Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEBFE516CDEE11EFB446799F762E951A.roa
File: BEBFE516CDEE11EFB446799F762E951A.roa (raw, json)
Hash identifier: IcVCUF8bb0s5+qGS0WY4aJUO30Xyfwp7W6JbK9PZszk=
Subject key identifier: 20:9D:FB:0E:73:4A:A0:E1:56:3E:C9:1A:15:3D:C3:F5:2B:04:01:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013825
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEBFE516CDEE11EFB446799F762E951A.roa
Signing time: Wed 08 Jan 2025 18:31:16 +0000
ROA not before: Wed 08 Jan 2025 18:31:12 +0000
ROA not after: Sat 03 Jan 2026 18:31:12 +0000
asID: 984
IP address blocks: 154.193.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79909 (0x13825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:31:12 2025 GMT
Not After : Jan 3 18:31:12 2026 GMT
Subject: CN=677ec474-00d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:b4:cb:c5:de:c3:ad:ec:0f:b0:1d:3d:b8:
56:7f:35:a9:20:48:9a:42:db:c5:16:9d:07:ad:e7:
ec:8d:cb:e9:b5:cf:8f:99:dc:75:50:73:ec:12:a1:
9c:1b:a5:bd:7a:73:29:cf:08:5d:0a:0a:c5:03:90:
85:79:26:79:2e:08:60:25:25:b1:a1:95:4b:0f:7c:
ae:64:c2:f3:eb:72:49:a7:09:0a:12:8a:ac:e2:9f:
94:67:03:44:e5:9d:be:00:9c:88:d2:d0:b6:b0:df:
03:98:85:8f:ad:f1:eb:53:d3:fd:93:b7:5c:05:3d:
99:cc:f3:ec:94:e0:8f:bb:0e:ec:9b:69:86:a3:3f:
f4:5a:0c:87:b2:7b:77:11:76:50:a5:41:8d:75:00:
fc:6a:7b:41:cf:b1:a5:90:38:19:fd:01:7e:4b:80:
6d:85:8c:cd:22:bb:51:15:03:a5:63:c1:fd:2d:fe:
e7:07:de:78:ac:c5:11:c0:ff:98:31:3d:3b:5f:39:
12:84:94:c9:7f:f9:e1:72:bd:c7:1d:d1:cf:67:b1:
4c:7d:39:29:fb:82:a8:a0:53:e7:06:ee:0a:c1:7f:
74:6c:f1:97:2f:ea:0b:87:73:d8:7c:1c:99:c9:0d:
79:13:b2:a1:b3:86:b2:fd:41:84:48:17:fc:74:e1:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:FB:0E:73:4A:A0:E1:56:3E:C9:1A:15:3D:C3:F5:2B:04:01:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEBFE516CDEE11EFB446799F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.37.0/24
Signature Algorithm: sha256WithRSAEncryption
56:22:82:ff:ff:5b:d9:f4:ce:43:7a:d7:de:36:8b:ea:45:cd:
b3:f8:bf:4f:b6:09:b6:55:2d:1d:71:f8:78:da:04:c6:ef:1c:
31:43:09:94:6c:c1:ee:69:f6:be:a8:66:03:8a:2f:58:74:2e:
3e:86:c7:a9:2f:d1:90:f4:39:5b:50:f0:c1:67:ea:f8:76:f5:
96:74:de:ba:46:9f:87:98:a1:86:c0:a1:ae:b1:4d:b8:fe:de:
20:70:3d:88:78:2b:9d:ba:ac:9e:5d:55:15:eb:6c:47:9d:f4:
25:c7:73:65:7f:51:96:51:82:0b:b4:21:6c:ff:94:d7:f0:af:
26:e4:62:98:c2:1a:0a:f0:8f:95:8b:88:0a:35:b1:eb:40:96:
d9:b4:1e:22:0c:d5:a5:c8:cb:c4:69:3c:fc:99:6b:4d:99:a0:
52:e1:c5:5d:3d:b3:ed:95:10:af:74:3a:9a:79:bb:4c:5a:13:
d3:d4:23:83:29:83:6a:1e:1a:e2:36:49:1a:9b:ce:93:fc:92:
d8:eb:b5:bc:cb:38:20:c6:5b:d6:eb:93:31:b2:09:de:25:f8:
97:8a:70:5e:d7:7b:12:6e:18:e2:af:be:47:23:14:d2:70:8c:
1e:51:4c:22:70:7a:04:0b:8f:ca:aa:67:75:f6:98:ab:e1:b1:
df:20:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:20 2025 by rpki-client