Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D9FECC1DC11EF87B7E352762E951A.roa
File: C34D9FECC1DC11EF87B7E352762E951A.roa (raw, json)
Hash identifier: /Nat3zMjnhgZzGKAw2Bg//+6Jw9g15jTeN746j050oc=
Subject key identifier: 95:98:9E:21:EE:A8:65:EA:15:81:D2:96:0E:05:08:E9:94:DD:A3:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012315
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D9FECC1DC11EF87B7E352762E951A.roa
Signing time: Tue 24 Dec 2024 09:52:18 +0000
ROA not before: Tue 24 Dec 2024 09:52:15 +0000
ROA not after: Wed 10 Dec 2025 09:52:15 +0000
asID: 984
IP address blocks: 154.194.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74517 (0x12315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:52:15 2024 GMT
Not After : Dec 10 09:52:15 2025 GMT
Subject: CN=676a8452-c404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:45:b2:fd:f6:07:b3:1c:a8:c4:54:ce:03:
b8:61:19:02:2e:de:ec:05:d1:7f:2a:5c:9c:2d:d9:
05:4d:d3:ba:98:2b:07:33:8c:0f:67:1f:f9:f7:f9:
cd:0b:62:0c:13:a3:a7:e8:bb:db:91:d3:c7:ec:35:
17:f2:10:1a:0b:71:ed:e9:aa:a3:cc:58:68:f8:6b:
11:e0:5c:19:51:18:09:aa:f6:60:a2:4d:53:74:b9:
93:b0:b7:94:6f:64:0d:c3:f5:0f:bb:b4:93:c8:c1:
d5:4d:03:6f:23:4d:24:5f:6a:39:3b:65:a7:40:e3:
27:e8:e8:19:9f:a4:10:0a:32:51:9d:90:fd:e6:b0:
ca:50:1a:d0:78:c2:05:ac:b0:07:91:b8:39:49:78:
e9:39:07:3b:bf:b3:fe:04:3d:cc:e4:6b:f3:40:f4:
65:62:02:c3:fa:7b:a0:ef:c0:29:ec:a2:15:02:42:
45:12:b9:12:20:df:8a:c0:a4:9e:fe:60:d2:0f:7b:
fc:a4:0a:da:02:6a:24:2c:29:53:bc:74:95:72:c6:
c2:8f:6e:1d:2c:54:ae:2a:fe:5c:39:12:6e:7c:04:
00:3b:b6:40:85:fe:61:41:ff:da:9e:b7:7a:79:be:
97:a2:3f:c1:a5:71:bc:89:dc:58:d4:24:1c:73:e2:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:9E:21:EE:A8:65:EA:15:81:D2:96:0E:05:08:E9:94:DD:A3:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D9FECC1DC11EF87B7E352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:dd:c7:ff:e4:10:06:b7:02:06:07:c1:0a:7b:c7:0e:9f:
b3:a7:10:e2:47:ef:29:27:b8:a0:07:c5:7a:16:d2:f0:f1:d5:
46:d0:87:68:36:c1:0c:97:68:c1:f3:b1:20:7f:58:71:e0:d7:
dc:8a:4d:ad:00:06:f9:16:cf:08:fd:ec:2c:19:0d:a1:65:d6:
c0:cf:79:4e:49:80:1a:14:ac:eb:d2:84:91:59:f6:71:99:d5:
1a:d9:8b:22:a8:32:c4:f6:db:6c:47:47:0e:22:d0:7e:a8:0d:
9b:55:8a:06:c2:e4:18:1b:21:2f:f1:29:da:5e:6e:9c:ba:64:
2f:98:93:ab:65:7b:81:c3:7d:60:dc:32:54:48:d1:5e:96:4d:
fc:cc:f5:77:6c:c6:0b:4c:c3:c4:7c:19:58:76:e0:b6:29:6a:
df:a6:5c:74:74:08:84:d4:a4:fd:9c:56:3c:5a:51:ac:4d:31:
d0:56:94:d2:fb:a6:aa:76:1c:93:c8:e3:41:ee:9b:63:2b:db:
4a:05:b0:6a:d2:28:12:12:a2:d7:71:c5:44:3a:9e:68:96:48:
62:c3:af:f5:65:0c:a3:76:ce:10:a6:76:5a:4e:c6:20:68:71:
66:56:c2:92:1b:68:70:cd:d3:ee:f3:e0:03:69:81:2b:6b:6f:
61:19:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:45 2025 by rpki-client