Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE7B4F0C37011EF860C1365762E951A.roa
File: 0CE7B4F0C37011EF860C1365762E951A.roa (raw, json)
Hash identifier: fNi5O+0DlnhMXeqwTss5xBHqUnXXnLjPzar7MQ/OO7s=
Subject key identifier: A5:DF:A5:F4:66:84:C2:CE:9B:74:FE:60:B9:B5:A0:13:A2:2A:49:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012720
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE7B4F0C37011EF860C1365762E951A.roa
Signing time: Thu 26 Dec 2024 09:59:09 +0000
ROA not before: Thu 26 Dec 2024 09:59:06 +0000
ROA not after: Sun 12 Dec 2027 09:59:06 +0000
asID: 17561
IP address blocks: 154.94.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75552 (0x12720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:59:06 2024 GMT
Not After : Dec 12 09:59:06 2027 GMT
Subject: CN=676d28ed-0812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:85:fc:64:6b:b0:0d:2e:76:e0:50:be:01:
52:0d:f5:1d:0e:db:d8:a5:0b:bc:73:dd:b3:2d:e0:
f8:af:6b:84:0b:b1:d8:ae:ca:a7:3d:aa:55:94:6d:
78:db:67:5d:27:db:88:c3:9d:c8:2e:22:d3:98:8e:
f5:ef:d6:a5:dd:31:0c:14:9f:69:ff:3b:94:42:39:
3f:0d:32:cb:05:d3:98:85:a6:e8:c0:d8:b3:46:fc:
b0:5d:9c:6e:30:97:45:63:92:fe:b2:cd:4b:52:e8:
91:be:41:30:20:ea:77:27:49:c4:51:68:6a:df:a8:
0f:cf:d5:7f:55:8b:5c:bc:6a:b0:3b:e6:3c:53:c5:
81:e8:f1:6c:d6:34:80:e1:ad:50:a9:be:38:f7:1c:
58:49:ae:8d:66:93:fa:34:71:92:cc:27:1d:57:f7:
e5:6f:bd:04:af:4a:9c:84:26:35:6f:83:17:03:d1:
19:cc:14:c2:53:10:48:7d:ef:ef:e5:c6:93:88:29:
8a:49:2f:99:7b:7d:fc:19:69:aa:d9:c1:7f:67:ce:
75:3c:01:92:1c:5b:39:82:01:13:06:a1:98:b8:4b:
18:bd:92:c2:e1:17:1e:f8:a2:2a:c7:4a:4c:79:b3:
4d:7b:0a:8f:5c:a4:c4:d8:c6:63:17:09:47:e2:f3:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DF:A5:F4:66:84:C2:CE:9B:74:FE:60:B9:B5:A0:13:A2:2A:49:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CE7B4F0C37011EF860C1365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6b:6e:93:22:2b:ae:02:3d:ac:c9:cf:f5:5d:24:e1:1c:d8:
73:84:69:21:1d:82:60:35:00:fd:e5:b8:7a:b1:12:54:25:28:
b3:18:07:e3:07:75:6a:57:28:13:1b:8b:03:08:10:47:08:af:
d9:11:af:28:4e:3b:ed:ac:44:0b:eb:53:82:8d:7c:be:e1:30:
a2:6d:95:32:20:85:1d:ae:db:d5:48:e4:04:b7:7b:f1:7f:87:
69:90:87:05:a4:bc:2e:04:18:93:b3:6d:cc:4f:b5:89:d1:8a:
bf:7d:e5:ac:fa:38:69:2a:cc:12:20:1b:e0:76:2a:02:23:ac:
61:03:10:17:af:97:8e:30:2c:0f:68:b6:ae:ef:3d:25:78:7e:
62:0d:11:b7:da:2f:84:76:9b:61:6b:3b:2c:ce:9d:ed:d6:71:
a6:54:0b:41:15:83:48:b6:83:db:2b:10:65:d2:e6:a5:2f:fb:
ab:66:16:1a:7f:c1:24:62:54:ef:78:a3:bd:81:e2:47:be:aa:
4a:7c:ab:fb:78:38:02:98:2a:99:6a:ac:ff:af:70:a1:8b:94:
2a:50:56:07:f1:68:88:31:e9:6c:2d:20:6c:f0:0f:e6:d4:b0:
de:07:c4:3b:85:1b:05:96:b3:c1:58:9a:8d:ad:cd:6c:c1:42:
76:75:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client