Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E74032C38411EFAC094D67762E951A.roa
File: E4E74032C38411EFAC094D67762E951A.roa (raw, json)
Hash identifier: GcxhjkQ4AvaplHV48PHF2oIcUd3tIouAuXvH22wdoMM=
Subject key identifier: 3F:59:76:5C:92:ED:E4:54:94:B4:DB:DA:A6:F9:6A:90:7F:64:EF:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012786
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E74032C38411EFAC094D67762E951A.roa
Signing time: Thu 26 Dec 2024 12:28:22 +0000
ROA not before: Thu 26 Dec 2024 12:28:18 +0000
ROA not after: Fri 12 Dec 2025 12:28:18 +0000
asID: 984
IP address blocks: 154.94.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75654 (0x12786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:28:18 2024 GMT
Not After : Dec 12 12:28:18 2025 GMT
Subject: CN=676d4be5-bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:67:67:31:c1:36:8c:8f:05:43:31:8f:de:
67:5a:8a:0e:b2:59:3b:3f:81:2b:84:6b:4e:b0:05:
cd:50:3c:c0:59:e6:d7:09:1a:32:8f:fe:bb:b1:54:
e2:a5:3d:e0:ab:36:eb:d2:e7:88:7e:6c:58:7a:cc:
09:9c:d2:05:d9:64:7e:71:48:64:15:06:3a:ff:db:
76:f0:00:81:64:61:87:fa:6e:48:9d:93:78:34:7e:
09:07:e6:d6:fb:38:66:d9:26:1e:ed:cb:22:ca:30:
14:7c:8c:cf:6a:c3:d5:7c:22:ff:5c:86:0e:f9:1d:
db:55:3c:f9:31:0a:67:f9:8d:69:19:7b:0f:f7:72:
42:1a:a1:28:b3:44:b3:6a:ca:3c:18:aa:0d:69:77:
f8:c7:69:b1:a0:77:1f:fe:42:5d:97:39:c6:2c:69:
ea:d0:d0:22:58:d1:2b:8a:49:3a:bb:6d:2f:ac:ef:
e5:3f:5a:cd:f0:8c:0c:db:b1:e4:16:e1:0a:a0:47:
05:cd:9c:c6:30:ad:78:b5:4b:53:da:04:7f:22:5b:
ac:d0:b2:55:e0:e2:58:a9:73:86:1c:1c:8d:0b:c9:
de:b4:be:de:ee:67:d1:76:bf:bf:1b:06:2f:ae:ec:
4b:b3:14:62:01:da:69:ad:5b:7c:1a:03:03:82:90:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:59:76:5C:92:ED:E4:54:94:B4:DB:DA:A6:F9:6A:90:7F:64:EF:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4E74032C38411EFAC094D67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.218.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ee:fa:7b:4a:70:68:42:db:8e:bd:71:14:c2:c0:a2:2d:7b:
dd:04:1e:df:ef:24:35:3e:e3:6a:2c:f8:ff:7d:6c:e8:bc:2c:
0a:bf:73:81:28:ae:57:3a:1d:70:e9:41:89:5f:d3:37:f6:dc:
65:d9:1b:ff:08:6f:d1:21:2c:0c:24:82:60:a5:4d:99:07:55:
94:75:a8:98:f7:2e:e3:95:d0:da:51:4c:41:4b:c3:3d:84:1e:
7e:c4:e1:ad:c8:b1:dd:d7:54:e6:eb:4b:fb:b8:8c:10:95:57:
d7:c1:82:38:19:d4:bc:aa:35:c6:c8:c3:79:7e:e1:86:78:3b:
b8:59:e5:b5:7f:1f:da:f4:65:57:0e:56:95:18:8d:a3:8a:a8:
90:a0:d5:09:b8:05:c0:1f:68:2e:61:70:14:e6:76:a4:f1:ab:
da:87:aa:f3:00:48:d9:9d:04:13:c0:f1:bf:d1:4a:c0:ef:31:
87:1a:7d:14:f4:51:28:76:b8:9d:ba:f9:d7:b3:be:bf:3b:99:
34:11:ea:85:c8:c4:69:01:2d:78:e3:bc:c1:70:5c:20:ce:66:
5a:9f:f7:b5:cb:16:b5:05:d4:f0:bf:56:99:3f:58:b6:13:09:
49:2d:76:6b:14:5e:e9:d4:34:95:95:d1:e6:fa:3e:d1:c8:6e:
07:5a:ab:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:28 2025 by rpki-client