Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F818A6CC32111EF9DA33B5A762E951A.roa
File: 2F818A6CC32111EF9DA33B5A762E951A.roa (raw, json)
Hash identifier: uWJxK0LBwcnfVkZbyiBJxB9BAVULX1B6MKcyuPDxbOA=
Subject key identifier: C1:DF:AD:5F:90:C4:36:B4:89:32:E3:19:E3:28:FE:20:A1:9A:CC:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01256A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F818A6CC32111EF9DA33B5A762E951A.roa
Signing time: Thu 26 Dec 2024 00:34:37 +0000
ROA not before: Thu 26 Dec 2024 00:00:33 +0000
ROA not after: Sat 01 Mar 2025 00:00:33 +0000
asID: 984
IP address blocks: 154.211.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75114 (0x1256a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:33 2024 GMT
Not After : Mar 1 00:00:33 2025 GMT
Subject: CN=676ca49d-75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:60:7d:5f:18:eb:fa:41:a0:48:39:66:bf:
02:04:b9:60:05:f8:12:ff:ba:73:25:d4:dd:35:f3:
59:d5:11:dd:7b:4e:57:f2:a9:e9:9a:62:ed:cb:8b:
d0:57:4b:df:3f:4b:02:61:32:c6:09:c3:87:24:09:
e9:fd:26:29:7f:68:33:92:df:5c:d7:2b:9c:66:a8:
76:11:1f:ec:e0:1b:a5:37:2b:8e:e5:21:45:94:05:
d0:1a:eb:96:c9:63:f8:67:ad:63:97:83:bc:53:e5:
de:1a:c5:97:ac:0e:90:b4:6f:8e:12:e7:36:30:0f:
94:ad:c7:93:e5:30:b5:b4:a0:51:c4:73:1f:57:11:
9a:d2:92:29:d0:71:b1:73:56:84:b1:bf:c1:87:24:
ba:2a:f3:3f:74:b5:3b:f8:ab:e1:36:03:5a:d9:e2:
d1:70:03:8c:bd:ff:84:b8:d2:1f:41:b6:31:16:12:
99:73:b2:24:60:23:2d:ef:9a:d0:c6:6f:2f:90:c6:
71:69:f3:58:d6:5a:d2:96:db:e7:14:9c:76:c7:65:
59:b1:fc:42:2a:de:61:bb:f1:39:12:7e:f8:f3:1d:
8c:77:ad:6b:98:be:bf:19:cb:c3:c8:61:68:84:00:
33:f4:01:78:73:19:52:95:f6:12:82:31:38:f3:db:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:AD:5F:90:C4:36:B4:89:32:E3:19:E3:28:FE:20:A1:9A:CC:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F818A6CC32111EF9DA33B5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.128.0/17
Signature Algorithm: sha256WithRSAEncryption
77:5a:36:72:1b:1a:19:0e:99:72:87:e9:ca:da:97:5a:05:f1:
9d:71:2a:65:ca:74:19:47:2a:52:b6:0d:b5:c4:8e:7c:72:71:
b1:d1:62:78:eb:c8:32:52:25:f3:48:22:83:45:c5:45:5a:77:
2e:7a:dd:58:00:93:9f:6e:d8:57:64:40:e1:a7:f3:5c:96:4e:
1b:a6:ee:82:0d:20:3a:f1:b9:bb:dd:c8:27:6a:b3:92:75:27:
b7:af:50:6c:51:8a:ac:5b:60:76:6c:c7:22:f3:f2:4f:3f:12:
57:45:ce:c6:f9:73:dc:4f:e1:ae:c8:a1:f2:83:ad:68:4b:c4:
53:fe:50:5f:22:a9:12:aa:ef:cc:10:1f:c3:3d:c4:9f:c5:92:
77:69:aa:94:6f:0a:a4:7e:28:8d:14:54:21:02:fd:63:66:7a:
d8:ba:f8:28:97:69:11:f1:bb:8d:30:91:df:3e:af:27:9a:da:
8b:09:7f:55:ef:f7:d7:3b:b0:48:e7:d7:51:22:e3:31:b2:68:
d0:3e:d4:8b:32:0d:16:9a:46:75:5f:c0:61:ba:6e:82:87:98:
0e:09:0f:c3:69:3a:cb:08:c5:9c:c7:c7:c6:ca:bd:e1:3a:d0:
27:5b:71:e3:62:86:f0:18:22:ad:9e:d8:dc:a0:98:9e:1f:13:
e1:97:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:03 2025 by rpki-client