Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00110EEC1CA11EFBC0BA062762E951A.roa
File: F00110EEC1CA11EFBC0BA062762E951A.roa (raw, json)
Hash identifier: QESzAKEta6dXJkHLZOq1OC8tAcK1q2C+2fVEE54xERE=
Subject key identifier: B0:84:0E:D1:70:76:CB:DB:69:FD:F1:75:7D:EA:B9:D1:97:B7:EC:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01225B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00110EEC1CA11EFBC0BA062762E951A.roa
Signing time: Tue 24 Dec 2024 07:44:43 +0000
ROA not before: Tue 24 Dec 2024 07:44:39 +0000
ROA not after: Wed 10 Dec 2025 07:44:39 +0000
asID: 984
IP address blocks: 154.193.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74331 (0x1225b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:44:39 2024 GMT
Not After : Dec 10 07:44:39 2025 GMT
Subject: CN=676a666a-53f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:dc:2d:47:74:a4:ee:5f:f9:07:82:53:21:
09:c7:a3:86:29:65:13:c7:19:85:9a:85:70:8c:3e:
e0:b2:34:8b:77:08:3d:30:d0:4a:0c:75:1c:40:d8:
5a:ad:44:72:3f:e7:b8:ed:ab:41:ed:13:ee:c1:4e:
75:a6:dc:76:e9:71:af:a8:2c:d4:f8:39:80:a5:15:
56:3d:00:e8:62:49:11:c4:b0:4b:11:64:5c:06:cb:
3d:37:a2:5e:25:6f:c3:65:c3:39:29:d1:8f:c4:9b:
65:a9:06:0b:96:82:95:d1:af:ec:df:fd:a1:b6:4d:
fc:ed:2d:75:39:9f:62:43:cc:09:59:1d:f4:7f:b4:
16:99:f1:6a:87:86:a7:33:5b:1a:7c:62:2a:86:96:
b6:14:72:f0:06:ff:be:bd:85:27:dd:98:3e:30:c7:
c0:25:ee:b3:d7:ff:9a:0d:fa:ac:c4:7f:c5:d0:f5:
6e:a3:a0:c5:7f:5c:f2:de:bf:31:ef:b9:30:ca:1b:
0a:46:02:c4:3a:f6:08:67:d5:12:7d:59:42:0b:b3:
b0:85:3f:3d:dc:b6:6a:82:77:ea:9f:9b:f4:bc:2f:
d8:f7:2b:10:8a:0a:81:23:ad:8b:1c:32:78:24:36:
a7:cf:98:fc:99:1c:78:88:f7:41:e3:90:48:96:cf:
40:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:0E:D1:70:76:CB:DB:69:FD:F1:75:7D:EA:B9:D1:97:B7:EC:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F00110EEC1CA11EFBC0BA062762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f3:94:48:da:b3:76:ba:2e:c9:60:7b:52:3d:14:d1:76:96:
ca:64:4f:62:81:e1:c9:01:53:ce:0f:d5:94:c6:ee:7e:f8:92:
de:7a:d0:1d:45:69:f2:63:78:01:7d:8d:e0:aa:40:aa:21:d9:
d8:91:26:5b:31:5b:87:59:87:e5:d1:23:34:1f:42:ce:36:2d:
0e:ad:94:95:76:6c:83:07:c3:ea:aa:9f:bc:2b:89:0c:2a:43:
2c:b9:33:04:f1:80:84:fa:10:d3:fa:25:9f:94:b0:23:bd:9e:
37:87:e8:fa:fb:ed:87:64:f5:8d:a3:b7:03:d0:f4:61:d0:ae:
45:d3:8e:9a:a6:9d:bf:cc:c6:a9:1c:e0:a8:3c:6c:2a:4c:00:
ce:1e:c8:1d:97:ca:6a:e0:74:98:33:18:fa:2e:de:6a:2a:33:
d4:08:b8:64:85:bf:23:60:c4:a6:09:75:e4:61:e4:7c:c5:7f:
ef:69:fe:c4:b2:39:f4:99:41:d5:fb:be:c6:a5:e1:9b:9a:af:
21:82:ab:bb:0d:b5:3e:46:39:8a:0e:dd:42:7d:9a:3c:27:fd:
a8:84:49:17:7e:69:30:5f:e7:e8:13:5c:32:3c:39:0d:2a:07:
ed:41:0b:c3:ab:f0:ef:06:da:fe:fe:8f:9d:1e:6e:03:8d:92:
7b:68:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:16 2025 by rpki-client