Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D6C204C5DF11EFACE5DA5D762E951A.roa
File: E4D6C204C5DF11EFACE5DA5D762E951A.roa (raw, json)
Hash identifier: y85S7/DyPKuWze9N2O2LRupfNP203BsY2b/Qe9CDYVo=
Subject key identifier: 29:73:F6:11:D6:38:11:03:31:00:B0:86:69:5B:61:EA:73:F5:75:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D6C204C5DF11EFACE5DA5D762E951A.roa
Signing time: Sun 29 Dec 2024 12:24:48 +0000
ROA not before: Sun 29 Dec 2024 12:24:44 +0000
ROA not after: Sun 12 Dec 2027 12:24:44 +0000
asID: 17561
IP address blocks: 154.210.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77124 (0x12d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:24:44 2024 GMT
Not After : Dec 12 12:24:44 2027 GMT
Subject: CN=67713f90-af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:66:78:65:98:56:35:bf:0c:7e:ab:60:37:
ea:ee:c8:ca:2c:8e:82:a1:cc:fc:99:b2:fa:68:63:
e9:0e:e8:d5:85:b6:46:f2:05:94:4d:1a:83:19:d6:
75:cb:47:6e:ee:2d:2b:8a:14:96:5b:73:fd:cb:4f:
3e:47:9d:2a:49:8b:7a:d6:8e:16:7b:9d:ce:af:04:
62:1d:8f:c2:70:a9:71:1a:f9:31:06:b5:85:3a:00:
c5:fc:60:85:78:4e:20:c5:8b:c1:88:d4:c1:8d:b6:
4b:93:df:a7:37:9a:18:4f:f4:ea:1c:12:1b:bb:1a:
ab:2c:ca:c4:4f:5f:b1:eb:69:5e:9f:7e:6e:f4:3c:
30:df:2e:51:bd:12:7c:dc:37:d3:1a:5d:c3:b0:83:
dd:f6:e6:63:3a:fc:5c:29:84:82:da:ec:ef:43:4a:
9f:d3:06:90:4b:aa:f4:f6:9c:0c:1e:3f:b6:54:be:
0c:62:2f:e0:1d:09:d3:d3:f7:43:d1:8d:56:43:4a:
92:f3:5f:13:ab:5b:d2:1c:e8:a1:41:b3:5b:ec:ad:
57:d9:e6:4f:a5:c8:a6:df:f0:b0:35:22:4e:d2:20:
db:40:0a:d1:6f:3c:21:76:ed:2a:37:3d:94:27:34:
6f:d5:34:9e:57:1e:7a:a9:07:74:66:15:79:bc:f0:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:F6:11:D6:38:11:03:31:00:B0:86:69:5B:61:EA:73:F5:75:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D6C204C5DF11EFACE5DA5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.100.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a8:56:5d:71:05:91:9a:1f:24:65:fa:00:78:03:f9:c9:38:
f6:a9:b5:98:0c:ad:ad:e9:d3:f6:b0:d9:c8:af:11:b6:e1:44:
3c:2a:2b:f1:2d:ad:cf:81:6a:cf:c1:e5:6f:33:69:3e:f3:b7:
c9:c9:38:56:49:4e:3a:91:62:5b:19:83:5c:1a:c5:18:72:5f:
a4:6a:32:68:98:3d:64:f1:e6:d7:77:86:c1:c0:72:60:32:af:
15:fd:ad:ca:60:43:56:2c:2a:7a:ac:70:84:bd:05:14:0a:6b:
f1:0e:82:23:25:78:47:86:32:68:48:7c:cc:ec:6d:3c:31:03:
7f:8c:c2:99:47:e2:73:1b:8f:ee:b9:b0:f0:74:d3:c1:fe:73:
74:c1:8e:fe:12:66:d0:e3:0b:da:51:1d:a2:7f:6a:12:e9:18:
bd:8d:fb:2b:1d:05:1a:6c:2c:0b:40:fc:6b:3d:69:3b:2f:eb:
6e:03:bc:0a:00:5d:ff:c3:f3:33:b0:5d:b6:da:5b:4e:fe:23:
c1:69:66:c4:ad:40:09:b6:f0:2e:58:f6:5f:3d:6a:d5:fc:88:
4d:7a:92:28:64:ba:54:87:4d:48:72:8d:e9:65:d0:24:06:cc:
86:58:05:bb:62:1c:56:bf:8d:ca:80:0b:b0:30:58:74:eb:60:
e6:9a:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:21 2025 by rpki-client