Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F001248AC5F811EFAA75CA78762E951A.roa
File: F001248AC5F811EFAA75CA78762E951A.roa (raw, json)
Hash identifier: A4+DYBkbifPvAh7+pTJuHrHG4H1z6Oi3k6W4e7W0tjo=
Subject key identifier: AB:0B:04:A4:BB:D3:4E:FE:49:29:3B:28:62:6F:DB:10:0F:1A:43:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F001248AC5F811EFAA75CA78762E951A.roa
Signing time: Sun 29 Dec 2024 15:24:04 +0000
ROA not before: Sun 29 Dec 2024 15:24:01 +0000
ROA not after: Fri 12 Dec 2025 15:24:01 +0000
asID: 984
IP address blocks: 154.213.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77338 (0x12e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:24:01 2024 GMT
Not After : Dec 12 15:24:01 2025 GMT
Subject: CN=67716994-4f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b3:89:71:eb:0f:c1:f6:27:3f:8c:6f:bf:4a:
2c:24:6e:c8:6c:87:d2:b3:21:7b:c5:a9:7d:52:f1:
45:ec:eb:b9:b1:e2:8c:8f:4f:dd:e2:dd:3d:cd:c7:
f7:2d:16:82:95:d2:2a:8a:9f:db:44:6f:6d:7c:eb:
76:b5:3f:85:8e:30:e2:94:75:dd:46:64:fd:f0:47:
20:f3:5a:36:4f:a6:4c:c7:2f:f7:6b:6f:be:14:80:
b4:98:2d:b3:b4:58:3b:69:69:c7:3f:09:d8:37:17:
f0:4d:7f:82:fb:7c:2f:7b:b3:b0:71:c6:87:65:01:
2f:1e:fe:01:93:c7:2d:8c:94:ff:67:ce:68:38:b9:
12:09:7b:65:3f:0d:a5:13:5b:a5:23:57:d6:6a:56:
f1:2d:1b:f7:26:16:15:b0:d5:ba:c5:ca:a4:3f:7f:
cb:4f:10:12:aa:8f:2d:78:22:55:aa:7f:7d:6e:28:
11:37:c7:4b:88:4b:f3:7f:f3:d5:9a:06:8e:ba:11:
4c:ac:d9:a8:49:0c:b5:e6:65:af:11:57:d4:8d:2e:
51:ba:9c:12:09:d3:bd:fd:f1:d8:64:a0:9e:10:e5:
e9:55:67:f1:6e:4e:3b:60:36:f6:d7:7b:44:09:dc:
47:0e:db:91:11:3a:10:fd:4c:9a:1b:ea:c4:36:bd:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:04:A4:BB:D3:4E:FE:49:29:3B:28:62:6F:DB:10:0F:1A:43:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F001248AC5F811EFAA75CA78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.219.0/24
Signature Algorithm: sha256WithRSAEncryption
49:00:ec:5c:23:13:22:f2:0a:3e:34:4a:ff:85:e1:e9:ac:a3:
d8:47:4c:76:19:e9:19:d1:69:42:0b:6c:d2:89:12:a5:dc:e0:
78:a6:9d:5d:14:02:4c:87:4a:bb:09:59:e9:d2:a8:bc:55:be:
25:f5:b9:4c:dd:b3:eb:14:04:6b:3d:61:39:71:09:b8:09:fe:
7e:c7:4d:32:b4:a6:71:36:4c:5a:08:4c:be:13:e9:3d:a9:0e:
a4:0f:e8:07:84:7e:86:ce:f8:98:27:e5:f5:a5:cd:a1:27:52:
c2:fe:e1:a6:34:e6:13:6d:b1:04:5f:f5:c9:1d:36:73:49:73:
e5:82:0a:63:c9:70:cd:9d:14:89:6d:c4:31:84:3b:76:23:42:
1b:99:b7:f7:61:62:e1:bf:85:39:48:83:35:c4:f5:27:40:5b:
4a:51:84:65:e5:61:1f:c6:c7:ea:d8:4f:11:81:46:dd:98:6e:
2b:ea:e4:dc:34:3c:5f:6a:16:94:17:17:18:04:d2:a1:ec:6b:
ff:02:e6:f1:a2:e2:d9:20:e0:04:7a:b9:11:26:75:6a:11:4e:
58:d4:8e:74:b2:53:70:2a:c1:71:05:dd:e0:c0:8e:87:06:80:
ee:89:f0:0c:34:16:57:65:12:59:b3:64:76:4e:13:c4:1d:c1:
62:1c:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:29 2025 by rpki-client