Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C0E334C1BA11EF8064607D762E951A.roa
File: D7C0E334C1BA11EF8064607D762E951A.roa (raw, json)
Hash identifier: GqxM3g4V9fJItzUQsCywtCA80a/T2YyCNh2GkN+m6rY=
Subject key identifier: C2:AE:25:76:A7:72:D7:52:23:64:71:B8:94:BA:16:DD:DF:BE:64:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C0E334C1BA11EF8064607D762E951A.roa
Signing time: Tue 24 Dec 2024 05:49:30 +0000
ROA not before: Tue 24 Dec 2024 05:49:26 +0000
ROA not after: Wed 10 Dec 2025 05:49:26 +0000
asID: 984
IP address blocks: 154.193.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74217 (0x121e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:49:26 2024 GMT
Not After : Dec 10 05:49:26 2025 GMT
Subject: CN=676a4b6a-01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:1d:ab:62:3e:65:4d:48:12:b8:ed:59:2a:
51:6b:56:5a:f3:96:8e:d4:68:74:97:5e:ac:e5:a7:
ca:df:64:dd:f5:e5:bb:a8:00:f6:5a:8f:6c:1d:c8:
b7:99:17:47:c8:43:91:dc:ce:b2:89:7d:03:bb:85:
f0:7a:8d:be:dd:45:32:48:36:0e:f5:1f:92:9c:a6:
95:39:2e:d1:bc:0d:8e:cc:5e:5c:90:ff:4c:eb:a4:
96:7b:56:1a:92:92:fc:47:24:24:77:a3:51:f1:21:
69:b4:9c:5b:bd:45:e3:df:18:1c:a5:b7:dc:ba:f7:
14:a3:a9:46:01:ac:3d:f6:25:3d:5b:26:14:88:d7:
61:07:4b:c1:68:76:cd:7d:c7:ac:e8:fe:3d:da:0d:
81:dd:b1:21:4c:34:e6:38:c1:ff:4d:dd:48:f7:72:
3e:3b:d2:d7:1c:44:87:9c:0c:4f:3e:65:c4:f7:5a:
2c:9b:f8:8b:84:27:f3:1a:c6:b8:c5:5e:04:c1:aa:
fc:3b:a3:c0:35:20:ea:a1:07:0f:9e:11:7b:93:95:
3c:34:37:90:8c:3d:3e:b7:80:53:f7:e1:d8:28:47:
64:5b:be:70:1c:39:6d:95:6f:cd:1f:96:0b:62:d2:
fe:33:a2:f6:d2:f3:40:43:a7:cf:2b:21:ec:f8:91:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AE:25:76:A7:72:D7:52:23:64:71:B8:94:BA:16:DD:DF:BE:64:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7C0E334C1BA11EF8064607D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:50:c8:69:19:50:ad:22:a7:71:54:2d:85:70:7e:f3:5d:8f:
f6:25:56:03:08:82:0c:80:85:d6:08:b8:5a:b8:bb:4e:5a:91:
0c:38:e5:2c:8e:d7:7f:71:14:98:2e:a5:bb:bb:e3:38:8a:7f:
aa:c6:dd:15:f1:a5:c6:0c:dc:74:a7:21:d8:ec:c4:b8:6d:3a:
0a:6b:66:db:85:28:6d:ef:29:67:ac:3e:76:d7:d9:e1:10:eb:
31:20:56:c2:a9:49:08:8d:62:b4:64:4e:bb:00:12:75:70:bf:
ea:af:22:8e:9b:97:3e:3c:88:0a:1d:0b:27:b9:ec:5b:d0:3e:
0b:8b:36:1c:13:f1:71:a2:80:a6:1a:ce:62:3c:f8:f8:8f:cf:
0d:2e:69:dd:a3:15:10:1a:ff:46:7e:62:ed:cd:64:e9:39:a0:
c0:ca:de:f7:5f:0f:f4:9f:a6:18:9b:05:47:78:fe:79:b9:d6:
71:cd:db:c5:a4:76:2e:db:7b:80:50:be:19:a9:8b:4d:c5:1b:
a0:5c:45:4a:fa:59:c4:c9:9f:b1:e4:12:30:5c:f8:56:a5:00:
b3:40:1c:d0:54:83:dc:bb:9e:b0:e8:cd:93:c3:2c:d6:43:82:
e7:62:41:f4:55:e3:a2:0d:91:7f:0a:fe:67:3e:05:52:4b:5c:
b2:44:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:20 2025 by rpki-client