Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75E9214C3DE11EF915AE299762E951A.roa
File: B75E9214C3DE11EF915AE299762E951A.roa (raw, json)
Hash identifier: 1Kefq+R2r+EErWNWzexwhoay6LnxtwuHIC9plIvevKQ=
Subject key identifier: FA:1F:C3:10:D8:B5:D5:50:9C:F6:11:81:BA:0F:AC:BA:F0:0D:B1:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75E9214C3DE11EF915AE299762E951A.roa
Signing time: Thu 26 Dec 2024 23:11:20 +0000
ROA not before: Thu 26 Dec 2024 23:11:16 +0000
ROA not after: Fri 12 Dec 2025 23:11:16 +0000
asID: 984
IP address blocks: 154.86.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75978 (0x128ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:11:16 2024 GMT
Not After : Dec 12 23:11:16 2025 GMT
Subject: CN=676de298-12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:b1:cd:c3:00:7a:74:e4:f7:5f:8b:d6:bc:
ca:52:70:c0:cc:a1:20:74:21:1f:96:9b:6c:2c:c2:
88:c4:8e:83:45:ef:29:3a:fa:63:20:e1:90:03:9a:
c6:0f:30:ed:3d:13:07:8a:a9:62:fa:9c:51:37:02:
d9:ba:55:37:4a:3c:68:c6:d2:1f:c4:a8:5c:30:e4:
5a:ce:3d:f3:41:e7:ca:7b:1c:3f:6c:de:11:60:17:
74:9a:2e:41:53:bf:61:d2:d4:45:46:af:f2:7a:b2:
e6:1d:7a:c0:ae:04:0d:74:9e:c8:99:60:01:80:e8:
d9:fb:4c:b1:1e:bd:b3:45:f8:99:6c:a5:1a:ce:02:
8b:9b:cf:c8:0b:f5:8b:3d:1d:9e:af:7a:ef:b1:36:
6b:a0:a4:ca:be:b2:1c:c0:49:4d:90:b6:e1:84:5e:
4b:5d:8c:0c:f9:b2:9f:5d:f6:57:95:36:c3:13:86:
c5:19:99:03:18:fc:99:c8:bc:f0:bc:9c:de:51:8a:
e5:92:ed:2a:4c:08:7f:ba:e0:41:c9:c8:ab:6e:53:
4c:0e:6b:a8:2b:df:56:2a:dd:b7:46:9c:71:b3:83:
4b:9a:e0:4d:ba:43:55:e7:55:b1:86:bd:9f:56:69:
ef:8e:2e:df:5b:a0:84:3a:4d:ab:c1:9f:0e:40:96:
a8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:C3:10:D8:B5:D5:50:9C:F6:11:81:BA:0F:AC:BA:F0:0D:B1:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75E9214C3DE11EF915AE299762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c4:85:f4:52:44:a9:e0:57:44:0f:f7:95:8f:a8:de:fb:e5:
20:20:98:a1:22:4d:c9:7f:4d:17:37:96:85:37:36:a2:d1:86:
8d:8c:48:94:22:67:33:be:c1:b6:df:3f:03:88:c0:7f:6b:e5:
08:19:1e:da:1d:74:01:a0:da:e6:63:f5:55:64:57:d9:0e:18:
99:f2:ed:f6:88:1c:2d:f8:75:df:e4:5f:eb:b3:13:1d:71:9e:
29:4a:cc:38:a9:c5:c5:3c:5d:b7:97:1d:90:53:4b:9e:dc:b0:
28:2a:89:ef:00:13:b2:71:82:04:c1:0d:ce:14:45:b4:75:81:
12:d3:d5:bd:5c:fd:12:a2:e4:a4:f7:af:ca:bd:e0:d8:93:41:
aa:f1:20:63:ce:5d:52:25:34:90:2c:8c:f9:28:26:d9:65:e9:
ad:1f:22:44:30:5c:2e:f1:90:e3:c3:cd:03:09:7a:25:2d:4d:
7d:ca:ca:c4:21:66:2c:7f:06:e0:c3:aa:e7:8f:1d:8d:03:92:
10:18:d1:c5:3c:73:00:84:05:8f:b5:5a:4a:62:71:65:65:f1:
f3:c5:f3:a3:81:cf:07:25:c3:ed:04:6e:05:8c:c7:ee:0e:bd:
05:03:e7:50:9e:44:1b:1d:35:76:d9:ba:54:fd:a6:5b:ad:43:
1d:5d:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:34 2025 by rpki-client