Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32C4D7CC3D911EF997E157C762E951A.roa
File: F32C4D7CC3D911EF997E157C762E951A.roa (raw, json)
Hash identifier: g4RotdxNdG9130x2xQEvlv5yr9TYciZJi+5gc7QI5o0=
Subject key identifier: 38:3B:51:71:F0:CA:9F:2A:A4:C3:0B:88:86:BE:0E:9F:B7:CE:CB:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01289A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32C4D7CC3D911EF997E157C762E951A.roa
Signing time: Thu 26 Dec 2024 22:37:13 +0000
ROA not before: Thu 26 Dec 2024 22:37:09 +0000
ROA not after: Fri 12 Dec 2025 22:37:09 +0000
asID: 984
IP address blocks: 154.85.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75930 (0x1289a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:37:09 2024 GMT
Not After : Dec 12 22:37:09 2025 GMT
Subject: CN=676dda99-8805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:78:1e:db:13:de:d2:78:84:15:95:0d:86:
aa:d2:cf:12:ee:d8:a8:15:01:ca:88:9e:de:6f:b6:
e3:f9:10:06:b0:35:6d:8a:69:56:bf:55:62:51:38:
ba:b6:5e:e7:48:49:b3:06:0f:b5:cd:2e:ee:8a:b2:
51:89:1e:69:9f:6f:15:95:34:ea:d0:7a:03:a0:a1:
d2:b8:e7:b5:83:e0:2e:3a:73:0d:80:0e:0b:e4:ac:
29:5d:66:a5:4a:64:ae:26:92:9a:ab:8b:9b:4b:5f:
6b:c2:cd:23:8c:06:17:48:8c:26:d8:0f:54:4d:11:
48:aa:e8:93:4b:72:cc:75:d1:60:bd:1a:8f:33:b6:
53:0c:20:28:83:25:63:ad:8c:30:91:d9:ea:86:2a:
45:b9:96:67:c3:e6:3c:11:72:c0:bf:72:a5:02:e9:
4e:41:07:85:7e:e7:ed:53:62:28:16:14:7c:cc:28:
da:b9:fb:85:f5:58:de:83:41:88:f4:32:73:9b:f7:
8f:66:aa:17:a9:a4:f4:24:fc:f9:08:69:3a:8a:3b:
12:62:db:99:8a:c1:a7:4e:23:0a:d4:99:36:09:4c:
91:46:73:1a:a3:74:56:c2:6a:20:4f:6d:ae:98:29:
29:c5:13:57:9a:28:08:f3:17:df:be:b6:66:ec:71:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:51:71:F0:CA:9F:2A:A4:C3:0B:88:86:BE:0E:9F:B7:CE:CB:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F32C4D7CC3D911EF997E157C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:56:b4:b8:43:e7:2e:9a:71:e2:58:b7:ee:29:a3:6a:99:7e:
5b:65:dd:91:db:dd:67:a7:12:55:aa:f1:55:69:f1:ad:fe:a6:
1f:62:8f:ec:34:9b:ef:d0:12:ca:5e:a5:7e:05:c3:f8:66:57:
56:37:f2:18:5c:32:49:63:51:88:0b:84:86:f4:13:dd:fd:c2:
3a:55:04:98:34:92:9d:ad:d9:54:82:84:bf:88:ba:8d:2f:6d:
54:a9:13:66:19:6d:b6:11:68:1d:02:74:d5:d7:0b:0e:fa:0a:
7f:96:5b:e4:45:fd:ed:0f:a3:d5:a7:dd:6e:dd:06:2d:74:e8:
5c:1f:2b:b6:f6:0a:c7:62:f2:a1:ff:cc:a6:01:4f:3d:d1:7f:
fb:8d:df:0c:e2:26:f1:3a:4a:ad:d5:1b:e0:b1:33:c7:b1:77:
19:2a:73:ee:4a:dd:b3:12:4f:7f:c4:eb:f8:c8:03:59:ba:a2:
5f:2d:56:d8:43:ef:49:2e:e8:be:7a:a5:77:ac:d4:07:8a:19:
e5:29:a6:53:a4:df:f0:00:bc:f8:5a:29:d4:58:b8:d7:a6:94:
54:97:3e:33:cb:98:55:48:a8:3b:2f:c3:5c:aa:d6:9c:e6:4b:
8b:5d:01:2a:39:63:14:84:ee:e4:b2:44:07:47:d3:02:1a:83:
41:1c:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:38 2025 by rpki-client