Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A6FF94C53B11EF93B37245762E951A.roa
File: 00A6FF94C53B11EF93B37245762E951A.roa (raw, json)
Hash identifier: FA3PraU6DlkYopkuSgMcIbWHdT1Dig/5u1fG8/Gq6AM=
Subject key identifier: DA:E5:13:F6:46:17:3A:9F:B1:96:8A:8E:00:37:88:17:EF:EA:F2:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A6FF94C53B11EF93B37245762E951A.roa
Signing time: Sat 28 Dec 2024 16:44:28 +0000
ROA not before: Sat 28 Dec 2024 16:44:24 +0000
ROA not after: Sun 12 Dec 2027 16:44:24 +0000
asID: 17561
IP address blocks: 154.205.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76869 (0x12c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:44:24 2024 GMT
Not After : Dec 12 16:44:24 2027 GMT
Subject: CN=67702aec-cfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:6a:0f:85:e1:46:ca:c3:a0:a3:54:5c:2e:
73:4f:f7:bc:73:0d:83:6b:ca:60:bd:5d:f9:4f:48:
b0:60:ab:ec:24:b6:e3:57:63:a3:ee:8f:70:80:51:
de:95:33:68:7d:21:3b:f7:65:50:08:de:cb:f2:a5:
c9:5d:da:ff:d8:1d:fd:b0:25:3c:a8:38:09:38:69:
44:9f:95:ab:f1:a7:14:4a:73:24:a9:e8:b3:f0:7a:
9b:e3:62:7e:02:fb:97:98:33:9e:d5:05:5d:ea:d9:
49:d0:1b:a3:ee:92:10:2a:73:1c:ad:16:87:c2:a1:
50:80:ac:d6:66:11:af:8f:57:61:59:90:13:49:fe:
ee:43:e6:a4:a1:98:50:7a:ba:76:71:8c:85:08:23:
18:91:bb:9d:1a:0a:65:1b:73:cc:15:ce:3f:dc:83:
63:13:1f:fd:d1:5f:0e:53:6b:ad:47:a1:74:8f:74:
a7:75:e0:53:fd:a7:92:75:6e:e9:dc:4e:b5:35:aa:
d3:35:01:a6:60:2b:47:f8:67:58:54:90:d1:b2:ad:
3e:5d:d0:6a:6d:2e:ff:88:41:ab:19:ae:97:69:f8:
86:e2:54:9e:f2:8e:4c:3e:c6:20:10:c7:55:90:9b:
f3:af:72:b7:e2:dd:df:4a:9f:87:ea:eb:7a:70:fa:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:13:F6:46:17:3A:9F:B1:96:8A:8E:00:37:88:17:EF:EA:F2:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A6FF94C53B11EF93B37245762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:a5:4a:03:b4:e4:00:52:d2:9a:77:f3:46:3a:96:b3:6e:c7:
a3:6b:6c:dc:29:2e:fe:29:92:ac:d8:e1:a2:19:8d:5d:e2:59:
73:e4:7e:34:81:0e:01:f8:5d:a4:d2:ab:c3:10:76:35:d0:09:
5e:64:1d:b3:9c:1a:a6:6b:65:79:0f:0d:ec:70:85:56:12:b5:
0f:d8:93:3b:a1:94:35:55:d4:c4:cf:7c:f4:e8:60:dc:3e:49:
81:07:46:2c:58:9a:af:5c:56:5c:f2:8b:2e:bb:c1:ff:25:fc:
1b:d3:ca:53:22:d5:d0:40:75:a5:2c:e6:2a:f5:b8:05:a2:c0:
98:42:47:71:0a:78:d3:3a:9d:a1:f3:ca:3a:0b:63:96:de:a9:
b0:fe:37:79:10:cf:b8:2b:bd:55:d8:d4:6b:75:51:55:d9:61:
5d:6b:27:3f:45:fd:08:86:07:6b:c7:8e:bd:53:a1:21:0c:f8:
f8:ce:08:a2:1b:81:25:bb:e5:3e:c3:a2:62:48:b7:35:ed:bb:
98:c3:bd:48:cd:c9:2f:05:77:b2:92:82:ee:f4:b7:b4:f6:59:
a9:d2:dd:59:a1:da:48:49:4a:53:15:a7:d3:65:57:2c:24:93:
79:a6:18:1f:61:99:70:e4:de:41:1a:82:d2:a3:e3:bd:2c:6d:
bc:3c:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:06 2025 by rpki-client