Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CD6552C1D811EFAFCC28B9762E951A.roa
File: C6CD6552C1D811EFAFCC28B9762E951A.roa (raw, json)
Hash identifier: HRhvN4XojLl8lseuxNsR3dv/dfE+J3VBHGd29V+i5Ro=
Subject key identifier: 1A:1C:90:9A:7F:D8:4D:33:F2:43:0C:39:BA:AE:F2:42:EB:0A:07:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CD6552C1D811EFAFCC28B9762E951A.roa
Signing time: Tue 24 Dec 2024 09:23:46 +0000
ROA not before: Tue 24 Dec 2024 09:23:43 +0000
ROA not after: Wed 10 Dec 2025 09:23:43 +0000
asID: 984
IP address blocks: 154.194.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74471 (0x122e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:23:43 2024 GMT
Not After : Dec 10 09:23:43 2025 GMT
Subject: CN=676a7da2-88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:bb:f1:43:b2:e2:72:78:1f:d5:43:60:22:
a2:71:49:58:ba:e3:ec:ac:6e:54:6e:ef:65:35:02:
75:50:13:bf:5c:0e:97:9c:1f:f1:8d:d2:21:30:d5:
df:0a:a7:d8:ca:00:1a:78:48:e4:dd:78:26:b7:a9:
03:b0:af:74:0f:d4:80:e9:01:0c:bf:cb:dc:4a:72:
0c:31:73:f8:70:2b:6a:f2:d5:71:d9:13:95:4b:da:
c7:c8:ff:76:e7:ce:48:a9:2f:c7:b3:42:f1:df:7c:
00:eb:cb:eb:27:21:9e:aa:a9:be:44:10:bf:f3:32:
ef:8a:08:8d:8a:10:e9:45:bc:41:ad:72:52:46:74:
3e:f0:34:e3:1c:7b:61:1d:e2:ae:f3:42:02:f4:95:
d9:f6:33:8d:9d:30:11:ab:bc:d4:e9:8b:60:4b:4e:
4f:26:70:a4:ea:d2:ad:5d:5d:07:f3:d8:25:0e:5b:
a9:ba:0b:b1:49:bf:8d:70:9a:c0:65:c1:29:3d:46:
bf:23:40:c0:81:95:df:95:5c:2d:e9:52:cf:05:e0:
e7:8f:00:5f:7d:67:f5:96:08:fa:9b:a6:69:e5:93:
a6:3e:0e:c0:74:17:70:c4:39:39:b6:d6:7c:9f:a1:
76:71:61:8e:ac:7b:aa:02:71:1d:91:62:05:ce:3f:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:90:9A:7F:D8:4D:33:F2:43:0C:39:BA:AE:F2:42:EB:0A:07:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6CD6552C1D811EFAFCC28B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f2:35:e2:94:d9:52:60:df:4c:b0:9a:0f:c6:5c:e5:5d:51:
6c:ef:e7:58:6f:d6:cb:bc:b2:44:de:a8:dc:21:f0:1b:2f:84:
75:b9:c8:e9:6a:9e:04:20:10:b0:b3:c7:b2:14:8a:1a:ba:b7:
c7:44:23:96:32:58:30:87:65:6c:96:4b:4f:e0:36:7f:cc:09:
49:80:89:1a:04:56:02:8d:54:1b:4d:b1:8c:3c:b5:b3:10:56:
5a:c2:06:e7:87:a9:e1:c9:82:fe:9f:0f:55:c6:c8:ce:6e:89:
9b:e3:e2:98:ff:db:51:00:16:40:e6:a8:de:e6:73:f7:1b:07:
00:4b:96:b8:96:24:06:dd:cf:6b:62:a6:ff:4c:e4:a5:7c:40:
73:53:09:0f:8d:03:da:31:75:9a:5e:8f:c2:4b:de:5b:40:1f:
9c:0e:3e:fb:6c:38:d7:f7:10:f1:af:df:b1:65:a6:f0:06:ca:
93:76:a7:8b:c9:80:62:f9:ad:93:cb:76:6b:84:3a:0a:5c:3c:
33:c9:d7:96:e6:7a:25:85:1c:4f:a7:0b:46:7d:7f:af:0c:5f:
79:6e:00:e6:98:21:fe:44:29:78:1f:e6:f1:64:bd:d0:ae:12:
27:42:25:a0:e4:83:d0:3f:34:82:5e:d2:49:3b:a0:6e:e9:63:
6c:20:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:00 2025 by rpki-client