Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B401CC54D11EFBD28A8BA762E951A.roa
File: DB4B401CC54D11EFBD28A8BA762E951A.roa (raw, json)
Hash identifier: y5DEir4PdvjO5SdGaFFBLB+Jc6QxulcqVZul2zB4UOo=
Subject key identifier: 8C:E2:EF:71:1E:D5:11:D9:44:44:7B:30:7C:8C:C1:63:D3:05:4E:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B401CC54D11EFBD28A8BA762E951A.roa
Signing time: Sat 28 Dec 2024 18:59:25 +0000
ROA not before: Sat 28 Dec 2024 18:59:22 +0000
ROA not after: Fri 12 Dec 2025 18:59:22 +0000
asID: 984
IP address blocks: 154.210.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77043 (0x12cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 18:59:22 2024 GMT
Not After : Dec 12 18:59:22 2025 GMT
Subject: CN=67704a8d-9894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:45:f5:e9:4c:4a:a3:30:76:27:85:01:7d:
b1:08:be:76:c4:d1:8f:a3:dd:8e:05:03:53:93:bc:
89:aa:cd:45:d3:48:53:46:7f:b7:85:14:03:a5:9c:
38:f7:5b:fb:5a:de:30:fa:c1:a9:0d:40:79:6e:4d:
4b:0e:7f:67:d5:ef:b0:d6:8a:a3:bd:51:1d:09:4e:
f8:9f:bb:b7:04:00:d7:45:df:1e:95:d7:4e:f1:8f:
09:56:4c:9f:90:76:7d:24:33:3c:bd:da:41:df:9f:
8f:73:87:a8:03:f6:a7:ce:cc:12:d3:5b:00:a5:bd:
be:49:ef:41:62:37:c9:0a:fa:1f:22:32:34:f9:74:
55:69:3a:3a:20:38:9d:87:87:3b:db:bd:97:1f:8f:
91:63:e5:3f:74:5d:12:2f:da:0a:f2:b6:46:8d:5a:
0b:7e:61:00:4c:aa:6f:21:17:05:77:47:6b:6d:2e:
f9:37:31:ee:98:4a:62:cc:93:ab:38:26:7a:53:5f:
2e:89:7e:53:6a:7e:49:e5:7f:14:c8:b3:85:5e:f7:
ce:4f:09:9c:67:86:9f:75:a7:50:fb:10:1a:b2:b1:
98:02:46:2f:36:da:be:d4:62:85:e5:4a:70:9c:7f:
32:34:de:f8:e2:c5:44:70:13:76:38:da:8c:e2:99:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:EF:71:1E:D5:11:D9:44:44:7B:30:7C:8C:C1:63:D3:05:4E:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4B401CC54D11EFBD28A8BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:37:04:1e:0e:77:52:35:4d:77:a6:56:56:8b:94:74:35:0a:
f8:83:14:a5:6b:bf:0c:a6:d4:d0:54:3f:57:cf:39:28:a3:f2:
0a:f9:12:0c:57:a6:e0:5d:04:ce:38:81:37:88:36:da:cf:f1:
b4:a4:bf:9f:8d:34:ef:99:a6:66:21:47:27:93:c0:48:70:1e:
08:98:f6:18:db:29:a5:0d:2d:b2:3a:29:f1:35:36:12:b5:a4:
b9:4e:16:e0:4b:28:77:46:25:ba:1f:21:9f:f1:9b:df:ba:c5:
a0:0b:eb:d1:6c:6c:99:38:6f:ff:97:ca:fa:19:6e:b6:dc:0f:
80:f2:98:0e:fe:20:40:a4:fb:7b:2f:ec:46:24:b2:2d:e0:0f:
3d:f0:11:d6:23:9f:d8:cf:57:97:8c:4e:9a:b9:4b:af:f2:cf:
16:6b:3e:93:45:dc:d1:b2:6d:42:ca:77:bf:c7:bf:fc:a1:0f:
91:76:b2:72:ef:c1:d3:52:2f:24:75:5f:79:6e:5d:9a:34:11:
98:10:7e:7a:59:37:cf:d6:01:fe:a7:92:3e:b8:43:8d:86:49:
fd:23:91:70:c8:19:e0:86:ac:53:2b:cf:59:de:f8:04:8b:12:
a3:1e:a3:6f:cc:3d:c4:74:19:e0:19:0d:df:4d:19:a6:4a:8b:
2b:be:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:45 2025 by rpki-client