Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE330F98C41611EFBCE72F92762E951A.roa
File: FE330F98C41611EFBCE72F92762E951A.roa (raw, json)
Hash identifier: vSz0Dlo9dl3oKLqDw0n6i41UCIAzwx30PwG9svpU3KY=
Subject key identifier: 9D:3A:2F:13:B3:2E:90:C0:B0:30:44:D1:77:2D:5C:5E:1A:BB:56:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012965
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE330F98C41611EFBCE72F92762E951A.roa
Signing time: Fri 27 Dec 2024 05:54:11 +0000
ROA not before: Fri 27 Dec 2024 05:54:07 +0000
ROA not after: Sun 12 Dec 2027 05:54:07 +0000
asID: 17561
IP address blocks: 154.197.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76133 (0x12965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:54:07 2024 GMT
Not After : Dec 12 05:54:07 2027 GMT
Subject: CN=676e4102-6b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:bb:1b:18:e1:20:3a:b8:ca:b7:bf:ef:58:
31:eb:75:e9:bc:a0:9b:cf:3c:68:bd:29:bf:07:6f:
9c:8d:3a:d3:14:ed:bc:89:6d:a8:fe:c6:a3:21:b3:
db:a7:e9:f2:ec:a3:8c:7e:c1:35:dd:0a:bc:15:67:
42:7b:05:86:7d:b5:e7:2c:3d:65:ca:a9:c0:0d:6b:
60:94:01:74:47:56:6b:54:d0:6b:17:63:2e:66:3f:
50:d9:56:ed:e3:a9:f3:4f:c8:2d:b4:67:df:1f:80:
c4:d4:ea:dd:a0:11:b1:31:56:ce:5d:35:f2:57:46:
64:2d:98:02:fa:81:d7:20:f7:bd:94:88:65:1a:91:
d8:03:72:2c:a1:1e:ff:c8:67:a4:f5:86:27:d1:42:
21:3b:6a:a2:de:4c:31:7c:99:3d:f9:d7:2a:99:00:
16:90:1e:da:bb:ba:6a:8a:ff:f1:24:80:75:5c:d5:
2e:36:d3:91:4f:af:ea:1b:9a:06:1f:f9:7b:3c:95:
87:3f:db:c9:bc:81:a9:76:52:04:d4:93:60:fb:03:
1e:4b:54:ce:06:3e:27:2f:07:88:5d:1f:da:ec:bd:
93:90:6b:20:51:1f:47:5b:99:c9:0c:03:0b:18:61:
90:e5:b7:fb:40:42:9f:32:d7:38:95:bf:df:25:f4:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:2F:13:B3:2E:90:C0:B0:30:44:D1:77:2D:5C:5E:1A:BB:56:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE330F98C41611EFBCE72F92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.85.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:99:4f:33:2c:e4:37:ad:1b:a8:e8:eb:61:a2:bc:6b:d1:fa:
92:bf:98:3f:5f:5f:52:c0:6e:61:3b:d9:5a:66:ca:ba:64:1e:
d8:41:fe:a0:06:e7:59:b9:72:a5:a2:86:5b:2a:7f:45:28:19:
91:12:75:cd:cc:b4:b9:43:7e:1d:8d:9c:8c:8d:f8:8e:a7:8c:
ee:5a:30:b8:58:96:b0:53:5e:38:c6:a8:a6:9b:34:fd:26:b2:
72:3b:9b:59:44:4f:2c:f1:fa:e3:4f:46:c0:ca:8c:41:29:c5:
70:a1:b8:14:ea:a9:53:94:47:7c:72:30:68:e8:10:86:af:69:
e0:b7:6f:f7:ef:72:ea:fb:50:43:d9:76:93:ff:2f:b4:4d:c5:
ff:ee:9f:7f:30:1f:06:f9:1e:bc:27:48:9b:a8:a9:97:06:d3:
4d:ee:4b:4c:15:19:d9:75:17:e7:3c:46:99:24:09:af:41:1a:
3c:db:a8:15:c4:50:97:35:2f:1b:bd:c4:b9:ec:16:12:8b:9d:
66:68:da:17:a0:82:f6:30:cb:e5:45:45:11:cb:de:53:85:6b:
40:99:35:5a:a2:75:81:82:fc:d2:e2:81:5b:98:a7:67:73:b7:
97:c5:a4:68:de:de:63:6c:3e:6d:70:a2:32:88:de:f0:e3:30:
40:43:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:07 2025 by rpki-client