Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F452536AC54E11EF8E27DF42762E951A.roa
File: F452536AC54E11EF8E27DF42762E951A.roa (raw, json)
Hash identifier: m4SX6Bdl+Cs45w4zIrI+JZDCYXO10BBj9HTnszabHgU=
Subject key identifier: 6B:CF:D7:83:B2:18:89:5B:BF:8A:81:F2:D3:E7:7B:3C:44:1C:89:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F452536AC54E11EF8E27DF42762E951A.roa
Signing time: Sat 28 Dec 2024 19:07:17 +0000
ROA not before: Sat 28 Dec 2024 19:07:13 +0000
ROA not after: Fri 12 Dec 2025 19:07:13 +0000
asID: 984
IP address blocks: 154.210.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77053 (0x12cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 19:07:13 2024 GMT
Not After : Dec 12 19:07:13 2025 GMT
Subject: CN=67704c65-7ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:cb:52:d3:06:30:39:32:37:3d:cd:97:c7:
ac:24:6b:95:ac:40:a5:c4:2e:de:2c:60:62:45:d5:
ce:cd:c4:c9:e7:40:14:0d:d2:cf:71:42:fe:31:d9:
26:59:04:12:e4:9e:da:49:1d:c0:33:89:38:ba:50:
7c:94:a0:fa:ce:25:18:73:63:7f:46:d1:1b:d3:c1:
88:02:5a:ed:37:01:a7:62:5d:ff:7a:90:76:95:44:
e7:3a:fb:46:0d:b2:2b:01:40:7c:5e:57:3e:12:37:
9c:6f:91:49:77:5f:b9:3d:52:d4:7b:d7:c5:81:2f:
0f:fb:85:6f:9a:9c:47:3d:6e:4b:8e:c0:3c:e4:b3:
bb:d9:9a:3b:9d:0d:7b:19:99:a4:e9:04:47:b6:96:
f7:64:e4:51:05:7b:bc:ed:c3:e8:dd:31:90:d3:e2:
45:71:9f:da:71:b9:f9:aa:d8:b4:a7:87:3b:85:7a:
21:c7:c4:08:49:46:b0:71:bc:7d:7b:ec:a0:e5:cc:
da:f1:9f:c8:3e:8b:d0:77:b1:15:f4:76:4e:f6:73:
af:b6:33:33:45:1d:ae:09:91:1a:b7:58:c1:36:dd:
7f:ab:10:7e:d3:af:ba:8a:d4:cf:64:77:c8:b1:8e:
2e:69:bb:42:0e:2a:f9:ce:e0:fe:c6:54:b7:53:fd:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:D7:83:B2:18:89:5B:BF:8A:81:F2:D3:E7:7B:3C:44:1C:89:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F452536AC54E11EF8E27DF42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e4:e9:b2:38:26:15:6f:fb:0b:eb:45:a1:c6:39:44:83:25:
60:bc:83:b1:f0:01:9b:21:bc:32:48:da:1d:e0:57:eb:14:09:
32:10:ec:f0:be:81:5e:7f:8a:1d:63:04:d7:c1:c2:2b:fa:ab:
a2:b7:df:3d:43:ad:63:81:3e:92:ca:9d:4b:f2:98:47:b1:b8:
00:dd:67:e7:f4:99:77:d7:71:25:63:22:04:24:5a:ea:87:cd:
5b:ac:d7:0c:84:1b:9a:57:05:4e:9f:42:b3:8d:9a:cc:64:35:
99:8f:cc:d1:0c:6b:93:05:74:ba:fd:cf:3d:4f:8c:92:ff:b1:
0f:33:23:cb:b5:21:c3:c1:bd:14:24:c2:a3:51:a2:e8:eb:05:
c3:e7:b7:c1:16:2a:95:ad:41:98:2b:38:d5:11:43:86:95:ba:
b9:aa:5c:e1:75:b7:a7:8a:84:0f:60:2e:4b:5f:fc:97:3b:f2:
33:75:06:ba:bb:5f:f9:b9:f8:ee:ce:f2:b4:f7:a9:9a:0a:08:
d7:32:2b:bd:0d:50:ec:c9:8e:ce:0b:3f:5c:05:7f:e4:cc:4e:
ac:72:26:5b:69:c0:1d:3c:73:64:ea:6d:fd:f0:c1:85:86:64:
58:40:c0:1c:8d:fa:c1:75:cc:96:91:28:da:a9:1b:e9:6b:b9:
e8:af:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:33 2025 by rpki-client