Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0D8512AC0CC11EF8A409F8F762E951A.roa
File: F0D8512AC0CC11EF8A409F8F762E951A.roa (raw, json)
Hash identifier: 5ja4+uEemrLynvNRQA/4tV4FDy6vUl5smV4hbwkOUME=
Subject key identifier: 9A:0A:DD:48:6B:09:64:23:76:C5:E3:C8:16:97:49:A3:0E:7C:C1:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0D8512AC0CC11EF8A409F8F762E951A.roa
Signing time: Mon 23 Dec 2024 01:26:32 +0000
ROA not before: Mon 23 Dec 2024 01:26:28 +0000
ROA not after: Wed 10 Dec 2025 01:26:28 +0000
asID: 984
IP address blocks: 154.82.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73234 (0x11e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:26:28 2024 GMT
Not After : Dec 10 01:26:28 2025 GMT
Subject: CN=6768bc48-bccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:e7:f9:93:07:0f:f0:d2:29:cc:8c:05:d6:
7a:77:5e:28:aa:40:fa:0f:28:fc:6b:5e:7f:80:fe:
83:3e:91:85:d1:49:87:79:59:06:a0:4a:0a:a0:0d:
65:0b:da:d8:93:3e:f5:15:e1:c9:62:5d:d1:62:b3:
a0:8f:e1:f7:50:2b:39:31:04:77:a5:01:ae:3e:39:
88:ec:d6:e9:86:a5:0d:75:29:1e:6d:b6:b0:40:f4:
5d:f3:96:87:5c:1e:68:01:e7:90:f5:4a:25:7c:d7:
a8:fd:3d:35:d7:4c:6c:e3:df:05:8b:7f:f0:65:f1:
5d:a5:e3:ff:4f:29:14:93:51:87:71:3e:24:c7:41:
5c:ea:1b:2e:af:2f:a5:5a:6f:b5:4e:e5:fc:18:ed:
7e:b9:6b:94:d3:c6:82:8d:03:06:58:15:99:55:f1:
84:42:43:41:36:6d:fa:cd:c9:85:a9:e3:a7:43:54:
55:e6:f3:d6:87:23:40:12:a5:94:e6:10:ee:94:6f:
fe:4c:00:07:f8:eb:15:8c:6c:e8:4a:3b:e5:89:12:
8a:a8:76:76:9a:63:af:4c:d8:78:c9:e4:a1:96:d6:
4a:d7:2a:66:20:b6:b9:96:e2:59:83:48:20:66:e9:
09:22:c4:dc:91:24:ae:33:3d:bc:94:96:91:44:86:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0A:DD:48:6B:09:64:23:76:C5:E3:C8:16:97:49:A3:0E:7C:C1:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0D8512AC0CC11EF8A409F8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.252.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d1:64:6f:8c:d8:c8:b6:14:47:b7:aa:a2:15:7e:28:34:24:
1e:71:24:6a:fc:b5:9d:e9:3d:51:7c:15:e2:08:e7:b1:85:c0:
fe:51:92:81:94:c6:05:84:33:30:8e:7d:15:cc:2b:b1:4e:ee:
08:60:10:fa:ae:dc:c0:01:d4:37:c2:69:c6:3d:de:1b:d6:7c:
72:c9:1a:ac:3e:63:f0:15:6b:89:14:71:90:a3:da:48:ce:ad:
ad:e6:ce:c0:bc:03:90:3e:f2:a6:36:4d:01:6c:cb:2b:5e:ea:
05:67:fd:fa:32:45:02:a7:1e:dd:cd:8a:56:de:54:21:f8:b0:
36:37:99:c1:b0:34:26:64:97:6a:47:61:b5:4b:9a:dd:b3:9c:
01:28:3c:cc:01:74:64:c6:ef:c6:bf:78:bd:47:2a:d4:ef:de:
13:65:c6:69:eb:8a:b4:f3:26:5e:be:81:a9:9a:e4:9e:8e:19:
6c:90:48:96:3c:0e:df:f9:ca:3c:ec:90:1d:d8:4f:7b:f0:57:
bf:75:ad:e1:8e:6f:05:9d:fe:d6:f2:67:c3:0c:49:54:16:c9:
ee:4b:1e:59:9b:19:e8:96:6b:6a:f5:52:a4:39:89:4c:2f:70:
dd:fc:0f:0d:06:9b:e6:ed:fb:5f:bd:8f:d8:80:2a:d9:d2:39:
c8:7b:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:52 2025 by rpki-client