Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7C6BC2C1AA11EFBC8CFF99762E951A.roa
File: ED7C6BC2C1AA11EFBC8CFF99762E951A.roa (raw, json)
Hash identifier: YBCdhnsishwR1P9uBvmj15cro0U4GYz8COgJv2Pggs4=
Subject key identifier: 55:2E:D9:2E:50:AF:93:F6:C1:5E:67:90:64:3A:84:E0:45:73:44:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01212B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7C6BC2C1AA11EFBC8CFF99762E951A.roa
Signing time: Tue 24 Dec 2024 03:55:34 +0000
ROA not before: Tue 24 Dec 2024 03:55:31 +0000
ROA not after: Wed 10 Dec 2025 03:55:31 +0000
asID: 984
IP address blocks: 154.92.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74027 (0x1212b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:55:31 2024 GMT
Not After : Dec 10 03:55:31 2025 GMT
Subject: CN=676a30b6-2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:e7:8c:10:f5:3f:e6:d5:af:10:45:01:db:
5a:99:10:2d:83:df:ff:62:b9:ff:86:96:12:79:1a:
c4:72:55:3b:3c:d7:77:e5:ce:c4:85:d6:95:13:07:
66:71:df:14:a8:df:64:e5:06:6c:2e:ab:99:ac:c3:
75:40:33:4a:b7:c2:d9:2c:93:b7:6e:2c:29:38:dc:
54:e0:60:97:65:f1:95:97:14:f1:32:74:d9:e2:4f:
21:36:d7:7c:a3:82:8d:12:4e:96:46:c6:6c:07:44:
62:dd:69:16:2e:93:3a:06:75:7d:1a:6f:74:c4:82:
d6:4e:b3:3c:a1:f5:89:e0:d4:38:b1:bd:7c:71:2d:
cf:44:c3:d8:db:b9:68:47:87:20:54:da:b2:23:22:
c8:c5:79:2c:b3:d7:2d:44:85:b4:d5:c8:76:b3:47:
a8:88:9a:a6:a3:1d:40:0b:10:55:97:2f:e3:73:4b:
c0:ed:78:a5:5e:da:b7:c7:f8:94:8d:d7:2c:1d:f0:
bc:37:0c:ca:cc:dc:93:5d:6f:7d:26:31:f8:59:5d:
c8:14:6e:50:2f:1e:8f:2f:43:e3:a8:e3:db:6f:d2:
c5:77:2b:8d:77:45:c3:15:d2:83:89:3a:48:ac:3d:
4b:99:5b:a3:14:bb:b9:d9:46:cb:6b:7c:ca:35:02:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:D9:2E:50:AF:93:F6:C1:5E:67:90:64:3A:84:E0:45:73:44:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7C6BC2C1AA11EFBC8CFF99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:af:48:cd:ea:07:96:96:e6:22:dc:38:d1:9c:f9:4e:b5:2b:
7c:38:5c:c7:0a:14:f6:d2:85:df:6f:e0:10:79:4c:a7:78:d3:
4b:da:46:1b:79:b0:d2:2a:43:bf:1f:a6:bc:24:d6:6a:a8:58:
93:20:48:fd:9e:fa:5c:a2:11:db:16:b8:6c:67:50:45:43:de:
12:08:f1:d6:e2:7a:19:93:4b:d5:aa:7d:ae:88:93:eb:a6:8a:
2d:38:e9:3e:1d:ef:e7:58:c1:23:47:24:4e:bd:9f:f4:7c:f9:
65:b8:c9:47:6d:1c:52:86:f6:11:ef:a2:36:df:77:3b:0f:e7:
a5:09:98:99:c9:a7:67:dc:63:0c:27:eb:bb:a7:4e:00:be:b1:
14:43:6c:52:d2:9d:b9:c0:49:68:b3:72:d7:29:4e:37:ec:31:
44:ae:ed:d8:7d:df:9d:8b:50:6b:8d:38:e9:fd:43:79:a9:77:
35:f9:e9:d4:6b:0a:80:0e:30:c2:1b:3d:53:11:f3:a9:9f:26:
3d:8e:95:ad:a4:d3:54:3f:d8:85:bb:25:bf:33:81:0f:60:2b:
2e:06:1f:73:5b:f2:49:a4:62:76:45:3f:9c:a6:1d:37:80:ea:
29:45:79:77:cf:fd:a7:ea:60:cd:8b:55:ef:87:51:14:32:89:
bb:71:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:42 2025 by rpki-client