Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45326B0C54F11EF88465B49762E951A.roa
File: D45326B0C54F11EF88465B49762E951A.roa (raw, json)
Hash identifier: DXMD4fU0/aOxFeAhCPzKgAeGsb0rTIlXzQTT400K0nI=
Subject key identifier: D5:A0:4D:4D:ED:D3:90:4B:29:6C:F0:2E:82:73:ED:68:60:29:A6:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45326B0C54F11EF88465B49762E951A.roa
Signing time: Sat 28 Dec 2024 19:13:33 +0000
ROA not before: Sat 28 Dec 2024 19:13:29 +0000
ROA not after: Fri 12 Dec 2025 19:13:29 +0000
asID: 984
IP address blocks: 154.210.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77061 (0x12d05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 19:13:29 2024 GMT
Not After : Dec 12 19:13:29 2025 GMT
Subject: CN=67704ddd-660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:3a:7f:5e:4f:15:b7:bb:21:76:4a:27:e7:
0e:10:4b:09:74:5b:a9:54:3f:ff:e8:88:56:99:4c:
83:6e:ac:36:1a:1c:98:22:47:d4:cf:fd:63:30:69:
33:e4:34:c7:1d:07:3f:a9:3f:9a:35:8c:a6:69:23:
c8:fb:25:f0:b5:b9:1e:d8:63:9b:40:c8:f9:8a:bb:
3b:d7:68:1d:99:9e:26:38:2c:66:44:d9:b5:8b:33:
93:6d:3c:28:1b:03:66:21:34:d9:e8:70:a3:5b:30:
49:34:74:85:10:44:6d:8d:2a:8b:07:f0:9e:16:a0:
ab:73:0e:44:f9:fd:9d:3e:97:99:69:03:3e:c5:bf:
35:6e:b9:b3:7f:d0:74:36:8c:28:dd:44:60:4b:92:
5f:07:ad:8e:b5:f1:27:0f:78:8d:06:86:b5:52:b6:
da:48:f0:1c:4e:18:48:b7:47:4d:07:18:50:41:80:
56:ca:b0:46:66:29:0b:f6:48:51:c7:aa:35:f1:bd:
fc:56:a2:19:54:05:10:2e:10:de:f3:d3:e9:95:53:
48:80:90:4a:e8:07:ef:bc:9e:17:c4:7a:b7:ca:3c:
a6:3e:e5:83:2e:70:a1:8a:48:7d:dc:70:a7:e6:a0:
fa:f4:4c:e4:18:18:2c:45:f6:92:23:57:02:5a:10:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:4D:4D:ED:D3:90:4B:29:6C:F0:2E:82:73:ED:68:60:29:A6:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45326B0C54F11EF88465B49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.68.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0a:3d:80:78:ee:43:1d:53:5d:ae:f0:8b:76:79:45:8b:a6:
87:f3:80:d9:03:9c:1c:5e:07:80:ca:d3:01:b5:4b:e1:30:be:
df:6d:45:e3:b8:64:43:cd:9e:45:08:46:83:be:fb:92:5d:38:
96:67:84:67:9e:13:46:c4:a2:55:e1:a4:dd:60:04:10:e3:a0:
ef:99:2e:e4:29:c0:86:64:e7:75:ce:ed:06:68:26:2f:f3:d9:
6d:c6:07:fe:df:ce:88:06:15:49:a4:e8:41:1d:bc:fc:26:74:
3e:8a:29:7d:c6:25:cd:78:4a:85:b2:43:35:69:32:e9:5b:fe:
36:38:fd:eb:46:52:b5:ea:ab:bc:9f:eb:f3:14:d3:b4:68:04:
1a:bb:54:79:e5:a0:f9:ed:45:73:a2:89:55:21:c2:94:4e:21:
a3:77:49:f8:45:85:ca:b5:05:56:71:20:ca:10:ca:99:cd:4d:
4c:d5:3a:02:fa:a0:14:0f:fe:44:05:7d:4d:b4:7e:10:ed:fe:
31:39:8b:0e:8e:22:02:33:05:d2:59:66:94:58:54:14:e6:7c:
af:a0:97:0a:ee:b0:f7:fc:75:f5:42:f1:e1:26:38:a5:63:68:
08:94:58:97:1c:11:1a:81:3b:eb:6e:9b:5a:90:53:fe:0b:d6:
5f:3e:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client