Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5F96EEC1D911EF85171C41762E951A.roa
File: FC5F96EEC1D911EF85171C41762E951A.roa (raw, json)
Hash identifier: s9LsmqlWqq4nkn0y8GMUSPrbhq5HeMoaLvjbqBX52q8=
Subject key identifier: 2E:DD:48:80:B2:77:4E:BF:8C:20:B3:50:BF:E3:29:FE:66:A1:AA:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5F96EEC1D911EF85171C41762E951A.roa
Signing time: Tue 24 Dec 2024 09:32:26 +0000
ROA not before: Tue 24 Dec 2024 09:32:22 +0000
ROA not after: Wed 10 Dec 2025 09:32:22 +0000
asID: 984
IP address blocks: 154.194.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74485 (0x122f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 09:32:22 2024 GMT
Not After : Dec 10 09:32:22 2025 GMT
Subject: CN=676a7faa-bae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:a8:cb:6c:ed:9e:2f:2c:8b:28:33:5c:bc:
4a:52:45:98:81:c4:2d:fa:8f:6c:1b:66:7e:1b:21:
cd:da:4a:2b:ff:4c:31:db:f4:55:94:17:69:94:3d:
6c:68:fe:d6:20:66:3a:92:63:6f:27:8e:22:34:60:
51:59:bb:68:7f:2f:ba:e2:1e:4c:c8:08:fc:dd:7c:
8b:21:bb:75:8c:8c:d8:ff:ac:a5:f5:63:0a:a4:6e:
52:44:b1:b7:cc:90:15:fe:3f:5b:eb:d0:1a:f8:75:
37:40:9d:17:59:d3:30:c7:d4:e0:7f:89:c7:c4:3f:
52:5d:8b:4a:d0:e2:14:d5:b5:02:2f:af:a8:8b:d7:
a5:d2:0e:4d:df:50:b0:2a:bb:0a:1b:c0:bb:fd:91:
fc:07:f5:b9:72:49:91:f2:dc:fe:47:5f:3f:7d:14:
c5:8c:23:87:87:68:00:c5:43:6b:b7:f0:c3:e9:e4:
1b:30:83:5e:51:8d:8e:b4:22:f2:1d:34:a5:c3:78:
a9:f6:0f:26:d3:38:3d:42:a1:27:24:6a:ea:29:85:
c5:f5:e5:82:dd:bd:30:2c:fd:78:33:21:8a:f8:3e:
bc:9e:44:69:04:38:c5:ab:ba:db:2c:8e:ff:22:be:
1a:41:02:d7:5a:d5:2c:e8:83:5e:7f:8f:4f:42:36:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:48:80:B2:77:4E:BF:8C:20:B3:50:BF:E3:29:FE:66:A1:AA:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC5F96EEC1D911EF85171C41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:21:d9:e4:8f:9a:cb:5e:d8:22:ab:2e:17:1e:48:54:d2:9b:
55:dc:fd:93:0b:a3:c0:60:d1:fa:6b:46:4c:81:3d:ff:71:4d:
cd:b2:d0:b1:07:dc:e9:64:7a:33:3b:a9:eb:1f:37:1a:a4:3e:
2f:cb:76:d3:9b:2b:15:b0:9c:dd:7d:11:e6:da:1e:4c:6b:2c:
e3:a6:b3:72:ba:59:cf:e7:30:a9:11:d6:43:f0:2b:ad:40:8d:
ae:15:bf:db:b2:63:50:d0:c5:a6:db:f1:31:e5:5e:e0:11:50:
70:ee:8e:13:a3:84:63:0e:6b:84:6b:01:d6:b6:ee:bc:a6:4b:
07:ac:de:91:45:f3:d4:66:83:3f:9e:0e:94:d4:b1:85:77:d5:
1b:47:8e:a5:ee:79:69:6b:3b:d7:2a:b8:5b:b5:98:9c:1c:ee:
99:6f:13:b9:8f:d3:c9:ad:fa:d8:91:6b:43:58:c8:ce:f8:71:
7e:fd:ce:f8:80:21:d9:ab:e3:b8:79:04:a3:26:df:1c:13:a6:
fe:39:18:42:1a:7e:89:c1:0f:71:17:8a:04:f3:ed:4f:32:34:
0b:ed:c2:71:7b:85:a2:ed:7d:8c:79:d0:f2:f6:f3:20:96:02:
f9:ea:7b:9f:81:19:d6:ac:86:da:1d:20:07:e4:ac:4b:27:11:
1e:1e:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:09 2025 by rpki-client