Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFA35808BEDB11EF830D1660762E951A.roa
File: CFA35808BEDB11EF830D1660762E951A.roa (raw, json)
Hash identifier: 1Fxfxvqfs+1wg8laQhWq8HDbAcg1JUD8XuXDYYHe35g=
Subject key identifier: 5B:C3:75:61:4C:CC:09:B9:5E:24:16:90:E4:F7:48:69:A6:70:5D:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFA35808BEDB11EF830D1660762E951A.roa
Signing time: Fri 20 Dec 2024 14:07:56 +0000
ROA not before: Fri 20 Dec 2024 14:07:53 +0000
ROA not after: Wed 25 Jun 2025 14:07:53 +0000
asID: 55020
IP address blocks: 154.84.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72998 (0x11d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:07:53 2024 GMT
Not After : Jun 25 14:07:53 2025 GMT
Subject: CN=67657a3c-236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:3b:46:9a:ea:25:90:c7:fd:c9:32:c4:a5:
e9:20:38:5b:23:3b:89:8f:76:7d:29:e3:e4:8f:a1:
f9:4e:80:74:1b:c4:19:f6:1a:20:3f:b1:9e:32:fd:
a8:fc:57:84:63:14:15:0d:f8:1f:09:24:f9:3b:8a:
90:46:20:29:c3:ab:1f:f3:e9:d0:9b:80:fa:7d:e7:
b5:81:df:2b:99:53:49:e7:9f:75:f3:36:78:0d:68:
e8:b8:c5:79:cb:3f:95:7c:74:cb:8d:bd:ae:92:16:
59:16:00:d0:17:c2:84:05:ab:95:cf:30:a4:96:c3:
3c:35:a4:b9:98:48:2c:cc:3f:fa:c9:4c:ff:89:7d:
e9:db:32:62:92:c2:34:0e:7a:fa:91:5b:cf:c3:d8:
c0:36:c8:d3:72:bc:cf:86:87:95:43:55:75:8c:ae:
4c:1f:19:dc:05:bb:a6:42:78:cb:b7:c7:f1:b6:6f:
8e:85:07:7c:95:9e:12:be:df:cc:81:0c:62:76:ed:
0b:72:9c:d1:84:b4:54:7f:14:9b:e3:d8:d8:86:ca:
fc:65:98:64:f3:8c:d4:ae:83:f8:0a:09:68:c2:3a:
8e:70:69:f9:01:87:82:04:b2:b5:48:f8:46:e8:b5:
0f:fc:b0:8a:69:0a:ff:cd:af:6f:d0:0f:b6:17:25:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:75:61:4C:CC:09:B9:5E:24:16:90:E4:F7:48:69:A6:70:5D:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFA35808BEDB11EF830D1660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.56.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:b1:e2:87:40:d3:d6:42:ee:87:94:6d:2a:d6:2b:a2:8a:25:
e5:98:d0:ff:6a:ed:7e:ef:4c:11:17:b5:47:c9:2d:cb:14:c4:
f8:4e:e8:0e:ee:99:c0:ee:cc:b1:31:05:e5:f0:29:9c:0e:5b:
96:77:7c:7f:f8:b8:91:d4:28:ca:0f:51:16:aa:49:37:04:19:
94:8c:cc:d8:2c:b4:53:7d:8d:89:63:e2:61:8c:b6:e3:4a:23:
2b:58:1a:a6:0f:88:a9:47:95:ed:21:77:98:fb:e4:92:b5:11:
bd:3a:23:8e:67:6a:69:d2:a7:5a:f5:54:0e:c5:9f:ac:e1:3d:
38:09:92:7f:d8:b2:0c:7f:1c:08:0e:31:eb:45:fa:70:4d:94:
ad:32:1e:90:56:2a:6e:9b:b4:49:3d:d9:2f:1d:8a:1f:8b:d7:
30:73:e9:61:19:32:c6:8a:38:48:c4:ec:93:b7:b7:17:28:a9:
6c:4b:84:ff:9d:61:8f:57:0a:1d:29:b4:29:57:d5:cc:bb:d5:
07:6c:be:33:09:55:56:b2:d4:15:34:8c:78:a3:e4:09:31:cc:
e9:7c:97:1e:9a:65:19:ca:86:11:83:65:c4:d8:57:1b:55:6b:
7c:74:79:01:6e:6f:1d:2f:76:33:f1:cf:37:19:33:ea:07:7b:
f0:91:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:19:18 2025 by rpki-client