Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02AFCFCCC54B11EF8F0D60A8762E951A.roa
File: 02AFCFCCC54B11EF8F0D60A8762E951A.roa (raw, json)
Hash identifier: hklRG27uAhs3V0dxmIugqlwwjb3fgY5AQlbLLGzfjeg=
Subject key identifier: B9:6C:53:BB:8F:8B:1E:B5:7C:1D:37:86:C3:70:37:0C:D0:70:31:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02AFCFCCC54B11EF8F0D60A8762E951A.roa
Signing time: Sat 28 Dec 2024 18:39:03 +0000
ROA not before: Sat 28 Dec 2024 18:38:59 +0000
ROA not after: Sun 12 Dec 2027 18:38:59 +0000
asID: 17561
IP address blocks: 154.209.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77017 (0x12cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:38:59 2024 GMT
Not After : Dec 12 18:38:59 2027 GMT
Subject: CN=677045c7-c459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:64:0b:39:f8:68:74:22:cc:04:b3:45:5a:
da:fb:d5:6a:c1:51:0c:de:80:c5:7d:2e:4e:64:c6:
fc:eb:57:54:de:fd:da:63:c4:99:9f:e8:74:93:d5:
0e:79:8c:db:25:6b:ee:70:71:20:a5:7c:4a:5e:84:
3e:9b:16:8e:6e:25:fd:44:b5:27:db:51:c6:c4:2d:
fe:41:c8:08:00:f9:d7:ef:71:69:0e:99:29:83:51:
d0:73:0a:1d:5d:f3:16:be:0e:4f:a7:55:2d:e5:86:
de:ba:c6:6c:50:8b:74:37:d7:79:ca:fb:7b:1b:45:
8c:70:a6:a7:48:24:d0:e0:95:36:32:b4:5c:ab:c8:
f8:8f:9f:87:d1:12:ed:95:04:47:7b:03:7e:b6:e6:
70:0e:8f:89:1e:a4:49:e2:fa:86:86:e7:1c:71:20:
07:5b:12:a8:69:24:37:be:90:56:4b:79:a6:b6:49:
a4:62:46:c8:53:e5:ba:40:0e:ef:4c:3f:3f:97:07:
f6:9d:61:bf:38:1d:fb:40:aa:d2:a3:99:1e:cd:4e:
7e:6b:35:56:eb:9c:94:51:c2:89:45:f9:16:f5:4a:
09:8d:1b:6d:52:bb:89:70:7d:10:07:c4:3c:b1:08:
4d:43:f6:9c:12:f6:6f:c2:bd:80:99:58:41:e0:68:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6C:53:BB:8F:8B:1E:B5:7C:1D:37:86:C3:70:37:0C:D0:70:31:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02AFCFCCC54B11EF8F0D60A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:2a:74:39:61:68:67:62:9d:80:65:89:5b:34:14:82:7f:ec:
6b:58:51:a5:62:fb:ef:c7:a0:64:f8:ab:d1:e1:5b:cc:da:57:
94:c7:16:38:cc:7e:bd:9e:3f:26:13:34:1b:d0:50:a3:30:12:
7e:79:ab:0d:76:d1:d3:07:f2:85:de:08:cf:bf:d5:b7:9b:79:
83:c0:c5:2a:48:c1:ea:3b:86:a1:bc:a7:cf:ef:63:5f:f8:2a:
4d:ec:db:28:4a:b7:aa:c8:f7:23:f7:7c:55:8f:1b:b5:a2:ab:
be:06:e1:97:4e:52:90:2c:87:a5:fc:00:e2:4d:54:6b:d6:bb:
f7:d8:2d:fe:4a:13:45:bc:70:b0:a2:ae:f6:e2:56:86:34:f7:
8d:5a:e9:2a:c5:a4:3c:9a:cb:1c:b5:5a:6d:38:57:fd:9b:b7:
94:3e:45:ef:93:77:4c:96:c5:88:6b:b1:0a:05:67:2d:b1:b5:
20:67:fa:4a:93:94:db:64:d1:ef:17:a8:44:81:94:b8:b3:b6:
0c:90:76:3b:83:69:d9:bc:62:69:9f:02:72:b5:3d:09:22:bd:
9a:e7:4d:bf:80:d4:52:8a:ea:bf:ab:31:91:bb:14:3c:73:58:
3c:68:aa:59:2f:ab:54:d2:1c:b2:14:e2:a4:2f:ca:59:36:d7:
39:41:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:36:34 2025 by rpki-client