Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF39016C1AE11EF8138E3B0762E951A.roa
File: BDF39016C1AE11EF8138E3B0762E951A.roa (raw, json)
Hash identifier: S9fZcCqZRPQ8ZcIna5Vq7HmzZuRSB+CqkA7A9pZq1Yo=
Subject key identifier: 9F:46:72:20:73:72:FC:F4:D1:2D:62:8A:32:FF:D1:1D:09:14:2F:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012159
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF39016C1AE11EF8138E3B0762E951A.roa
Signing time: Tue 24 Dec 2024 04:22:53 +0000
ROA not before: Tue 24 Dec 2024 04:22:49 +0000
ROA not after: Wed 10 Dec 2025 04:22:49 +0000
asID: 984
IP address blocks: 154.193.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74073 (0x12159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:22:49 2024 GMT
Not After : Dec 10 04:22:49 2025 GMT
Subject: CN=676a371d-d441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:9f:29:52:c0:86:ff:0a:26:15:9a:11:7c:
2e:0b:dd:75:c8:70:6f:00:33:04:98:2e:43:00:18:
eb:2c:23:d5:d9:a6:b7:0f:51:8d:f2:a3:72:8b:d6:
f8:c7:4e:3a:26:d7:54:49:2b:a0:9a:9a:6a:36:b9:
c6:4a:10:d0:9d:98:dc:95:5f:86:18:bf:f2:a1:73:
3d:18:32:2d:77:ff:66:8a:a9:10:1f:4b:ae:62:3f:
2a:b0:7c:28:67:91:bf:c8:2c:c0:cb:5c:24:fd:f2:
10:08:a3:c0:bf:81:a4:82:db:9d:74:0a:1d:88:ed:
bb:83:f8:63:1c:0a:2b:35:97:79:67:df:85:f5:cc:
47:ba:ba:a1:80:76:46:14:98:12:13:5f:9b:b2:40:
f9:93:a0:3b:1a:8e:cf:b9:76:40:69:4f:16:21:3d:
15:c9:7c:50:06:8b:74:7a:e0:64:39:b4:24:01:c2:
d5:a9:ba:f9:cb:2d:c4:6d:ca:68:35:06:ca:98:34:
31:c6:dc:a4:2a:5b:34:41:b9:a1:51:7c:9b:75:08:
4d:44:dd:40:5d:4b:b2:63:74:37:bc:7a:8b:44:0d:
73:12:89:93:27:3d:ba:a8:be:97:fa:b6:5a:27:8f:
d0:58:25:7c:9a:b9:49:90:70:3e:18:9a:2a:86:34:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:46:72:20:73:72:FC:F4:D1:2D:62:8A:32:FF:D1:1D:09:14:2F:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF39016C1AE11EF8138E3B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5a:29:ff:34:42:77:d2:2b:a7:7f:70:34:79:39:d9:94:e2:
a8:12:6e:60:64:67:c1:58:c4:c4:8e:77:0a:7d:87:40:34:99:
db:b6:59:85:15:9b:3f:46:44:81:df:ac:0e:56:ed:ba:40:16:
37:b5:53:15:91:d4:5f:8a:b0:58:ef:4f:88:ac:a2:18:7f:0d:
8d:69:2a:a8:0b:67:87:bf:da:71:9f:0d:01:fd:64:c3:f5:30:
e0:54:58:5f:a9:56:0a:ea:98:b3:b2:85:d5:8c:8b:2e:2f:7a:
9d:7e:61:7f:73:58:41:04:39:72:07:5a:c7:0d:b2:b3:ca:cc:
d1:5c:4c:cf:d9:ae:3e:17:79:7c:6d:f5:f3:1d:9a:97:fd:d5:
9a:f7:38:52:a1:0f:8e:12:1a:0e:b2:af:03:c4:d8:4f:db:5c:
a0:47:cb:64:f5:df:87:56:d2:f5:ff:59:6d:1a:99:d0:80:d4:
29:b8:60:07:66:d1:70:20:be:ed:b7:e9:81:38:40:e5:2a:cd:
5a:83:a6:1e:60:8c:75:4e:69:7c:85:60:a1:94:50:e8:54:3f:
4f:b1:f1:25:02:eb:4a:a4:87:c9:99:88:b3:f3:d6:18:68:03:
3c:49:b8:9a:ea:ea:9a:e0:b9:4e:e5:be:c1:bd:9f:5c:2f:2f:
a9:11:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:10:22 2025 by rpki-client