Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA0589AEC52711EFBA5D174D762E951A.roa
File: DA0589AEC52711EFBA5D174D762E951A.roa (raw, json)
Hash identifier: vahgI9+sXoIzI7gli29r1vkBJ6LaWlkg6atETYODdPg=
Subject key identifier: E2:1C:5D:A3:F4:60:CE:55:13:87:F6:09:88:E9:59:6F:52:DD:55:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA0589AEC52711EFBA5D174D762E951A.roa
Signing time: Sat 28 Dec 2024 14:27:22 +0000
ROA not before: Sat 28 Dec 2024 14:27:19 +0000
ROA not after: Fri 12 Dec 2025 14:27:19 +0000
asID: 984
IP address blocks: 154.204.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76695 (0x12b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:27:19 2024 GMT
Not After : Dec 12 14:27:19 2025 GMT
Subject: CN=67700aca-8c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:c7:ff:53:ae:94:23:bd:ab:dc:59:54:a8:
d9:4f:0c:be:02:f9:7a:10:38:72:c4:3f:c5:f5:55:
eb:0a:e4:c1:52:21:37:ba:2f:c7:ab:5a:8b:92:1e:
18:04:2f:11:c9:23:db:9f:5b:b6:61:08:26:b9:db:
3a:cf:ec:f6:2d:a4:3f:79:b5:46:5a:9c:21:f5:5b:
d8:4e:5a:61:93:0d:0f:dc:de:8b:f6:6d:88:30:03:
5d:16:44:42:f0:07:24:f2:bb:c9:c2:44:cd:fd:49:
65:b4:bb:35:53:d7:7c:67:f7:e2:ba:33:69:be:27:
7f:5e:fa:91:50:8e:ec:d4:fd:ef:1e:cf:05:72:7b:
b3:26:6c:cd:08:94:73:03:1d:57:08:ab:76:35:a6:
bf:03:7c:d7:f9:58:83:38:a2:1d:c0:ac:98:07:27:
f4:24:ce:1d:12:82:c1:92:fe:b2:d4:86:a4:db:af:
cb:0d:5f:46:6d:8b:6a:29:58:91:91:11:32:c1:fa:
94:5b:8f:fa:0b:ec:2a:6d:c9:ea:b1:db:47:ef:ef:
14:23:58:1f:fa:ea:05:2d:44:ae:94:af:39:ad:52:
68:6e:30:23:34:9f:e7:8d:c7:63:8e:7a:f9:ea:69:
9d:4f:4e:da:1a:99:ef:e1:95:54:17:8d:28:8a:47:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:5D:A3:F4:60:CE:55:13:87:F6:09:88:E9:59:6F:52:DD:55:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA0589AEC52711EFBA5D174D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5c:12:3f:1d:89:f7:f5:d6:ab:7b:0b:8c:9e:76:11:09:00:
bb:cf:98:9f:ec:b4:52:ff:29:3d:2e:1d:54:75:cb:a8:cb:38:
5b:f4:83:73:37:46:30:1b:c1:97:5c:56:09:70:01:3b:50:e3:
79:03:a2:78:43:c0:e3:d2:6c:93:c3:20:28:44:03:0a:7e:c9:
91:63:89:81:c7:0a:cf:bd:eb:a2:92:25:7e:d5:09:75:0c:e1:
51:d3:0a:24:07:da:99:b7:e8:51:1d:52:a2:4d:59:ef:1e:28:
e4:50:e2:2e:e6:11:8e:3a:d1:07:fa:b2:a8:1b:92:45:34:e6:
9e:77:ca:94:c8:20:fb:46:e5:3c:20:f1:fa:fe:36:7a:50:3b:
cd:d9:1c:5b:21:a5:63:93:5c:0d:df:85:44:56:65:00:01:45:
57:13:58:68:71:b8:68:ec:93:ff:1d:d9:f5:8e:76:94:cb:b0:
3f:9d:53:c1:7e:a9:96:fc:54:e4:38:94:31:f4:9f:5b:30:19:
38:bc:e0:18:03:b9:f4:e2:66:53:7d:a9:8f:95:34:e0:20:04:
dc:e0:31:68:62:9a:3a:bb:7c:db:33:a1:40:86:dc:fd:16:b3:
4d:59:ca:25:38:ed:e4:3a:54:24:84:14:04:57:4d:3e:51:d1:
09:45:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:36 2025 by rpki-client