Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7F3602C32011EF8EE0EF57762E951A.roa
File: AA7F3602C32011EF8EE0EF57762E951A.roa (raw, json)
Hash identifier: ArPXZJqrxjk6p/8cTQ0qcEKSI73muKENdAPna9Sww4w=
Subject key identifier: 5D:A3:C4:15:4B:C5:7A:1E:CD:EA:76:6D:77:94:D7:AB:6C:D7:85:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012564
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7F3602C32011EF8EE0EF57762E951A.roa
Signing time: Thu 26 Dec 2024 00:30:54 +0000
ROA not before: Thu 26 Dec 2024 00:00:50 +0000
ROA not after: Sat 01 Mar 2025 00:00:50 +0000
asID: 984
IP address blocks: 154.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75108 (0x12564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:50 2024 GMT
Not After : Mar 1 00:00:50 2025 GMT
Subject: CN=676ca3be-34c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:1a:e9:a4:e1:8f:1a:9c:eb:cb:27:bf:1a:
22:ae:47:a7:c7:aa:f0:60:b8:41:f0:a1:4a:db:5b:
9a:5e:36:23:cf:b7:96:48:69:fb:14:76:3f:ce:96:
82:3e:01:70:bf:91:c0:7d:25:14:e6:42:bf:b9:46:
0a:53:2b:4f:65:03:83:85:d3:5e:2b:eb:2c:03:92:
a7:15:11:24:79:eb:1c:d3:73:90:26:e3:04:60:5e:
33:75:85:01:90:1d:f3:58:5a:22:bf:91:c9:00:04:
19:ae:39:d5:bf:35:62:36:dc:0c:f4:25:89:af:41:
9c:2a:68:37:32:00:fc:e0:6d:12:41:47:df:20:07:
80:c1:f5:d8:04:1e:84:c3:f0:b7:1c:80:64:26:69:
7b:63:ef:9f:60:d4:8e:ee:50:91:a9:4f:61:1a:01:
a3:91:06:e0:27:32:bc:ec:73:22:05:b0:c0:17:9c:
61:ef:fb:0f:6e:bb:98:45:65:44:7a:23:b1:2d:93:
bf:63:e0:43:eb:ad:7f:3a:92:af:4e:18:30:dd:96:
56:52:c7:c6:f3:bf:3a:b6:64:76:8f:c3:27:91:55:
4e:57:f1:67:d0:ee:79:90:5d:33:f0:18:2b:ec:f7:
68:5a:6d:b9:7d:bc:0a:d8:b3:43:73:bf:52:89:20:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:C4:15:4B:C5:7A:1E:CD:EA:76:6D:77:94:D7:AB:6C:D7:85:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7F3602C32011EF8EE0EF57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:52:dd:a3:7d:73:a5:1e:d4:7c:f5:cd:95:37:88:8f:c1:d2:
77:04:05:cc:b2:8b:61:bf:ca:15:15:2d:fa:38:2a:c9:4f:16:
03:51:8a:92:69:a8:f0:4f:0b:ac:74:d7:e4:66:42:bc:bb:94:
4a:64:5d:67:39:17:f4:ca:eb:ca:34:92:b1:39:78:e7:90:c3:
b7:bc:ac:eb:ce:02:ff:fc:87:5c:c2:1d:37:d0:05:f6:bc:68:
ff:08:ec:e4:38:f5:0f:99:6f:e2:95:5a:e6:b1:1e:20:9b:d0:
c7:5a:f7:70:48:b3:6a:41:59:9f:79:fe:5a:7a:52:98:1c:7f:
fb:4e:47:c5:df:ad:99:06:8d:90:c6:3f:8a:8b:1c:3a:ff:e2:
57:f9:c7:e2:7f:49:bf:9a:d3:1b:61:fd:7c:83:ad:da:cc:ae:
f3:be:43:4f:c2:74:7c:cb:68:2e:25:ad:2d:ed:4b:d1:a2:da:
cc:9c:3b:b1:5f:e3:db:0a:45:bc:a5:ce:d5:ad:9a:36:2f:13:
b0:f3:10:35:95:3c:33:07:6f:df:00:e3:3e:29:4a:e1:32:00:
d7:46:24:c4:e8:c5:85:d5:15:1f:39:68:2a:f9:70:53:41:b6:
78:39:fb:1d:dc:ec:30:6a:28:38:3a:34:5c:c9:14:70:d2:5f:
07:3e:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:10 2025 by rpki-client