Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED70DF9AC1C911EFBC68625C762E951A.roa
File: ED70DF9AC1C911EFBC68625C762E951A.roa (raw, json)
Hash identifier: 5VECRuQGOUIg19qVrBwVpHSg6Wqo5cwjzf/5FtDocIY=
Subject key identifier: AF:C8:B1:E3:2D:2D:4D:F8:20:65:02:0F:41:5A:4E:78:E5:18:B7:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01224F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED70DF9AC1C911EFBC68625C762E951A.roa
Signing time: Tue 24 Dec 2024 07:37:29 +0000
ROA not before: Tue 24 Dec 2024 07:37:25 +0000
ROA not after: Wed 10 Dec 2025 07:37:25 +0000
asID: 984
IP address blocks: 154.193.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74319 (0x1224f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:37:25 2024 GMT
Not After : Dec 10 07:37:25 2025 GMT
Subject: CN=676a64b9-8c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:20:06:a2:59:6c:f8:17:f6:a6:80:0a:9e:
61:37:a3:9c:05:8c:3c:86:15:8e:d0:29:37:70:8b:
29:b2:03:26:62:be:a9:fc:06:c9:f6:5b:53:70:62:
cf:e5:87:5d:31:b2:b1:77:1f:2a:d2:b8:1d:c6:c9:
8b:e4:68:a1:0a:be:4f:b2:d2:8e:d8:45:9e:09:fe:
a2:0c:4a:2c:cd:3c:5b:18:10:f9:f6:79:86:3e:05:
52:d3:da:eb:d3:0e:9c:e2:31:96:56:99:fc:cf:7d:
5e:ad:73:29:b2:fb:79:fd:d4:34:cb:cf:c3:36:9d:
f7:9d:a5:fe:b2:2a:fd:9b:8a:4c:ac:8b:90:17:d9:
0b:d0:bb:23:d9:b9:df:6f:d1:9b:a6:01:db:ef:00:
f3:71:3f:cd:0d:5e:3c:06:a6:1a:cb:8e:c9:db:d8:
07:1f:f9:52:e1:1e:2d:67:78:4d:09:26:35:36:28:
8b:1e:61:2f:8b:62:c1:74:df:a8:ee:46:7e:cf:3f:
78:4b:02:c1:df:eb:42:6b:03:3b:77:2c:08:f5:fd:
c8:bf:e8:48:2d:cc:67:61:a8:e8:84:ee:71:70:76:
a2:6d:81:eb:bd:07:37:bc:86:af:65:9b:6b:0f:b6:
01:59:45:7f:9c:a3:4b:55:65:17:31:4c:53:51:8a:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:B1:E3:2D:2D:4D:F8:20:65:02:0F:41:5A:4E:78:E5:18:B7:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED70DF9AC1C911EFBC68625C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6d:89:1c:81:04:79:4f:65:d8:1e:ff:82:5e:4d:2b:02:f0:
0a:c3:94:2d:ff:73:02:ea:49:e1:d5:74:2c:da:f1:8d:f7:ae:
8d:f7:b7:07:82:32:86:4e:82:24:81:aa:7e:48:3b:cf:2f:2d:
66:f4:66:40:e3:b6:40:1a:39:7c:d2:cf:34:17:ff:da:ec:99:
bc:40:1b:55:1b:49:ba:d4:56:15:0e:2d:b0:74:6e:bd:d7:d1:
66:56:01:0b:0a:03:fb:85:69:46:04:e1:ed:9f:be:cb:bb:54:
3a:6a:9d:a5:79:4b:e9:2a:36:b2:58:23:70:d6:00:a5:a7:29:
d1:56:f5:a7:b1:d3:03:c1:eb:d2:f9:be:32:0a:38:c3:23:95:
1d:69:d9:d5:19:84:f3:dd:51:1e:5a:7a:2d:05:bf:b2:5c:70:
da:bc:6c:22:88:f0:32:c0:a9:8b:ce:c9:25:6a:d7:d2:32:7b:
48:49:35:25:6b:03:17:83:ca:c8:81:5a:6f:64:85:f4:10:64:
6f:84:11:25:96:56:50:dd:48:c4:27:0f:47:3f:77:e8:f7:2e:
f4:e1:a1:07:cc:7b:e3:ba:11:0e:96:5f:a9:a6:8a:e8:aa:fa:
33:0d:41:b1:b8:9e:7d:5e:ec:90:6d:2f:e7:e8:fd:76:e1:ca:
97:00:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:59 2025 by rpki-client