Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FA82BCC31F11EFBEC09351762E951A.roa
File: C9FA82BCC31F11EFBEC09351762E951A.roa (raw, json)
Hash identifier: YGyTKFO2t9NSoDHTTi0dTS7JHfMiUMeSgs52nJgvmFU=
Subject key identifier: 53:1F:43:D5:73:09:56:02:38:B3:7B:BA:08:BE:66:44:DE:C6:C4:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012562
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FA82BCC31F11EFBEC09351762E951A.roa
Signing time: Thu 26 Dec 2024 00:24:37 +0000
ROA not before: Thu 26 Dec 2024 00:00:34 +0000
ROA not after: Sat 01 Mar 2025 00:00:34 +0000
asID: 984
IP address blocks: 154.196.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75106 (0x12562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:34 2024 GMT
Not After : Mar 1 00:00:34 2025 GMT
Subject: CN=676ca245-8a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:35:6f:9c:bf:ca:56:0f:67:7b:3f:a7:d9:
99:6e:6a:20:90:42:22:5f:b9:d6:94:45:06:4b:72:
55:47:4d:e3:97:84:0d:5d:cb:e4:61:95:d9:66:04:
35:b7:e9:1f:40:78:3d:b0:c0:16:d5:51:90:f1:14:
c1:6f:eb:40:8b:38:da:a8:ff:27:60:f6:8b:ec:36:
12:df:9c:dd:7e:9b:9a:cb:64:87:15:81:9f:96:11:
4f:60:57:c1:59:88:d1:5b:1c:78:f0:2e:38:ae:89:
c0:8f:36:ca:18:42:f7:69:08:3f:f9:bc:8c:e7:ee:
6c:f0:0c:16:e2:53:43:5c:8d:af:41:ff:d2:f5:51:
8c:da:61:95:05:b2:0d:7f:2a:05:0a:58:e4:4d:8c:
e8:51:b5:ca:ea:2a:a0:4c:29:12:cd:3b:98:62:d4:
a7:02:58:ea:9a:d9:0a:0c:b9:15:79:72:74:35:59:
71:1b:dc:f2:f6:58:16:63:0c:13:30:7c:99:3d:0d:
51:67:79:d7:94:b8:e6:fd:ba:8a:64:bf:65:5a:4f:
71:8a:d8:05:b9:ae:dd:47:1a:62:1c:36:59:a5:d2:
8c:17:c7:64:65:d0:5d:06:f6:ce:48:d7:55:dd:f4:
46:ba:c4:79:1f:29:2b:50:56:bd:a6:37:20:d6:85:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:43:D5:73:09:56:02:38:B3:7B:BA:08:BE:66:44:DE:C6:C4:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FA82BCC31F11EFBEC09351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.128.0/17
Signature Algorithm: sha256WithRSAEncryption
65:22:a9:de:1d:57:04:27:02:21:84:9f:62:1d:53:84:96:c3:
05:43:07:53:88:7a:f9:21:dc:4c:1a:c6:da:b4:74:31:ef:61:
9b:1a:60:99:38:99:d2:83:e3:79:bb:29:3b:d4:c3:28:56:14:
63:6c:3a:c5:d5:67:5a:0f:da:5e:b9:13:e8:1d:ed:54:b3:36:
c5:a4:f6:5e:63:d4:41:7d:42:48:ef:52:51:9e:0c:4c:5d:a3:
f1:fb:9c:f5:79:b5:d5:02:98:ca:9c:4e:d2:bf:ae:44:79:5a:
51:4a:e0:40:9e:bb:bf:80:39:f6:be:ce:c7:1a:65:8b:5d:28:
7d:30:a6:27:8e:b6:d2:de:20:cf:1a:a1:d1:8f:8e:ae:79:01:
08:21:f6:82:e9:a7:f8:45:d7:e6:5f:0e:7d:52:e4:6b:9a:58:
11:50:b8:cb:e9:06:73:b1:80:39:b7:9f:6f:64:0f:bb:7e:32:
c5:a9:8a:bb:89:f4:02:3c:32:5b:4e:9e:ff:51:44:06:52:ad:
77:26:0d:46:9d:f2:0d:ec:02:4a:ff:77:04:a5:95:89:86:c6:
64:af:01:78:b2:4f:58:cb:45:ec:9e:41:b2:b3:8e:02:0a:af:
db:62:8e:10:fc:53:94:17:67:e4:4d:fe:b2:fd:ef:10:8b:ce:
81:2b:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:49:57 2025 by rpki-client