Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFFD10DAB5F711EF84BACD7C762E951A.roa
File: FFFD10DAB5F711EF84BACD7C762E951A.roa (raw, json)
Hash identifier: lIXdgzY/GCQB8jehxWlU7hZ2yNn/gGVK580rYKsbGDE=
Subject key identifier: FC:D8:65:B2:04:48:58:8A:32:A8:E7:74:AF:6F:9B:3C:49:42:83:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFFD10DAB5F711EF84BACD7C762E951A.roa
Signing time: Mon 09 Dec 2024 06:37:03 +0000
ROA not before: Mon 09 Dec 2024 06:36:59 +0000
ROA not after: Mon 19 Oct 2026 06:36:59 +0000
asID: 150706
IP address blocks: 154.91.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72117 (0x119b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 9 06:36:59 2024 GMT
Not After : Oct 19 06:36:59 2026 GMT
Subject: CN=6756900f-eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:7f:0e:e0:bb:42:60:ab:69:ac:17:e1:11:
a0:9d:9f:22:9c:73:e3:20:12:cb:c6:28:bf:a5:04:
f7:08:e5:84:3a:21:ff:86:cb:66:a2:bc:d4:df:a7:
35:92:31:cc:d1:2d:48:59:39:af:67:df:1b:51:f8:
64:1b:fa:c7:c4:4c:48:93:ba:42:c9:e5:8c:a0:24:
33:f7:8d:25:c8:b5:8b:34:a7:4d:ab:f8:bc:8f:95:
75:2e:28:04:9a:c5:24:6e:20:f1:d0:4a:7d:f5:a1:
f8:6e:3f:5d:2f:7c:7a:b4:84:a4:a1:fe:0c:0d:bc:
2a:0d:51:21:a5:7c:82:f9:22:bd:0a:15:2e:f6:a6:
4f:ef:7f:49:c0:42:ae:88:79:f9:85:a2:b3:12:8d:
62:69:aa:e8:00:2f:69:0a:82:a5:36:46:42:dc:e8:
6f:cb:cc:9d:cc:db:af:7f:5d:6a:b0:39:1e:a3:07:
20:93:a2:50:26:d6:92:ca:5c:18:6f:a1:74:ed:23:
44:92:d1:e9:73:14:16:0e:f1:77:65:21:ab:a6:80:
cc:39:3c:2d:b5:79:ea:7c:55:ef:59:ec:9b:d6:b6:
42:82:6c:27:26:32:7a:ba:9c:d8:c9:61:40:5b:69:
06:34:e5:4d:f4:1e:55:b3:67:76:7e:41:18:d2:e7:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:65:B2:04:48:58:8A:32:A8:E7:74:AF:6F:9B:3C:49:42:83:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFFD10DAB5F711EF84BACD7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:4a:3a:55:05:b2:58:11:4a:ed:c0:a4:bd:9e:8f:3b:d0:86:
8d:e6:99:97:0f:34:a8:03:5e:ed:60:3f:c9:ca:4f:39:51:72:
27:67:92:e5:42:9a:e8:eb:cd:6d:51:39:c1:26:92:ea:94:f3:
46:bb:64:f7:05:f6:c2:30:20:28:fd:43:86:7b:11:8b:d0:ea:
ec:0f:fa:fa:f1:7f:f5:34:31:ca:45:1b:f3:65:c1:80:b9:11:
97:17:70:74:2f:1f:a3:09:97:c3:20:94:09:75:27:7c:e4:e1:
3c:65:6e:85:df:10:f8:f0:89:60:37:fe:95:c8:6c:12:b6:b6:
82:c1:56:69:d1:ad:87:c1:08:e4:d1:fb:e0:63:75:40:4d:22:
87:ce:ef:bf:a0:da:e7:1b:6d:bc:9c:86:5c:23:95:9c:3a:ff:
78:9d:e0:76:9d:c8:7d:69:67:1a:2e:d7:c4:a0:b8:7e:be:0c:
b4:98:cd:c5:b6:09:5b:f2:31:f7:ff:61:d9:6f:3a:4f:b8:1d:
1e:73:64:4f:87:ea:ff:88:06:3b:fb:9a:68:68:75:fa:b9:72:
81:d3:25:08:25:9c:c2:5e:1c:24:e2:3c:11:56:b9:99:9a:71:
0d:0c:02:d0:48:21:91:b8:9b:a7:99:8d:75:4f:ee:22:9f:47:
d4:1d:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:02:44 2025 by rpki-client