Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF2E35EC40A11EF8DE9D947762E951A.roa
File: ECF2E35EC40A11EF8DE9D947762E951A.roa (raw, json)
Hash identifier: NWHzS2Rm/B3JUgC8y+LLrkKJD7+ZZcTaZ8JRIcYtnNo=
Subject key identifier: 1F:B0:46:4B:D3:67:94:BC:8D:32:5A:A4:D4:72:62:13:ED:35:1C:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012913
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF2E35EC40A11EF8DE9D947762E951A.roa
Signing time: Fri 27 Dec 2024 04:27:48 +0000
ROA not before: Fri 27 Dec 2024 04:27:44 +0000
ROA not after: Fri 12 Dec 2025 04:27:44 +0000
asID: 984
IP address blocks: 154.196.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76051 (0x12913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:27:44 2024 GMT
Not After : Dec 12 04:27:44 2025 GMT
Subject: CN=676e2cc3-c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:6e:c4:32:71:cf:2d:96:bf:6c:8e:06:09:
1e:63:db:9d:34:83:3b:87:a0:01:d6:19:08:7d:a8:
24:87:4b:d1:b3:f0:26:95:3f:a8:75:b3:58:bd:e8:
e5:29:0a:50:4b:c7:7c:87:5b:a7:59:ee:f2:7c:46:
72:b3:c8:a1:14:e6:a7:b5:63:ad:1f:74:67:28:7e:
1b:02:bd:29:cb:95:6a:0e:55:c4:0b:b1:9f:cf:9c:
8a:cb:fe:8f:c9:0d:46:31:da:e9:9f:d9:bc:2f:ea:
47:14:7b:f1:9f:4d:b2:91:66:60:70:3c:ef:1a:3c:
5a:76:04:23:6d:94:8d:f4:f7:b3:1c:74:59:b1:cb:
15:1f:56:67:15:db:0b:78:4d:1e:18:27:5c:eb:59:
10:6d:98:3b:84:6d:c1:15:6b:9b:f6:a1:97:9d:4c:
65:4e:4c:18:58:85:99:39:0f:e0:07:16:c2:74:ff:
98:64:40:15:50:ad:4f:80:38:b2:af:a8:4e:75:7b:
f3:04:d4:05:4d:a9:16:a9:43:35:e7:8e:47:55:fa:
a0:20:cc:48:9c:bd:94:e9:66:e6:30:82:d0:d2:0d:
9b:f9:4b:85:f8:74:b7:51:ef:e3:9f:39:8f:db:a5:
34:51:83:9e:e6:8c:e3:9a:da:c8:e8:07:d1:7c:cd:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:46:4B:D3:67:94:BC:8D:32:5A:A4:D4:72:62:13:ED:35:1C:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF2E35EC40A11EF8DE9D947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:55:a5:12:b4:62:dc:de:c1:df:4e:1c:68:87:57:57:b9:8e:
6e:06:74:74:1a:18:6b:33:a0:82:97:1a:8b:da:8f:35:14:2a:
d4:f4:34:29:b9:91:04:ee:2b:48:b1:68:70:63:41:a5:c6:a0:
66:23:40:7a:f7:ba:7e:9d:37:c4:c6:26:3c:3e:af:9b:39:35:
27:e1:3a:02:f8:17:99:e2:cd:ba:4d:01:bd:c0:96:16:03:b4:
d5:fa:b7:97:bc:26:d8:79:d4:5a:fc:6d:ad:87:43:d6:d7:fa:
80:3f:bd:f2:b8:75:bf:c1:35:6d:18:7c:e3:c4:35:65:9e:86:
2c:5e:44:e8:1f:e9:f4:2d:b5:d3:05:f7:67:38:53:ba:5c:aa:
67:65:cd:c5:ff:88:13:3b:9f:10:d8:95:9e:e3:a2:31:64:77:
6f:a6:34:f2:c9:60:9c:50:98:5c:0a:c9:4e:23:0e:d5:ab:ce:
b7:1f:96:c7:7b:8c:2a:b0:32:d2:46:8e:42:33:03:e5:3a:97:
6e:d6:44:63:ca:91:b8:bb:c1:47:d3:95:a6:ae:ca:52:49:4f:
94:bb:8f:a9:ca:14:57:27:56:2b:c5:13:9b:3e:23:c9:67:37:
6f:df:a2:c6:0d:fa:58:f0:a9:bc:c6:5d:af:61:46:2a:96:c9:
33:3f:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:07 2025 by rpki-client