Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9836126C26211EFB9EA3DAE762E951A.roa
File: D9836126C26211EFB9EA3DAE762E951A.roa (raw, json)
Hash identifier: IcQyZ8G+lHMml9qbIeOAgoGxO2QSp1Nni3vU01H+E50=
Subject key identifier: 1B:2F:85:03:07:EA:C8:B4:0A:C7:F5:1D:70:60:55:4D:55:57:B1:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9836126C26211EFB9EA3DAE762E951A.roa
Signing time: Wed 25 Dec 2024 01:52:08 +0000
ROA not before: Wed 25 Dec 2024 01:52:05 +0000
ROA not after: Wed 10 Dec 2025 01:52:05 +0000
asID: 984
IP address blocks: 154.199.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74694 (0x123c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:52:05 2024 GMT
Not After : Dec 10 01:52:05 2025 GMT
Subject: CN=676b6548-7e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:8d:de:2a:2d:f6:58:8f:15:b7:28:55:dd:
3f:81:a7:61:79:b3:9e:6f:f0:cc:13:35:62:c3:6b:
8a:95:42:89:6e:7c:1b:ee:0e:77:7b:7c:48:82:d3:
4d:59:74:6b:2e:1b:b1:1d:63:88:16:01:fa:25:0e:
31:cd:aa:ec:ec:77:1a:82:8f:4a:a8:78:9a:c9:ba:
13:44:2a:c0:9c:64:b4:56:87:52:6d:f6:da:f6:d5:
0e:2c:85:ea:6c:57:1b:83:44:53:a8:bc:29:6e:32:
ea:23:f0:7f:c2:5b:93:f2:16:29:a1:a6:d1:15:9e:
b7:3f:38:3e:9c:9d:21:17:bf:fb:64:a5:c4:da:6c:
06:33:f8:8b:0f:8e:41:51:10:99:a8:06:23:5a:18:
ff:69:78:d0:a4:a6:db:42:76:73:20:ae:d8:66:b2:
ee:d9:3c:44:7b:52:88:22:24:9e:94:df:33:96:39:
e1:c2:cd:09:c1:83:a7:4b:18:83:a3:e6:0c:2c:f4:
93:a3:d5:d7:2d:e2:8e:6a:49:3c:90:c0:96:70:f2:
b7:d3:69:1a:5b:d8:14:45:8f:7a:c3:82:fe:10:7c:
ef:d3:41:02:38:58:33:6e:21:48:eb:80:e6:dd:01:
ca:23:75:32:9e:40:95:29:d3:17:a5:a8:fd:6e:77:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:85:03:07:EA:C8:B4:0A:C7:F5:1D:70:60:55:4D:55:57:B1:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9836126C26211EFB9EA3DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:53:34:d4:3e:60:4a:75:e0:46:57:f6:8b:3e:6a:a1:0e:f4:
77:89:c6:b2:26:27:bc:95:4a:e9:cf:d7:65:ad:a7:8d:19:67:
b9:95:e0:70:10:56:58:f9:0b:05:61:27:8d:48:e4:6a:cc:c0:
c1:2d:76:9a:d6:21:46:89:f6:05:f0:3f:97:66:c3:64:6f:15:
e7:c0:37:f8:2f:72:74:7a:c9:f0:4f:7c:09:9f:41:04:51:1a:
7e:ff:9d:bf:fb:4c:93:e7:e3:3e:1c:80:08:b9:5b:a5:ca:64:
f7:9f:6e:7b:bb:c8:6a:72:3a:9e:68:25:9e:c7:59:3a:a9:d6:
89:57:d3:7d:78:20:d7:68:6a:40:7c:34:71:b2:98:47:b2:10:
e3:d3:d2:e0:f0:e6:3d:17:a6:40:17:31:97:a9:a5:99:e2:96:
0a:77:4e:37:6a:0d:3c:ee:4d:24:ee:d3:8d:a5:75:6e:75:8b:
5e:4b:fb:31:84:0f:74:6f:78:61:b4:ee:41:fd:fd:e9:8a:50:
30:ae:79:ee:57:8d:a5:09:2e:16:3f:1f:e9:2c:ce:92:59:d9:
64:92:18:94:44:48:3f:0d:48:81:c8:5e:37:f5:61:d9:7d:cf:
96:b0:94:11:e6:51:f6:8a:54:14:77:ab:b0:c9:e2:3a:c4:26:
bb:f2:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:26 2025 by rpki-client