Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7FCAA2C40A11EFB32E9F47762E951A.roa
File: BC7FCAA2C40A11EFB32E9F47762E951A.roa (raw, json)
Hash identifier: ddTenMiLtWQOGuwVmKBbXi7RB428J9Iyj/YP0DYssIc=
Subject key identifier: B8:2B:29:F6:B8:77:C8:58:B1:1D:6D:74:00:29:5A:56:32:1D:8A:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012911
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7FCAA2C40A11EFB32E9F47762E951A.roa
Signing time: Fri 27 Dec 2024 04:26:26 +0000
ROA not before: Fri 27 Dec 2024 04:26:23 +0000
ROA not after: Fri 12 Dec 2025 04:26:23 +0000
asID: 984
IP address blocks: 154.196.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76049 (0x12911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:26:23 2024 GMT
Not After : Dec 12 04:26:23 2025 GMT
Subject: CN=676e2c72-fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:7d:67:42:b8:78:ab:68:94:b9:9e:ef:70:
7c:00:9a:e8:6d:3f:90:fd:50:8c:a0:b0:08:9f:a0:
46:53:98:cb:b6:54:85:50:56:30:5b:3b:bb:57:12:
97:38:34:49:78:75:2b:2f:6d:60:e7:f0:1b:38:d9:
e0:7a:93:47:42:94:be:7c:fb:b4:d8:99:49:33:90:
77:7f:86:06:2d:e5:ac:1f:a3:c4:b1:cc:d9:ef:ca:
35:3c:c4:37:9d:6c:e5:17:ce:af:4d:1f:1c:d2:a1:
82:41:db:2c:f7:80:b9:0b:66:ef:bd:2d:c5:29:1e:
66:7b:ba:34:c6:ef:9a:cb:a5:0f:b2:5d:80:9a:c8:
18:43:77:ae:e2:d8:f9:c6:0b:39:4d:28:e7:90:02:
2e:1a:6f:c8:33:6f:82:02:bc:28:c7:dd:92:69:73:
45:b5:f9:61:ea:72:c8:86:e8:e4:50:00:4a:49:06:
1f:73:83:7d:d3:8a:5d:9e:27:ef:ce:78:70:47:be:
87:18:5c:ed:97:96:a5:fa:ca:63:73:09:0d:cd:2c:
c9:bd:35:89:28:67:2c:a7:17:5a:61:78:8d:b5:13:
0d:29:e1:63:08:f5:00:b0:32:a7:a1:6c:d5:33:4d:
87:96:17:63:ed:47:80:c5:ee:4d:86:7f:f6:c8:60:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:29:F6:B8:77:C8:58:B1:1D:6D:74:00:29:5A:56:32:1D:8A:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7FCAA2C40A11EFB32E9F47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:68:69:70:da:a7:0f:97:98:46:ff:61:1c:cf:d3:b3:a1:40:
81:44:20:4b:10:de:95:24:23:58:aa:e3:a5:f2:4c:d2:9e:02:
c9:be:53:e9:ed:b8:5f:85:70:9e:a0:db:6d:a1:f5:61:d2:4f:
8a:6d:1b:30:87:21:ba:f1:da:1e:ae:13:3f:ea:86:22:41:c0:
05:fb:6b:31:59:64:07:02:a6:a2:ff:fb:f9:9f:79:07:7f:16:
9b:bc:2d:9d:58:dc:54:87:b5:cd:54:b5:af:d8:bc:c1:33:f2:
19:c6:c1:c0:41:7e:3d:e1:d8:a0:08:20:2e:b6:bd:5c:a3:6e:
07:e6:14:61:a8:23:b7:b2:e0:24:9f:af:73:1e:36:44:8f:6c:
08:c0:73:6b:57:e5:24:35:91:2b:4a:17:3d:c8:c9:14:82:98:
35:8d:2a:e9:85:31:3b:df:4a:66:10:c4:86:55:ab:b0:c4:c1:
92:82:39:07:49:81:2c:3d:36:d7:b0:97:1e:7d:81:87:f1:6a:
32:73:18:cb:91:b0:4a:8e:71:1f:3e:31:8d:e2:d6:68:54:ce:
c8:11:22:26:c8:ea:ec:0b:12:70:69:25:d4:04:03:84:20:fb:
4d:88:82:e1:bf:6e:45:29:88:a4:3e:b7:7a:20:25:83:02:87:
fa:bf:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:01:40 2025 by rpki-client