Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CE8EFAC26D11EF8A68FE7F762E951A.roa
File: F4CE8EFAC26D11EF8A68FE7F762E951A.roa (raw, json)
Hash identifier: ljjxndBpI9fbNNnUMKXI00Jm4u6ZUC8+8WQzAIyn4Sg=
Subject key identifier: A6:40:C4:43:9D:D6:AF:09:D9:60:5B:F3:4F:2D:C9:6D:84:D4:A5:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012442
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CE8EFAC26D11EF8A68FE7F762E951A.roa
Signing time: Wed 25 Dec 2024 03:11:39 +0000
ROA not before: Wed 25 Dec 2024 03:11:35 +0000
ROA not after: Wed 10 Dec 2025 03:11:35 +0000
asID: 984
IP address blocks: 154.211.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74818 (0x12442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:11:35 2024 GMT
Not After : Dec 10 03:11:35 2025 GMT
Subject: CN=676b77ea-5955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:7c:20:ba:88:16:51:36:96:b1:f5:0b:01:
1d:3d:0e:b5:f7:1c:f8:81:39:bb:19:4c:a9:23:e0:
a4:d4:0e:19:0b:91:3a:fd:e3:c0:e0:26:ce:10:75:
da:b7:f5:87:cf:04:1a:ff:93:00:0d:e8:fb:39:9e:
0c:6c:b9:34:dd:48:db:b7:f4:f2:6c:a1:a5:11:4d:
e7:a6:4e:22:0b:98:a8:e3:a3:0b:a5:04:33:b3:1f:
73:94:dd:5a:4d:c8:fe:7b:14:6b:0f:8f:f3:10:00:
b9:ff:93:ef:f3:f3:4f:2a:6d:76:b3:3a:6f:3c:93:
16:bd:d7:51:7f:be:b1:c6:62:95:f2:7c:12:ef:d7:
22:0e:42:f7:7f:2a:11:cb:c9:3f:11:be:5d:53:76:
1f:f1:0e:bf:fe:e6:99:e5:6a:48:08:c8:76:fc:db:
4f:4a:bc:28:9f:51:0a:43:6c:5a:7c:8b:c9:ea:a9:
c0:61:e8:fb:b1:4f:25:8e:1b:ce:ff:ee:e2:4c:e5:
0f:3c:33:1e:e7:d1:98:f9:2a:71:f6:23:d6:0f:0c:
c8:8f:2f:4a:df:70:25:3b:d5:2d:59:28:d3:78:0f:
11:62:eb:20:46:f1:94:66:ab:b3:8a:e8:47:ae:db:
7a:db:80:f0:ea:f1:d0:f1:cd:42:8d:fd:8e:47:8e:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:C4:43:9D:D6:AF:09:D9:60:5B:F3:4F:2D:C9:6D:84:D4:A5:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4CE8EFAC26D11EF8A68FE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:8c:7f:16:37:82:75:ba:f4:a5:11:f9:46:ba:7c:a2:35:26:
99:87:1f:c3:f6:aa:7c:09:c6:f7:37:ce:9a:f4:0b:a2:b1:6b:
80:4c:dc:55:af:d8:76:8a:24:27:99:6e:be:7f:7a:89:ec:68:
98:8d:3b:22:f0:50:e5:c4:f6:53:59:56:cd:e5:f6:4e:56:7b:
4f:d7:41:53:46:17:27:0e:8c:8e:0d:8c:68:6e:af:19:b5:74:
58:89:fa:ed:88:ae:e1:01:5a:9f:9d:07:65:8b:df:e9:2a:57:
45:8f:ad:b9:5a:14:52:89:97:b9:2d:49:87:d2:33:72:cc:20:
51:48:01:9f:bd:dc:64:a3:24:23:25:96:aa:78:58:a3:46:6e:
d0:48:d2:a9:bc:d1:29:52:03:f5:5a:09:e0:13:3a:2a:a0:d2:
4e:f8:b2:e1:f8:c8:40:ff:4d:d8:31:88:8d:9a:7f:05:cb:ab:
fe:da:17:d9:60:57:8e:8e:2c:ba:c5:05:2d:c8:74:35:36:f7:
04:ce:90:e3:f5:6c:66:15:b3:cd:46:d5:63:64:2c:3b:d8:91:
d9:3f:61:42:5d:36:91:8e:33:e1:b6:75:68:8b:28:4c:f1:d4:
d0:57:a7:b1:3b:76:7c:b9:23:2a:f5:a2:85:0a:f3:bb:36:0a:
62:15:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:46 2025 by rpki-client