Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/085AB626C54611EFBB59348A762E951A.roa
File: 085AB626C54611EFBB59348A762E951A.roa (raw, json)
Hash identifier: 9GTRLE8IORBL3FFpSDDQDeMvvWfotg1BiZau0O6ZbBU=
Subject key identifier: 74:76:12:C3:0C:B5:55:03:14:65:68:E8:1C:24:FD:FB:7B:2B:C3:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/085AB626C54611EFBB59348A762E951A.roa
Signing time: Sat 28 Dec 2024 18:03:25 +0000
ROA not before: Sat 28 Dec 2024 18:03:21 +0000
ROA not after: Sun 12 Dec 2027 18:03:21 +0000
asID: 17561
IP address blocks: 154.208.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76971 (0x12cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:03:21 2024 GMT
Not After : Dec 12 18:03:21 2027 GMT
Subject: CN=67703d6d-be2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:6f:4a:94:30:10:12:10:6d:cc:39:98:79:
09:53:ce:b9:c7:6e:17:8d:3c:79:fa:16:8c:e2:d0:
c5:f3:ca:a5:5e:22:54:6d:36:88:6f:35:b5:69:b9:
31:e9:bd:bc:1f:44:05:69:d3:4f:a0:16:86:7c:cf:
93:42:61:7f:21:3e:d5:24:44:89:80:46:63:d0:2e:
fb:1c:49:a8:29:f9:ec:7b:4b:a4:bc:d3:5a:ee:14:
2a:88:e7:a4:e3:67:5b:ae:6d:23:97:8f:34:6f:fd:
d3:67:ff:db:b8:cc:93:20:ab:71:d8:5f:24:2f:4c:
07:fe:e5:20:7d:4b:7e:87:2c:89:ef:59:51:85:af:
e2:39:b1:ec:fb:1a:8c:4c:be:09:32:aa:7d:2f:35:
f5:fc:61:30:29:75:e2:fa:89:b2:6a:30:11:0a:d8:
87:40:17:ac:e0:6a:bc:59:0d:06:4c:5b:72:55:29:
e2:43:62:99:bb:dd:77:2c:9c:a6:f0:cb:5b:46:b1:
00:b0:63:c0:39:78:ea:5b:d0:68:20:e6:0b:0c:2f:
12:22:da:4c:6e:2d:86:e5:6e:95:6c:a7:4b:2a:3f:
5f:7c:98:31:a9:d6:ce:0e:08:19:99:c4:f6:f1:ba:
38:95:da:92:19:7e:87:18:e1:f9:3e:b6:49:29:51:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:12:C3:0C:B5:55:03:14:65:68:E8:1C:24:FD:FB:7B:2B:C3:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/085AB626C54611EFBB59348A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d5:41:cc:5c:11:ba:a0:1e:79:23:04:26:0d:af:5a:91:4b:
20:f3:09:86:c9:14:fa:8d:fe:bf:38:1a:a4:9e:94:04:9b:11:
b6:3c:c7:80:56:1b:81:2c:b7:fc:34:35:39:39:0b:6d:d6:c1:
c2:fc:0b:70:b7:1e:9b:0b:8f:25:0f:95:07:d5:7d:24:0d:03:
ca:6d:e8:44:44:39:4e:93:59:6a:8e:2f:9f:08:df:88:5f:93:
b7:29:d4:46:6b:ba:8f:58:66:6d:69:30:49:38:01:85:77:5b:
d8:e7:df:cc:e3:4e:c4:d8:7c:7e:f2:d6:34:6b:bc:21:4a:3b:
29:d1:f7:88:33:2f:82:50:31:f4:84:a0:43:57:1b:b5:51:e3:
a5:31:2e:f4:3c:32:df:9c:34:b6:25:c0:9d:ba:bf:90:0d:09:
e1:16:aa:4c:ac:21:21:13:eb:04:5c:51:31:6d:6e:be:73:c9:
42:0e:7c:24:1d:b8:37:fc:01:cd:31:88:91:0f:a4:1d:28:16:
8a:6b:22:9d:9a:cb:48:89:d7:7d:8a:e7:69:ae:6b:d7:c0:1c:
f7:dc:22:4e:0d:df:07:0e:d4:49:22:77:1a:5f:b7:0d:8e:c0:
47:ae:4d:56:f2:ef:0e:98:15:d7:25:c8:5a:df:1e:21:ae:fa:
cb:ac:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:02 2025 by rpki-client