Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A2E436C1CC11EFAFA0426F762E951A.roa
File: D6A2E436C1CC11EFAFA0426F762E951A.roa (raw, json)
Hash identifier: Tg/cpkeXLTv0bK38E7FhAn5xVNiXZwnMXtDPqQOSFHo=
Subject key identifier: B8:66:A3:82:1D:F0:20:8E:CD:DF:CD:56:2C:3F:2B:D1:25:DB:00:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012271
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A2E436C1CC11EFAFA0426F762E951A.roa
Signing time: Tue 24 Dec 2024 07:58:19 +0000
ROA not before: Tue 24 Dec 2024 07:58:15 +0000
ROA not after: Wed 10 Dec 2025 07:58:15 +0000
asID: 984
IP address blocks: 154.193.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74353 (0x12271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:58:15 2024 GMT
Not After : Dec 10 07:58:15 2025 GMT
Subject: CN=676a699b-8138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:bf:69:46:50:a5:a5:33:f9:69:6b:24:ec:
3d:ec:c7:38:ee:7f:df:76:0e:1f:2a:fa:46:6d:ad:
8f:73:74:5c:de:df:8a:a7:6d:53:19:70:ec:3a:84:
17:4c:cb:57:39:1c:00:75:9d:1a:fb:ad:3c:58:a6:
3b:39:66:71:10:46:f2:01:03:c2:1b:33:e8:f2:49:
ec:83:22:9f:ea:bc:7f:5a:80:46:fe:ca:02:9e:15:
bb:50:50:c7:ed:8a:1d:dc:2d:e3:9f:0f:04:18:4c:
4b:36:09:16:74:45:4d:fa:ba:da:8b:d6:f3:dd:19:
43:41:83:1b:c8:25:a8:a4:86:b2:f1:ab:46:fe:84:
d5:88:b1:3c:09:2a:16:7d:56:63:2d:26:6b:1c:a4:
79:5f:1b:f9:aa:79:33:cf:3f:f0:74:18:ac:44:fa:
46:38:2e:05:2d:af:e0:c5:26:63:6b:b3:a8:5a:f9:
13:ad:a0:6d:46:04:93:b9:7e:1d:44:6c:e8:98:54:
6e:57:f8:16:86:ea:85:d2:ae:8a:3a:33:a5:c0:60:
8b:84:7d:d6:4e:b6:c5:f0:a1:0a:e9:a4:2d:cd:1b:
cd:31:17:48:10:06:5c:13:72:a0:4f:94:77:63:16:
dc:f9:a7:f8:4d:b9:ea:8e:34:14:53:01:a4:6f:ce:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:A3:82:1D:F0:20:8E:CD:DF:CD:56:2C:3F:2B:D1:25:DB:00:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A2E436C1CC11EFAFA0426F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:cf:bd:18:fa:ff:c2:ce:d6:68:95:d4:ba:36:76:07:a3:3a:
1b:5e:e0:94:57:90:80:d7:52:2d:e1:3e:4e:99:8a:3a:43:68:
e8:07:09:58:ac:99:54:9b:41:7d:1e:e1:4f:71:be:a8:23:09:
04:e8:7a:3b:6d:f6:aa:17:64:10:b8:50:ce:ad:2d:a3:99:1b:
6e:2c:0a:af:cc:05:cc:c3:58:58:52:c7:d6:c2:88:fc:ae:71:
04:24:20:ae:98:be:4a:f8:df:39:74:e3:ed:85:89:70:d5:8c:
e0:86:8b:c0:a6:58:d7:84:b0:50:19:f9:0d:04:6d:5f:e1:db:
14:6b:6c:48:36:b1:02:01:5e:3a:31:17:14:c3:76:3b:a2:1c:
8e:48:de:6c:d9:5f:c8:71:aa:cb:07:6f:c7:f9:02:0e:16:42:
92:c6:59:72:87:c2:a5:9d:0c:f0:a5:70:30:19:06:35:d5:91:
c3:8d:42:79:68:c5:4e:92:23:92:e4:4b:ef:c2:b7:93:5c:9b:
a4:a0:0a:5d:1b:38:b6:c8:b8:dd:87:d5:4a:43:af:3b:7e:b7:
3c:b9:b5:dd:14:01:50:f9:b9:ef:57:83:ec:90:c0:f0:58:f9:
49:35:1b:69:18:c7:c7:10:d4:c3:50:ed:f5:8a:1b:7f:e4:a4:
45:e6:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:02 2025 by rpki-client