Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D65066C5DF11EF8C73BE57762E951A.roa
File: 04D65066C5DF11EF8C73BE57762E951A.roa (raw, json)
Hash identifier: J1U0YL73Kiab7OMiz5z2ERTLt7mzCDD/IIX/k7xyvIU=
Subject key identifier: 13:A6:50:A6:A8:91:D5:6B:08:AB:DE:83:DB:EF:82:EF:C6:40:2B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D65066C5DF11EF8C73BE57762E951A.roa
Signing time: Sun 29 Dec 2024 12:18:32 +0000
ROA not before: Sun 29 Dec 2024 12:18:28 +0000
ROA not after: Sun 12 Dec 2027 12:18:28 +0000
asID: 17561
IP address blocks: 154.210.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77116 (0x12d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:18:28 2024 GMT
Not After : Dec 12 12:18:28 2027 GMT
Subject: CN=67713e18-3b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:84:6b:10:f2:c0:68:8f:77:7a:bc:d6:59:
25:82:d7:19:61:47:83:fd:a3:f9:b4:7e:f3:18:41:
10:23:06:db:e5:c8:5e:6a:10:a0:5b:b1:64:7d:04:
e8:bd:67:10:59:47:b8:53:a7:74:09:c2:50:74:97:
a7:4d:51:eb:96:25:64:c8:04:bf:c3:46:c0:73:27:
dc:92:43:2e:2a:3d:86:0f:ba:3f:a5:7a:d8:4d:bc:
70:ff:24:90:15:82:08:57:d5:b0:bd:2e:f1:3a:87:
2a:71:28:30:42:04:aa:86:c4:d6:61:00:37:dc:ad:
55:4e:de:24:eb:76:75:6e:24:98:d1:e9:31:87:0c:
0f:2f:fd:3a:05:9c:5e:c3:a3:95:e0:9f:ce:63:c1:
45:24:ed:82:18:f5:e2:04:16:3c:28:e9:3b:45:68:
cb:f3:87:81:2a:f8:9e:6e:c5:c8:98:bd:33:b4:dd:
8c:53:e5:81:06:be:0e:c8:f5:e7:53:50:bb:af:8a:
b2:c6:c1:04:d1:43:fe:31:2f:d9:6d:31:36:8e:04:
44:3f:f5:9c:ac:71:a0:4c:16:29:0b:40:16:bd:b1:
65:d6:a8:af:1a:d7:b5:87:df:8f:62:95:1b:19:85:
f7:8a:b7:1b:b6:1e:89:b6:d3:be:71:f0:91:7f:92:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A6:50:A6:A8:91:D5:6B:08:AB:DE:83:DB:EF:82:EF:C6:40:2B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D65066C5DF11EF8C73BE57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:66:9b:7c:4c:09:32:ab:50:c9:dc:66:8d:8d:b5:12:ec:49:
73:73:b4:a0:eb:74:66:5e:21:30:e4:66:29:71:c6:7f:63:30:
b2:c4:1a:ab:57:87:71:24:90:33:e2:29:7e:47:98:32:0c:ba:
59:59:7b:84:3f:0d:33:62:8a:4b:32:1e:09:91:07:02:15:a7:
38:09:53:31:1d:e1:a9:fe:93:fc:b5:88:72:9d:19:86:42:7a:
7c:1c:2a:e1:e9:c4:2a:a1:5f:09:56:cf:8c:48:2e:2f:2a:b7:
df:31:cf:8e:00:91:1d:74:16:97:4e:c0:85:e8:07:37:ce:83:
f9:5a:47:ad:97:7b:9e:8a:16:69:4c:e1:56:af:29:c5:76:9c:
cc:e7:06:35:ce:1c:db:e9:66:0f:7b:cb:ca:23:64:27:89:5f:
31:ef:cc:e6:c6:26:29:1f:e6:6d:ca:54:e2:5d:88:19:dc:dc:
32:c0:36:ea:12:9d:f9:48:e8:e5:16:42:e5:4f:91:46:7c:ed:
17:9c:88:a6:c8:be:a3:78:c9:92:da:ab:38:18:7c:48:4a:d3:
48:d2:16:24:5a:99:84:58:90:ae:44:fc:93:44:36:da:3b:02:
c6:b1:e7:5c:b0:ca:ce:ab:f9:a9:82:2e:57:fa:69:7c:0e:46:
13:7e:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:35 2025 by rpki-client