:64:2f:12:50:66:b3:5d:2e:20:02:22:2d:
0d:9b:85:36:98:9f:95:66:f0:f9:8f:e0:94:6f:90:
fb:91:d0:a4:b7:df:f3:30:2b:80:77:28:fb:de:b0:
1c:0e:a8:76:d4:ad:37:00:be:65:c2:a1:6c:a8:0f:
ba:3a:7f:3b:94:d5:7f:f0:1a:82:d0:ad:b5:09:98:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:1D:E7:1E:5F:AD:37:33:45:9F:FA:68:2F:61:90:EB:1B:A0:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3AAA018C1D611EFBF7F5DAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.220.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bd:55:12:ac:81:0c:3e:29:48:35:63:96:ee:22:51:06:a1:
98:76:11:7b:0e:91:a2:d2:ff:93:8f:6a:2a:05:a4:a2:fe:37:
d9:c3:f0:94:ef:66:6f:73:7a:62:0d:91:d1:36:10:77:59:2d:
cf:a2:cf:a5:a7:da:4d:bf:4b:b2:a8:6f:e4:9b:62:95:80:75:
ad:b2:e1:f7:2b:ab:0e:b1:d7:99:90:aa:d2:05:c3:38:fd:04:
62:a7:67:ff:35:bf:5f:d5:8c:3e:65:85:ce:67:b3:91:5e:ef:
42:15:de:03:14:8b:7b:5f:ed:b0:5b:ed:76:74:cd:b7:07:dc:
a6:cb:b6:5a:bc:c5:bf:b3:20:f8:19:49:cc:3e:ae:3b:a7:51:
ec:d1:40:91:ef:f1:be:ee:f3:44:8b:d7:87:14:36:0b:f0:4c:
8b:2d:40:46:fe:94:0d:c7:e9:5c:58:39:e9:7d:89:4e:33:e5:
84:c0:48:84:d6:88:8a:87:14:7c:c8:bd:e6:4d:95:70:b3:85:
95:97:d6:a6:2d:72:39:56:5c:0c:f9:f0:74:7c:05:a6:c4:7e:
e2:e5:0b:ed:02:ca:fc:44:48:e4:f0:05:3a:71:81:9b:4f:c6:
f7:c5:e0:35:f4:3f:85:cd:52:0c:35:8e:f2:1b:2f:dc:22:08:
8e:2f:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:35 2025 by rpki-client