Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3804C6C26A11EF8208356A762E951A.roa
File: BB3804C6C26A11EF8208356A762E951A.roa (raw, json)
Hash identifier: A4z2xqMCJRmhFYOmXstV9sUxtUu/icYbXTJfOm1tG40=
Subject key identifier: F2:50:BB:A8:99:5C:29:D7:AF:E8:43:8B:92:79:50:5C:78:2C:67:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01241E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3804C6C26A11EF8208356A762E951A.roa
Signing time: Wed 25 Dec 2024 02:48:33 +0000
ROA not before: Wed 25 Dec 2024 02:48:30 +0000
ROA not after: Wed 10 Dec 2025 02:48:30 +0000
asID: 984
IP address blocks: 154.211.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74782 (0x1241e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:48:30 2024 GMT
Not After : Dec 10 02:48:30 2025 GMT
Subject: CN=676b7281-cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:31:f3:87:65:a4:ac:17:df:2a:c1:4d:d8:
c5:6e:0b:7b:66:7b:b6:e7:8d:a4:64:5c:ea:1e:9f:
f0:e0:be:a3:64:c3:8c:3a:6f:5c:c4:86:f1:49:45:
9c:fa:45:20:bd:1b:f3:94:37:44:bf:07:7e:07:d6:
1a:a7:38:83:c6:98:4a:5f:f3:ec:1d:e3:f2:e4:87:
ca:4a:87:c0:87:df:7b:d6:45:8d:0d:c3:31:08:45:
ba:46:ab:f4:14:36:77:0a:e4:6d:02:be:38:bd:6e:
4f:77:d7:15:6b:80:93:21:f2:93:f9:74:ea:43:45:
bb:13:2a:84:ae:e5:f9:89:d2:aa:73:8e:c8:6b:d4:
a5:c0:de:bc:46:38:98:6f:62:85:88:f6:2e:f5:9a:
98:03:b4:d8:02:50:35:43:d6:88:e4:60:ae:45:dc:
71:17:51:f5:b3:a2:29:9e:02:b0:1c:59:d9:bd:4b:
68:64:a7:25:e0:10:4d:f0:57:ea:1d:5c:f9:c2:a2:
c6:35:ff:93:a2:27:bd:c3:11:29:02:75:9e:6d:a5:
c9:13:38:21:33:a0:2c:36:10:33:38:53:46:0d:40:
c3:55:4d:93:aa:58:c4:c6:b0:72:9e:fe:0c:d7:56:
c3:61:ca:ee:d7:46:09:cb:e2:2e:b5:9b:df:d0:49:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:BB:A8:99:5C:29:D7:AF:E8:43:8B:92:79:50:5C:78:2C:67:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3804C6C26A11EF8208356A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f6:f0:3e:a1:6d:39:cf:4d:f0:51:b1:b5:5d:7b:67:5c:98:
0c:ee:57:cc:14:1c:c5:fb:14:a5:2d:0c:86:d9:89:6b:95:88:
9c:50:48:7e:f8:06:d4:38:99:c0:3e:d3:ec:46:4a:ef:91:d8:
88:ba:12:f7:ad:2f:c2:50:e5:10:8e:18:01:3c:bf:d9:c4:8e:
a0:20:95:23:a3:0a:6b:18:5c:7a:3c:76:60:b8:0e:dd:51:a6:
b2:06:bf:70:26:84:0b:40:df:20:7b:22:66:11:25:08:13:4c:
14:79:ce:a6:c8:72:1e:a4:6f:d1:67:40:62:d6:f4:59:99:e6:
28:e4:0d:61:4d:c8:ae:37:0c:f1:d1:b2:d8:d7:75:fc:7f:d1:
ef:f6:5e:40:ab:38:b5:f5:06:1c:5b:a1:bb:9d:28:75:94:be:
d4:5c:3d:75:23:06:16:76:6b:13:1d:2e:dd:97:f7:58:b2:d0:
ce:5f:09:d5:2b:d4:ef:01:e4:03:32:6d:ef:fe:6c:e7:2f:18:
ec:1c:8d:0d:48:ce:e7:21:66:f9:cc:30:f4:9e:ac:9b:45:73:
0c:ac:3b:66:af:cf:c5:71:80:01:b8:d1:69:2e:20:b9:fd:1c:
87:d6:76:17:35:87:01:a3:84:7f:1c:41:ac:6c:ec:5c:41:9b:
ae:67:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:10 2025 by rpki-client