Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2510EAC26B11EFB590F471762E951A.roa
File: CF2510EAC26B11EFB590F471762E951A.roa (raw, json)
Hash identifier: /KqVrFyp+w4QCLHzKOsL5L65oncp9YUIjtkWzjUXXD0=
Subject key identifier: E3:BF:7B:6B:59:21:EA:5F:E8:EA:40:02:7B:6A:42:5A:BD:59:B0:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01242A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2510EAC26B11EFB590F471762E951A.roa
Signing time: Wed 25 Dec 2024 02:56:16 +0000
ROA not before: Wed 25 Dec 2024 02:56:13 +0000
ROA not after: Wed 10 Dec 2025 02:56:13 +0000
asID: 984
IP address blocks: 154.211.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74794 (0x1242a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:56:13 2024 GMT
Not After : Dec 10 02:56:13 2025 GMT
Subject: CN=676b7450-a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:3e:ca:2e:a9:e9:d5:e4:2d:2f:c9:ba:5e:
57:13:b7:3b:ea:e0:86:57:4c:b8:66:85:ab:8a:a9:
f7:2c:70:6f:04:9d:95:0d:16:f0:60:86:1a:7e:93:
0a:6a:8f:bb:73:dc:6c:18:69:8d:5b:1c:7a:df:a3:
73:7a:c5:ff:c5:9c:d2:ae:86:ab:e9:b0:a3:fa:45:
82:ee:24:98:e6:8b:eb:ae:ed:26:00:e5:40:d6:9f:
56:d5:b5:73:48:ad:cb:ad:8c:8d:4b:45:ab:ca:e4:
98:05:4d:38:83:bc:db:d0:7c:5a:98:0f:5c:cc:c1:
a4:d7:07:c7:5b:70:29:78:fc:1c:47:ef:45:0a:a4:
e5:20:ba:ff:18:01:1b:47:da:9a:90:ab:61:0a:f6:
5d:3b:d8:b2:34:ce:30:6d:71:a8:64:ac:7c:11:0b:
7e:fb:53:a2:02:1b:30:7d:d9:87:84:ed:d4:76:13:
b2:b5:c9:ee:ed:fe:5a:41:a6:46:e6:59:a7:85:a4:
12:ef:fd:19:44:f2:88:44:d7:57:e9:f4:e9:51:76:
ef:45:2e:13:ce:02:3a:38:7c:2f:81:ec:a2:73:6e:
56:38:a5:71:4a:8c:f1:d0:7c:a1:43:81:85:4f:a7:
cf:8b:57:01:fa:e9:01:fe:33:6a:2d:26:c8:1d:eb:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:7B:6B:59:21:EA:5F:E8:EA:40:02:7B:6A:42:5A:BD:59:B0:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2510EAC26B11EFB590F471762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c1:cd:15:6c:cc:ed:ef:ff:b5:87:76:fd:f9:21:e8:71:bb:
34:13:65:9f:b8:9b:1c:e8:9a:30:74:d6:95:0a:9e:0d:e1:8a:
d1:c8:a0:6d:9a:8b:00:99:e6:96:55:80:92:af:2f:50:32:cf:
2d:3b:df:4f:31:dc:bc:df:e3:39:6e:51:a9:90:78:9b:a9:34:
40:35:71:38:46:54:09:9c:2b:78:90:c5:81:f1:da:67:ea:8b:
10:01:03:e5:d5:8e:a9:eb:c2:67:ba:13:43:1e:45:d7:58:79:
89:c3:a9:3c:ee:ec:ba:35:7d:23:3c:f8:5c:8f:88:9e:1e:24:
72:f8:94:e8:f2:23:a4:bc:c1:16:5f:96:ae:2f:c8:3b:d1:75:
96:a1:63:0f:4a:e1:c3:12:bf:68:35:6e:4a:62:5b:5e:28:0e:
04:3d:b6:d6:44:a4:28:a3:15:2e:f3:0b:0c:5e:4a:c8:e8:e3:
f5:14:b8:77:e5:20:fe:fe:3d:76:f3:1e:1f:95:4c:c2:93:07:
ea:a2:2a:4f:39:c9:69:d1:49:3e:b0:43:73:96:bd:ed:76:d5:
a9:61:07:5c:10:01:15:6b:ad:2f:8a:9a:b7:e5:f7:46:9c:41:
ba:04:6a:13:78:ca:92:e0:bf:75:3d:e9:b9:87:14:9b:68:15:
eb:5d:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:19:14 2025 by rpki-client