Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB58414C1D911EF932AD840762E951A.roa
File: CFB58414C1D911EF932AD840762E951A.roa (raw, json)
Hash identifier: UwuWWLV+zbPoCzVoZLnF5Leo9B320jY13u1hAnBcgoc=
Subject key identifier: F7:B7:9A:43:A2:C9:C8:76:55:F6:80:D8:9E:C6:CF:84:50:23:8C:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB58414C1D911EF932AD840762E951A.roa
Signing time: Tue 24 Dec 2024 09:31:11 +0000
ROA not before: Tue 24 Dec 2024 09:31:07 +0000
ROA not after: Wed 10 Dec 2025 09:31:07 +0000
asID: 984
IP address blocks: 154.194.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74483 (0x122f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:31:07 2024 GMT
Not After : Dec 10 09:31:07 2025 GMT
Subject: CN=676a7f5f-caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:f2:1a:32:4a:85:94:5a:b1:ba:7b:4e:1d:
37:dc:cb:7d:6a:14:55:cd:0b:b6:68:e1:af:2d:22:
fc:f5:2c:23:0a:ee:b6:99:6f:5f:c9:77:88:9f:fe:
a4:b0:a0:5f:53:ba:50:ef:3a:16:16:d6:82:cb:7e:
26:fc:5e:ca:57:9d:be:29:ce:72:35:99:d0:4d:42:
a9:29:f8:a3:2e:ef:fd:45:ea:1a:43:97:56:13:81:
43:af:93:2c:29:7e:5a:7c:ed:d3:8b:ab:83:a4:29:
eb:2b:05:c8:1c:b2:27:3a:63:27:a2:b2:c4:2e:ea:
c2:f5:87:ff:dd:33:54:c8:80:35:d2:d1:21:50:62:
42:15:1e:4b:ec:a8:18:d4:2b:de:ef:3c:00:54:ae:
70:bf:ae:a8:e0:ff:1a:16:a4:00:76:f2:45:65:c3:
52:5e:f5:ea:59:9e:b4:72:a1:e1:79:24:dc:8b:94:
8e:34:a0:a6:e9:2d:1d:78:44:09:08:9f:b2:a2:37:
dc:13:35:aa:03:6b:fe:cc:0f:87:5b:a3:c1:d7:a4:
60:04:a0:e0:39:0e:9e:f4:cf:bd:7b:23:d9:ad:e4:
0f:2b:f8:36:2e:30:a8:bf:e1:b9:eb:3e:91:11:52:
23:6a:b0:cf:4f:82:b6:39:64:49:ed:6e:dc:ec:b4:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B7:9A:43:A2:C9:C8:76:55:F6:80:D8:9E:C6:CF:84:50:23:8C:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB58414C1D911EF932AD840762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.238.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1d:24:de:8e:7a:04:ff:cc:ae:97:07:fd:be:b6:af:9e:df:
44:23:3c:aa:19:19:74:b8:0c:cb:3c:8f:15:64:b0:2a:99:3c:
fb:14:f7:bc:11:3c:f7:a4:33:ba:27:61:4e:50:e3:00:67:59:
95:fd:78:09:b6:9e:9e:8e:f0:7c:2b:b2:39:4e:f1:3b:56:b7:
94:53:2f:42:c7:f1:02:62:e9:c6:50:33:6e:8e:a1:5a:55:15:
f3:79:e2:f5:2a:19:2a:0c:7d:d9:d5:1a:41:11:30:94:a8:c7:
90:1b:69:f2:b3:62:51:5e:61:3c:a9:df:37:d5:6b:97:0c:17:
d5:bd:bc:c6:aa:17:50:4b:ad:ac:67:82:c3:0b:9b:d1:a4:95:
3b:52:a9:55:75:7a:45:32:66:f1:0f:53:46:84:3b:d3:8a:b4:
24:48:1f:d6:ce:1a:1c:b2:23:6b:6d:15:0c:69:30:1f:2c:14:
9d:da:0c:b3:a5:04:73:67:ca:03:69:f7:5d:fe:27:00:10:66:
56:a7:d9:e3:ac:f2:19:0a:6f:07:b9:5b:1a:32:b1:5b:10:8f:
e5:15:5b:bf:55:26:75:3c:91:b6:e9:88:14:cb:c7:e0:39:15:
c8:90:d5:b2:3a:88:3f:fa:a0:29:41:f2:c5:86:e9:eb:62:7c:
3f:15:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:45 2025 by rpki-client