Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2066A6C53B11EFB626EB4B762E951A.roa
File: DB2066A6C53B11EFB626EB4B762E951A.roa (raw, json)
Hash identifier: ZU86X0wfaGHpzgnhPW0MC7WACmIXlOpmTrua6Z/SjtI=
Subject key identifier: D1:FA:51:9A:DC:A7:0B:6C:D9:54:98:F1:F8:DB:30:0F:8D:79:40:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2066A6C53B11EFB626EB4B762E951A.roa
Signing time: Sat 28 Dec 2024 16:50:34 +0000
ROA not before: Sat 28 Dec 2024 16:50:31 +0000
ROA not after: Fri 12 Dec 2025 16:50:31 +0000
asID: 984
IP address blocks: 154.205.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76877 (0x12c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:50:31 2024 GMT
Not After : Dec 12 16:50:31 2025 GMT
Subject: CN=67702c5a-5b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:ad:af:42:27:2f:9d:f9:4a:67:65:e2:96:
41:52:3b:44:df:61:1b:da:ab:80:bd:4c:84:e7:56:
f1:85:a8:95:4b:9a:ce:b7:88:39:f1:07:2f:52:89:
42:e8:b8:47:e9:0b:dc:20:5d:91:2e:11:11:b2:d4:
c4:9b:af:1e:eb:a2:51:e6:fb:6b:5f:87:12:36:dc:
30:28:84:3b:b8:ab:b1:30:19:fa:ed:da:6e:94:92:
6a:8f:38:6b:1c:21:d8:5b:95:66:c5:91:60:fd:f6:
89:02:de:80:31:7b:05:61:ba:48:d5:5e:bd:f6:82:
4b:4f:a1:54:4a:f7:c2:f6:03:6c:db:16:05:c2:63:
e3:7c:34:61:1b:a8:2b:7c:a4:21:08:fb:78:c8:3a:
e4:d4:3c:7e:55:32:18:92:19:c1:57:e8:e5:1d:9f:
57:00:d5:2c:6a:e0:72:dd:96:69:b8:40:74:28:d1:
b3:79:d5:ec:b7:06:11:b8:df:85:c5:e4:a9:ec:71:
d8:c5:00:d8:f3:4e:3f:09:44:7d:4c:cc:ab:fd:1f:
d4:43:0e:74:c7:10:db:f7:c0:dd:ad:9d:fb:ea:e8:
84:a5:84:f5:68:f9:e6:34:32:99:7f:2b:c5:79:b3:
f9:c9:dc:e7:e4:97:6c:21:fa:00:3f:13:50:c7:5e:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:51:9A:DC:A7:0B:6C:D9:54:98:F1:F8:DB:30:0F:8D:79:40:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB2066A6C53B11EFB626EB4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:22:ad:f2:2d:52:87:c5:d3:a5:8a:54:1b:f8:d6:86:d8:09:
df:ab:45:ee:eb:e1:61:02:f7:38:89:b9:80:68:be:12:ec:9f:
2a:34:8c:2b:38:70:60:15:13:fa:3d:a2:57:aa:9e:3e:60:0e:
77:29:d7:5f:2c:54:10:d4:de:68:d8:16:75:d0:86:e1:9f:cf:
f6:18:23:d2:7e:18:a2:28:61:2f:57:cd:95:7e:1c:2b:b0:04:
51:bc:20:f0:1d:90:8f:34:a7:d0:9a:3e:a1:bd:f8:76:fa:da:
2a:9f:0f:61:e4:bb:cf:f1:99:f8:a0:2c:3c:94:6c:50:35:3c:
56:f4:a7:6f:6e:60:15:17:32:18:ed:46:c7:41:03:6c:5c:d7:
03:86:87:69:db:9c:4b:84:a2:d9:01:b2:e8:41:30:50:7f:da:
bb:15:ba:0c:29:cc:21:6e:d2:ae:90:b3:8f:d8:50:97:bb:d5:
95:13:ee:e9:9b:da:31:c1:c4:54:53:d9:48:b2:49:55:05:94:
ce:fa:1f:2d:f8:7b:d8:aa:d8:b7:63:7a:8e:0d:94:d6:d0:02:
20:dc:57:97:98:45:ff:6d:fb:50:e4:ac:8a:b7:18:a2:1b:72:
2a:ff:70:94:fe:25:86:93:40:7a:ac:87:5f:bf:3c:0b:5a:89:
af:91:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:09 2025 by rpki-client