Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F4D39AC42911EF8430BC84762E951A.roa
File: 09F4D39AC42911EF8430BC84762E951A.roa (raw, json)
Hash identifier: qEMBbLsGObXXNlWIBmTXlnhcZg/nBiOAaPA+j/hmOTg=
Subject key identifier: AA:E1:7E:28:23:40:1D:8D:E2:2A:B2:C3:26:7B:51:D1:DD:AF:A7:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F4D39AC42911EF8430BC84762E951A.roa
Signing time: Fri 27 Dec 2024 08:03:21 +0000
ROA not before: Fri 27 Dec 2024 08:03:17 +0000
ROA not after: Sun 12 Dec 2027 08:03:17 +0000
asID: 17561
IP address blocks: 154.202.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76295 (0x12a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:03:17 2024 GMT
Not After : Dec 12 08:03:17 2027 GMT
Subject: CN=676e5f49-92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:89:42:c4:0f:ca:2a:7e:38:33:d4:1f:ce:
ab:74:63:f3:05:6b:8b:13:c5:c6:24:79:a5:a3:92:
a5:c6:fb:e8:a5:97:e7:90:c3:19:7a:7c:1b:64:cf:
f6:39:12:7b:d0:38:29:dc:d0:46:2b:b2:e9:dc:13:
f0:74:0a:a9:38:ee:bf:bf:3d:1c:f8:80:be:63:44:
1b:93:69:7e:20:49:15:41:e4:b2:0f:76:ee:db:ff:
72:15:70:58:23:59:8f:65:5b:7a:9d:be:0f:de:b1:
cd:61:0d:05:3f:c6:5c:27:dd:17:44:08:e8:b1:99:
2b:d1:0d:03:46:b0:57:48:9d:e0:e9:25:71:a5:e7:
2a:ac:aa:d1:b3:06:c0:40:7e:0c:1a:63:5d:e8:d3:
6c:ee:97:eb:a9:04:de:b9:52:14:d6:03:09:54:7f:
0f:cd:c5:6e:bf:38:48:80:c5:b7:47:7f:0a:60:45:
df:97:8c:c7:28:df:b6:37:f9:64:50:38:ec:84:f1:
be:0b:9a:d0:7e:91:6f:d2:98:cc:95:4a:a6:ee:44:
d9:75:8e:7d:a4:f5:c9:45:0a:97:d6:d1:ad:63:ae:
16:f3:c0:73:97:89:46:30:74:0d:b5:a5:6a:f2:08:
bc:ce:86:9c:8d:a8:e1:5b:dc:53:91:d9:4e:3b:9c:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:7E:28:23:40:1D:8D:E2:2A:B2:C3:26:7B:51:D1:DD:AF:A7:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F4D39AC42911EF8430BC84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.110.0/24
Signature Algorithm: sha256WithRSAEncryption
94:42:6d:b5:d2:53:7d:ab:99:4d:2b:33:80:d8:b8:19:1e:e4:
c0:43:dc:d2:27:fd:d7:98:4a:c9:74:8d:23:8c:95:23:2f:01:
8b:3a:34:4d:44:ea:08:16:53:98:db:60:a8:05:37:8b:a4:f4:
35:6b:d4:a9:01:f4:36:6d:ab:23:14:1e:2a:eb:e9:d4:bf:a8:
b5:fa:01:aa:1a:10:2b:d8:f6:c2:fb:bc:af:e0:d8:da:bf:85:
49:84:f0:f4:5e:e2:00:ed:f5:aa:72:09:0a:38:7a:78:e1:91:
8d:ce:ef:36:a9:d8:9f:ee:cd:3d:a2:80:5c:36:5a:ed:31:8d:
72:66:0e:7b:a6:00:17:09:3b:b9:39:25:36:d9:f2:51:b6:48:
08:88:85:28:d2:9e:d8:8b:3b:e8:c7:2f:7f:40:c8:9a:93:43:
99:e2:be:f6:14:48:57:7c:4c:01:e9:91:a7:94:c9:93:ac:18:
e2:b1:6e:fd:77:c7:b1:1d:41:ac:4f:81:d8:18:a2:8d:07:2d:
20:d6:04:13:1d:7d:db:42:57:e6:36:91:78:d5:a9:41:bd:20:
92:9d:7a:54:aa:51:56:65:76:e8:be:de:37:fe:82:5f:7a:c5:
2f:e6:12:1f:8c:aa:2d:b4:bd:61:58:70:5b:9d:d0:4b:44:8e:
2f:10:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:45 2025 by rpki-client