Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D391E84CC1B711EF9AB2676A762E951A.roa
File: D391E84CC1B711EF9AB2676A762E951A.roa (raw, json)
Hash identifier: 6hPSEEuGOh9xz+YDeCWKTHBYznjs5hcAsYFZF8Q4x4M=
Subject key identifier: E3:7D:84:C6:21:C6:9C:79:E9:F3:21:AF:75:31:19:95:63:42:CC:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D391E84CC1B711EF9AB2676A762E951A.roa
Signing time: Tue 24 Dec 2024 05:27:54 +0000
ROA not before: Tue 24 Dec 2024 05:27:51 +0000
ROA not after: Wed 10 Dec 2025 05:27:51 +0000
asID: 984
IP address blocks: 154.193.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74181 (0x121c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:27:51 2024 GMT
Not After : Dec 10 05:27:51 2025 GMT
Subject: CN=676a465a-99ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:9d:60:15:bd:f6:21:4a:20:70:e6:1d:0d:
ed:43:dc:43:86:92:ed:d7:b9:f2:02:e8:37:49:67:
ef:e1:68:13:64:6f:d3:c4:cc:11:77:32:6c:d3:f2:
86:16:7e:af:73:06:79:31:5d:2d:ad:02:06:55:ac:
06:0c:50:76:c1:75:9d:ea:a7:54:dc:92:61:3f:d8:
d3:6e:f0:ff:67:23:28:42:98:d6:40:0b:6e:8f:13:
c3:35:33:b6:99:e7:e9:53:88:7a:1c:88:d3:54:af:
61:1c:67:74:77:c5:30:bd:c1:30:10:0c:ed:b3:24:
8a:61:53:4d:6f:33:a0:d5:09:77:20:df:12:a6:77:
a1:fe:4f:c4:e6:7e:ed:e3:ed:7b:47:b1:a6:ec:1e:
31:41:de:fa:1e:1b:03:fe:4a:55:43:b8:04:a0:24:
19:f1:8d:d5:57:d8:0b:d7:77:d3:7a:f1:b2:fc:6e:
5a:ad:7b:55:54:cf:f7:ca:00:50:8c:fb:f3:78:dd:
9e:8d:c7:77:9c:17:2a:a1:a2:91:2e:9c:1c:47:32:
d1:a0:62:77:04:e3:f5:e5:c5:56:62:5b:8b:68:4c:
96:c2:f0:4d:c7:6a:1c:1c:4d:4d:b6:82:10:68:ba:
9b:f7:1d:65:6c:7f:80:eb:3f:f8:1f:91:2f:3d:32:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:84:C6:21:C6:9C:79:E9:F3:21:AF:75:31:19:95:63:42:CC:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D391E84CC1B711EF9AB2676A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1a:d5:65:ce:eb:84:21:88:20:dc:6b:09:86:fd:34:8e:a3:
3b:bf:20:91:fe:a2:97:f9:13:89:9a:a9:90:16:6d:e4:89:77:
69:86:f1:68:d5:d2:a0:8d:63:49:d6:4f:d1:ae:78:45:29:31:
4a:f3:3b:9b:ec:48:ec:f6:80:4a:fd:c8:57:cd:35:07:b2:4c:
4c:88:73:9f:da:0d:de:38:42:14:fd:cd:e4:04:e7:b0:85:fe:
2c:b2:63:0b:bd:94:08:6c:ac:82:30:60:dd:e4:49:38:77:d8:
21:f8:39:6f:7c:3e:0a:6f:7d:d6:47:63:81:32:b7:c9:57:a1:
7d:77:aa:f3:4c:b4:97:49:41:d0:d3:11:4e:1b:f6:3f:8f:58:
2d:a7:2d:c4:a9:3c:3f:d2:31:46:f5:df:8a:03:db:4c:0a:5e:
7f:72:f3:30:57:99:f5:77:7a:af:57:fd:c6:1b:96:38:fd:68:
77:9e:75:79:e4:c2:ee:29:06:31:37:3f:d7:44:8b:74:c2:1c:
bd:da:15:55:99:fc:be:6c:41:c8:9c:bd:d5:74:7c:fe:39:b6:
5c:0a:d1:75:e3:68:80:94:96:e0:28:e0:e1:68:da:4b:3e:a8:
be:8c:5c:e9:7f:47:2b:9a:99:3f:ae:6d:1d:5c:9f:0e:73:88:
18:b5:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:57 2025 by rpki-client