Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D702E0C0CA11EF92C46A80762E951A.roa
File: D2D702E0C0CA11EF92C46A80762E951A.roa (raw, json)
Hash identifier: L2nucRo7yvH+xuY8slU3U0m7ZCT08cwiS6zaExrcRiU=
Subject key identifier: F6:16:52:F2:13:BC:BD:F8:57:B5:E5:5A:31:2B:19:51:A5:FE:54:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D702E0C0CA11EF92C46A80762E951A.roa
Signing time: Mon 23 Dec 2024 01:11:23 +0000
ROA not before: Mon 23 Dec 2024 01:11:19 +0000
ROA not after: Wed 10 Dec 2025 01:11:19 +0000
asID: 984
IP address blocks: 154.82.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73206 (0x11df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:11:19 2024 GMT
Not After : Dec 10 01:11:19 2025 GMT
Subject: CN=6768b8ba-24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:0f:b1:c3:90:c9:52:60:d2:ff:0a:a8:20:
f5:37:87:d8:ca:ac:b8:8d:b5:27:f6:17:78:70:80:
d4:9b:45:91:9f:1a:cf:0f:07:ad:05:e6:79:99:b6:
14:68:91:48:39:11:b3:dc:ba:0b:46:c5:93:48:d2:
51:80:0e:bd:1b:aa:a8:be:22:d1:29:94:9b:2a:50:
3a:dc:53:66:22:79:7e:6c:72:9d:89:ca:34:65:27:
b0:42:67:f6:1a:1d:2a:1a:17:8a:ac:ae:91:c9:77:
d6:89:7a:a5:a0:f1:21:b9:25:8e:85:a8:21:c9:f0:
00:99:94:f4:5a:58:4b:a5:09:2e:4e:96:01:0f:fe:
e4:1a:c4:35:03:47:20:63:6b:1c:d5:a6:ce:cd:42:
2a:4d:4a:f0:3a:4d:0f:30:ab:d3:aa:8d:a8:8a:e7:
f7:d6:8a:0d:15:22:27:af:3e:d7:85:db:cd:5a:53:
a2:4a:a0:9f:1b:42:0d:dc:27:ed:c0:f7:58:3d:82:
25:fb:de:6d:12:7e:9e:00:68:7e:a0:5c:08:28:7b:
f9:60:e3:c8:e6:91:dd:e4:31:7b:8b:79:db:3d:38:
42:65:4a:9b:2e:c5:47:75:69:0a:9f:86:26:f1:69:
60:9a:2d:14:99:22:4f:b7:37:a4:5c:6a:39:63:27:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:52:F2:13:BC:BD:F8:57:B5:E5:5A:31:2B:19:51:A5:FE:54:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D702E0C0CA11EF92C46A80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:67:c3:13:2e:d5:91:4f:5e:56:5b:09:c7:ff:61:e1:c4:94:
65:23:f1:0d:12:8e:d0:79:3a:8c:be:0c:9f:b8:fe:3d:5e:0f:
ba:45:9f:3c:45:5a:f4:24:ee:18:7a:af:d2:ba:43:24:f4:ed:
6a:81:53:bb:d5:60:1d:f4:86:02:48:14:17:59:cf:93:7d:45:
e5:b0:8c:4c:b4:a0:06:fd:13:a8:24:25:67:f6:98:2b:ac:b4:
f6:4e:43:00:d5:2e:18:1e:a6:cc:65:e8:88:72:5c:58:32:bc:
0b:a8:2d:52:9b:c7:57:ca:d8:10:40:48:fc:91:d6:80:ce:95:
f9:63:f7:48:2e:dc:53:c5:9c:c0:49:c3:69:56:08:de:9c:bc:
75:43:1c:07:cd:a1:ff:3e:e9:55:a7:94:e4:ac:2d:c6:bc:09:
4a:c9:df:7e:a8:98:2f:59:7c:02:c3:e2:7f:86:be:49:29:21:
6c:fc:fb:70:e9:81:1d:3b:a9:05:ac:12:be:69:02:d8:b8:7a:
b0:cb:1d:7e:17:55:9f:ee:10:ee:e1:71:ab:fb:b7:5f:7b:68:
41:30:27:da:0b:bd:63:99:be:92:8f:78:b9:53:cb:ce:78:a5:
b2:7f:3a:ad:3c:17:b2:06:85:45:05:b5:72:e6:15:17:21:89:
07:10:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:14 2025 by rpki-client