Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC3F898C1B511EFAF65B85F762E951A.roa
File: FBC3F898C1B511EFAF65B85F762E951A.roa (raw, json)
Hash identifier: k4hCF9UT9XZVzGciVOKORTB6529nmk+Xm5f5NFUzrCI=
Subject key identifier: 6D:B0:5E:A6:9D:E1:34:2A:BF:B5:3E:58:47:0D:73:87:C9:30:7E:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC3F898C1B511EFAF65B85F762E951A.roa
Signing time: Tue 24 Dec 2024 05:14:43 +0000
ROA not before: Tue 24 Dec 2024 05:14:39 +0000
ROA not after: Wed 10 Dec 2025 05:14:39 +0000
asID: 984
IP address blocks: 154.193.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74159 (0x121af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:14:39 2024 GMT
Not After : Dec 10 05:14:39 2025 GMT
Subject: CN=676a4343-e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:23:1b:0d:f2:00:6d:03:9e:a8:7a:28:7f:
a5:f5:40:f5:5e:18:b5:fe:2c:4e:2d:0d:59:4e:be:
3e:52:87:74:9c:b8:68:ed:cb:05:ac:07:ca:44:1e:
a5:62:36:5b:c1:b4:99:6f:c1:e6:9d:37:4d:0d:04:
84:a1:81:fc:b4:e2:1a:83:a1:ee:6f:21:d8:24:35:
ba:09:52:b0:cf:10:74:9b:d5:be:c0:a1:fd:89:36:
ed:a5:f7:dc:11:ef:d0:20:16:90:4b:8b:22:dd:54:
0e:9e:f3:ba:f1:3a:78:3d:c1:3c:e1:7c:03:ac:4f:
eb:11:a0:f3:9f:1e:d2:1d:4f:a3:eb:2b:87:44:51:
23:c8:43:65:36:96:5c:8d:96:68:63:96:fa:e4:33:
6b:72:05:d2:d3:45:3f:91:85:7e:eb:8b:89:05:fd:
81:76:c9:9f:92:14:bd:99:19:d4:36:66:ad:10:19:
e8:bd:81:b9:1a:ac:42:f9:f0:b0:1e:36:5a:19:20:
88:95:62:ac:80:09:9f:b5:2a:60:61:c3:17:09:2a:
1c:c1:d1:f0:a1:0d:a3:00:bb:21:7e:06:9c:3d:08:
80:a0:e1:bc:1e:ba:39:a5:1b:f0:98:07:97:e8:3d:
49:1d:44:d0:25:d8:85:ac:cf:dd:f5:88:7c:9a:f1:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:5E:A6:9D:E1:34:2A:BF:B5:3E:58:47:0D:73:87:C9:30:7E:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC3F898C1B511EFAF65B85F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f9:b6:1a:bf:96:92:f9:ae:99:ea:49:2f:da:ad:25:6a:5c:
0f:f8:a2:ea:c2:2c:1e:d5:2b:c3:b2:33:a0:fe:37:d3:44:a1:
35:01:67:35:55:6a:b6:6d:b6:09:9a:5b:73:25:49:8d:d8:7d:
7e:96:88:2a:c4:15:82:de:9a:83:c7:d2:19:09:cf:39:2b:a6:
f1:99:23:27:84:93:f5:af:2a:09:f6:3d:81:9d:1f:50:e0:e4:
15:11:45:de:d8:9f:eb:12:ee:7d:29:79:e1:79:b0:d7:56:8f:
4d:88:70:a8:bf:fc:76:e5:8c:f9:22:ad:25:05:ca:f6:18:1b:
cb:b6:9b:91:67:ed:fe:74:88:59:b0:76:53:11:b1:83:7a:f8:
37:17:a6:76:b0:49:f1:f0:60:13:5f:0e:7b:7c:6b:d7:9e:02:
15:ae:dc:7f:ee:54:76:a5:ab:48:82:d0:16:e3:5f:33:b4:b1:
ae:32:5d:29:ca:af:d2:76:4b:f8:4c:0c:3b:3a:00:93:ab:91:
c9:6b:39:e3:6d:95:7f:54:16:fb:67:95:11:15:60:73:3f:c4:
54:46:7a:7a:2b:9e:37:c6:83:24:9a:f1:a2:ae:96:23:c6:e5:
31:8b:23:d8:4d:a5:7f:d9:dc:58:90:a7:2c:61:9c:6b:3b:8f:
ba:92:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:14 2025 by rpki-client