Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5619FECC1B611EF9113C865762E951A.roa
File: D5619FECC1B611EF9113C865762E951A.roa (raw, json)
Hash identifier: G/t/H815h+LhofQi4jDWPn6DYt5077CUUdYve4MTXCQ=
Subject key identifier: 11:C0:46:BA:BF:96:0A:15:7F:07:EB:BF:7A:72:75:E4:44:22:69:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5619FECC1B611EF9113C865762E951A.roa
Signing time: Tue 24 Dec 2024 05:20:48 +0000
ROA not before: Tue 24 Dec 2024 05:20:44 +0000
ROA not after: Wed 10 Dec 2025 05:20:44 +0000
asID: 984
IP address blocks: 154.193.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74169 (0x121b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:20:44 2024 GMT
Not After : Dec 10 05:20:44 2025 GMT
Subject: CN=676a44b0-7b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:61:f1:33:90:9d:48:a9:ea:ba:89:29:36:
35:fc:6b:dd:ec:31:84:a1:0a:ce:c7:01:f7:a0:e9:
61:2e:d1:9b:98:8a:d1:ad:64:04:f1:9e:34:d9:71:
75:6f:e0:6d:a1:29:ab:eb:9a:65:1c:25:93:ca:a2:
65:e0:ec:33:f2:72:d3:a8:a3:1e:48:f1:98:5f:5f:
90:94:d0:37:f6:33:06:9c:47:57:e6:46:d2:22:54:
a0:ef:95:08:20:18:b0:f4:bd:38:7d:f1:74:ec:60:
70:6a:af:c9:24:06:d9:4a:8b:a2:97:3d:8f:6d:9a:
a1:81:8e:e9:e7:15:b1:7c:7b:2a:a5:26:78:0c:60:
b7:67:01:d4:08:3f:99:6c:97:15:eb:47:29:48:0f:
ea:17:70:10:5c:4b:74:b6:b7:c8:37:9d:5e:95:19:
dc:07:e1:0b:cd:9d:51:db:24:5f:1e:ac:78:9c:ba:
73:14:3f:38:18:79:f1:4f:68:a8:cf:35:b3:e5:e3:
8c:09:ac:ba:ca:55:5c:fc:8e:7a:24:f5:63:52:5c:
c1:8f:94:79:36:7f:2c:c4:b0:cc:49:d4:5b:fe:b8:
32:66:6e:68:83:9d:d0:1c:73:4d:bb:f8:d3:ab:7c:
89:98:fd:ef:40:d3:34:c5:eb:99:7d:23:51:a6:ce:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:46:BA:BF:96:0A:15:7F:07:EB:BF:7A:72:75:E4:44:22:69:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5619FECC1B611EF9113C865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.150.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:75:ef:70:6c:5a:1a:82:ed:7f:c5:a9:e9:02:e8:60:a9:ea:
0e:b9:b9:3c:5d:f8:d9:8a:57:76:e1:1f:63:67:e0:a2:16:14:
f0:d4:ac:17:70:c8:aa:c0:c1:e5:f9:87:f7:00:7d:59:dc:a9:
b1:8f:6e:38:d7:7b:ca:c6:0a:a8:65:bb:e7:a1:e7:14:8e:2d:
f5:09:93:cf:e8:21:dc:60:94:da:41:33:62:eb:be:3f:e9:8b:
c0:9b:4c:ff:8b:5d:96:94:1e:99:09:cc:e9:99:b3:c4:a4:b1:
71:6f:c2:d4:fb:7f:2c:eb:ea:54:81:f1:7d:0a:8a:16:0e:9c:
a5:39:57:9e:91:1c:d3:0c:2b:ec:1f:4d:ca:f8:dd:70:52:e9:
bc:aa:ce:e0:90:65:1d:f8:db:ea:bf:86:01:25:04:cc:e1:69:
b9:ec:72:bb:28:b5:b3:3a:b7:37:27:3c:6b:76:5f:c3:cc:7e:
16:54:5c:9d:c8:1f:d9:ec:4e:74:87:64:1a:3e:05:39:a2:fa:
99:21:66:65:55:e0:f8:a9:00:cd:15:54:96:99:0d:b3:e6:c3:
a6:31:be:f4:72:0e:41:d3:62:a7:2f:74:93:dd:da:7a:4d:e5:
de:49:de:dc:4e:73:2e:37:33:d2:59:28:cd:83:4a:4f:67:e9:
50:5f:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:28 2025 by rpki-client