Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C099C96AC3C611EFA177E584762E951A.roa
File: C099C96AC3C611EFA177E584762E951A.roa (raw, json)
Hash identifier: i0nE38AYBBfK6xoCnY3aobpGERAa6igVpc5Kr58MJWc=
Subject key identifier: E1:8D:4B:4C:62:C6:E9:90:FE:0C:6A:E1:9E:E9:98:77:B4:47:46:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C099C96AC3C611EFA177E584762E951A.roa
Signing time: Thu 26 Dec 2024 20:19:47 +0000
ROA not before: Thu 26 Dec 2024 20:19:44 +0000
ROA not after: Fri 12 Dec 2025 20:19:44 +0000
asID: 984
IP address blocks: 154.83.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75736 (0x127d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:19:44 2024 GMT
Not After : Dec 12 20:19:44 2025 GMT
Subject: CN=676dba63-2547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:f8:b8:d1:a1:e7:25:8a:ec:8b:fa:9e:49:
57:3c:7b:ba:56:9f:87:3d:58:06:14:09:25:67:56:
b1:2d:c8:97:ad:c2:47:93:08:e8:14:ee:70:a7:11:
11:98:59:5a:dc:c4:01:94:f3:cd:8e:a6:f2:3f:2d:
bd:21:65:57:ba:8b:30:38:eb:c7:6b:77:1c:e5:f4:
7c:dd:3f:af:17:c7:ad:cc:e4:2e:bc:4d:5f:5e:aa:
18:21:fa:63:61:1c:df:ee:e7:6c:fd:2f:e8:99:ac:
41:4c:b5:63:d5:b5:94:2e:b2:ad:56:14:f1:78:53:
51:90:d3:48:cf:f1:7e:ba:23:c9:63:b9:7b:f4:91:
17:fd:b6:2c:d0:61:76:81:35:e3:b4:e2:01:5d:4b:
36:24:ed:17:8e:30:99:ac:b0:9f:7c:fc:06:9a:30:
05:62:65:b4:33:a0:51:2a:5f:24:9c:cc:54:85:0e:
55:a2:af:5e:ee:07:0e:c2:ea:1a:f2:ec:49:07:03:
23:c9:c4:11:e6:20:fa:7a:3b:98:52:e3:7f:1e:35:
36:e2:1b:1d:ae:4e:8b:83:70:32:b1:c3:81:56:cd:
8f:69:0f:eb:fd:e5:cc:7b:0b:96:09:03:41:1f:17:
2f:16:88:34:d9:d1:6b:9d:d1:a7:1c:7e:01:54:65:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:4B:4C:62:C6:E9:90:FE:0C:6A:E1:9E:E9:98:77:B4:47:46:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C099C96AC3C611EFA177E584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:21:37:70:33:2c:b5:91:e9:63:6b:7d:0d:2d:0c:7b:c2:ca:
24:ed:44:81:b8:25:94:3a:d1:f7:c2:9f:e3:38:01:f1:74:cb:
2f:63:19:af:9d:dd:b6:a4:f8:b8:a3:b0:03:6b:e3:b7:a3:28:
24:95:ee:44:26:2b:ae:4a:ef:bb:92:e5:33:53:ff:18:3d:52:
20:ba:1f:c0:ce:a5:99:81:07:d2:13:73:ef:eb:90:ae:ae:87:
c3:10:1e:ec:1a:15:a0:ac:89:92:71:aa:6c:94:82:a6:7b:d4:
d9:8b:c6:c1:51:d4:2f:15:44:27:f2:00:77:a0:ee:88:50:73:
5d:57:5a:60:23:0b:fe:8c:e7:6a:c7:3c:49:c1:ed:8c:f3:f1:
cc:69:54:de:e1:b6:09:50:4e:58:8b:25:91:b5:e1:07:9c:fb:
c8:19:aa:74:00:e1:30:e5:1c:3a:2f:ff:18:b9:28:f5:53:2a:
4f:f3:f2:6b:f5:87:ba:ae:11:fb:77:c8:dc:39:fe:af:08:1c:
d2:6c:2a:ab:b4:9c:fb:fe:52:d5:75:a6:db:fe:41:e9:de:a2:
8b:00:03:7f:22:ce:0b:db:b2:0a:ca:dc:dc:6d:88:a4:7e:44:
f7:14:ca:65:29:28:d8:25:c7:e0:1b:42:66:0c:46:49:10:01:
d8:64:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:34 2025 by rpki-client