Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CCAB3A6F34F11EFBC365359762E951A.roa
File: 9CCAB3A6F34F11EFBC365359762E951A.roa (raw, json)
Hash identifier: soNPwPBn0pVXcsJIpgJTxcKOBdbG/ipUS0byWYpMd08=
Subject key identifier: 9A:CC:A2:9B:B6:D2:27:B3:7E:CB:F2:7B:E4:33:5C:4A:B7:DC:50:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A29
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CCAB3A6F34F11EFBC365359762E951A.roa
Signing time: Tue 25 Feb 2025 08:07:53 +0000
ROA not before: Tue 25 Feb 2025 08:07:49 +0000
ROA not after: Thu 25 Feb 2027 08:07:49 +0000
asID: 61317
IP address blocks: 154.127.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6697 (0x1a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 25 08:07:49 2025 GMT
Not After : Feb 25 08:07:49 2027 GMT
Subject: CN=67bd7a59-d0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:f6:09:8a:ec:13:3d:19:a8:2e:a0:99:7e:
b2:43:f2:79:5f:c4:d2:38:4a:13:29:eb:44:20:61:
81:59:82:f0:1f:f7:ea:04:26:de:19:ca:c6:b0:40:
b2:c5:c6:97:81:ef:c8:64:c0:86:e7:87:51:7b:d6:
38:ac:3c:0b:56:4b:7e:65:d8:52:f9:bb:01:23:f3:
43:bd:a7:9a:67:6a:91:aa:10:af:90:21:da:2b:40:
c5:67:63:e6:56:57:f9:dc:fb:6a:24:79:79:fe:b9:
0c:47:a4:59:47:0c:a0:54:91:c5:e3:30:c6:ea:06:
21:94:4c:aa:0f:41:ed:fc:c6:b5:5f:90:b6:20:dd:
bc:9a:5d:9f:40:93:61:e6:c3:1d:30:8e:58:85:de:
f8:5f:40:09:8a:5a:68:ec:18:b8:e9:1d:1d:97:11:
5d:be:26:8c:b5:c6:65:e9:5e:1d:2e:7c:a4:9f:5a:
1b:d4:58:3c:10:f8:a1:c0:55:33:60:2d:7c:3f:64:
47:f4:b4:c9:02:75:a3:35:16:da:7a:98:8e:13:5b:
87:dd:75:72:de:74:0f:a2:c2:69:31:ed:e3:4d:8b:
2e:34:6e:9e:0b:7d:be:2a:a1:e6:aa:90:3f:f4:73:
cf:df:23:4a:18:3c:ba:8d:87:40:91:91:de:22:b9:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:A2:9B:B6:D2:27:B3:7E:CB:F2:7B:E4:33:5C:4A:B7:DC:50:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9CCAB3A6F34F11EFBC365359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:81:99:3b:ed:fc:61:38:64:9b:f3:2f:70:6b:83:6c:ae:f6:
cf:e3:0b:77:64:83:a7:ff:38:63:fd:c8:46:5f:86:bd:0c:24:
d9:b2:f4:11:ab:83:94:31:e2:a3:b1:06:a2:81:ee:1e:90:07:
b7:72:cd:e7:dd:c0:ff:b8:4c:70:2d:56:9f:21:a3:85:cd:d1:
52:ea:80:db:73:70:98:0e:c7:9d:8c:78:17:3e:fa:19:a1:89:
d3:73:51:c9:71:82:0e:80:50:45:4d:cc:b2:47:a9:42:66:de:
5a:c1:c2:d6:ce:eb:c8:cc:52:e5:76:3c:e4:40:72:5c:bb:17:
05:41:64:91:44:97:8b:42:16:b2:8d:41:41:49:7e:12:8e:52:
85:4b:c3:c5:f8:55:3d:7d:1c:33:21:b0:b6:a7:1c:c2:4b:2c:
fb:19:3c:dc:1e:bb:8c:2b:b5:58:8b:ba:95:78:5c:7d:58:76:
e4:ac:f9:76:ab:7c:68:f3:38:f1:f9:dd:86:2e:8f:2e:40:d3:
da:e0:50:99:c2:9e:ed:ce:a6:2b:81:00:66:86:e5:58:f1:fe:
85:db:8d:aa:4d:a7:99:41:0c:53:3b:b9:4a:7b:79:8f:80:88:
4c:1f:2a:86:ff:1f:f6:ea:d3:61:89:1a:21:7e:6c:af:93:b3:
96:be:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:37 2025 by rpki-client