Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3430238C3D711EFA596216F762E951A.roa
File: C3430238C3D711EFA596216F762E951A.roa (raw, json)
Hash identifier: Cbmj5fZmh72/xgYpPRJW/HDg3FrkXo57bNb1607Oz3I=
Subject key identifier: 55:22:AE:B3:91:AF:BF:EC:2A:27:14:12:00:DB:5E:22:21:05:46:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012884
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3430238C3D711EFA596216F762E951A.roa
Signing time: Thu 26 Dec 2024 22:21:33 +0000
ROA not before: Thu 26 Dec 2024 22:21:30 +0000
ROA not after: Fri 12 Dec 2025 22:21:30 +0000
asID: 984
IP address blocks: 154.85.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75908 (0x12884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:21:30 2024 GMT
Not After : Dec 12 22:21:30 2025 GMT
Subject: CN=676dd6ed-ec0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:62:95:ab:e7:98:b0:8b:68:e4:82:f4:11:
3d:8f:d5:0b:e0:42:a6:c9:91:1e:58:b2:e3:43:e6:
73:98:c6:ca:30:ee:77:2a:f8:16:1d:e4:c2:40:88:
9a:a1:b1:42:82:81:c3:79:15:5a:b2:42:d5:09:26:
02:8e:f2:30:5b:a9:fb:34:d4:1c:66:4b:86:07:3f:
de:8b:ad:1e:15:53:a5:c6:93:c0:fd:b0:14:03:e0:
d6:19:24:da:73:18:5f:43:a9:9e:a6:0d:8e:89:e5:
6e:3e:e2:72:02:e5:b6:19:bf:14:79:72:69:72:38:
5e:75:d4:a4:9a:61:91:3e:6a:35:9e:60:4d:05:3f:
e8:bd:d5:cb:57:ad:94:a8:68:e4:35:cb:a8:2c:74:
de:31:57:b4:b0:5f:04:f0:f2:a5:a2:62:0e:ce:a9:
76:8a:b0:f3:f2:df:57:bf:97:d2:70:74:cd:da:cd:
9c:49:32:51:ed:e6:1d:f4:71:70:dd:23:cb:89:48:
a8:cb:ee:fe:9b:e6:e8:9e:bf:5e:b1:25:85:5d:de:
57:4e:e2:4d:fe:a8:09:9b:9c:8d:b4:fd:b4:f5:b8:
53:10:a5:cb:1f:59:b0:70:c7:a6:40:05:c3:7c:4e:
57:71:33:f2:5d:1c:1d:fe:ee:c5:b0:4d:ad:4e:8f:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:AE:B3:91:AF:BF:EC:2A:27:14:12:00:DB:5E:22:21:05:46:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3430238C3D711EFA596216F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:61:2e:fc:d3:e5:c6:34:7a:a1:9d:8f:07:3e:6e:14:a9:62:
b6:fe:ef:e6:6e:75:68:49:11:0e:da:f3:aa:29:ff:00:76:49:
f1:86:68:10:30:22:c9:b1:b8:4c:d2:f9:41:2e:d3:7d:83:67:
10:21:ab:70:b3:55:56:fd:fa:c9:4a:81:06:0d:83:03:2e:43:
08:43:6b:4f:1d:3d:38:23:14:c9:92:3a:4b:a4:65:1c:42:7f:
5a:d1:50:84:6b:31:c2:9f:27:8a:92:74:37:8c:0f:93:a4:c3:
aa:d4:3a:97:69:6c:0c:d0:96:0e:e5:4b:64:e7:3f:f5:ca:31:
6f:5d:d4:5c:73:bb:d3:2f:05:56:04:a0:b6:b2:d5:44:4f:a1:
a1:71:0a:15:fd:13:2e:47:2e:22:eb:70:46:fc:20:6f:24:43:
14:b6:67:3d:f9:fa:72:bc:58:e3:b8:02:28:ce:6a:f2:c1:43:
75:71:51:e8:ab:d8:f2:8e:ff:8a:27:c0:ea:2b:10:b0:32:0b:
a2:71:8f:1d:24:21:4d:e4:7c:f1:0c:18:2d:93:37:ff:51:f5:
b2:b7:1c:32:53:7c:da:c9:cd:88:64:de:ee:59:2a:46:bd:81:
6a:47:35:bc:4b:42:8e:3b:c2:bd:5a:be:2b:2c:85:10:c0:9d:
65:1e:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:55 2025 by rpki-client