Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76562ABA411EFA0CA0B6B762E951A.roa
File: 0EF76562ABA411EFA0CA0B6B762E951A.roa (raw, json)
Hash identifier: H7eBHmmC1WALliOAB/WLzjtWP1JPDMEZiA4oNYZfLRE=
Subject key identifier: A5:17:EC:8A:A9:C5:52:92:FA:B3:52:7B:AE:B4:69:44:45:4A:3D:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01136D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76562ABA411EFA0CA0B6B762E951A.roa
Signing time: Tue 26 Nov 2024 03:10:58 +0000
ROA not before: Tue 26 Nov 2024 03:10:55 +0000
ROA not after: Fri 26 Nov 2027 03:10:55 +0000
asID: 17561
IP address blocks: 154.81.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70509 (0x1136d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 26 03:10:55 2024 GMT
Not After : Nov 26 03:10:55 2027 GMT
Subject: CN=67453c42-41b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:a6:04:1e:4f:bb:42:8c:91:4b:de:08:9e:
e5:1d:de:39:40:cc:b9:63:46:c5:08:4c:02:d7:7a:
29:fc:03:eb:62:6f:0b:43:ef:c5:e4:1c:e0:db:91:
58:a1:a6:3b:da:94:38:ed:53:5a:dd:30:74:4b:8d:
64:af:41:23:2a:3c:0d:97:ab:88:c9:d7:13:c7:a3:
74:a2:06:59:91:33:9b:c3:58:ac:c1:32:41:59:42:
c1:cf:b2:a5:5c:86:06:83:e9:10:c9:9a:cb:c2:04:
e8:5c:5c:b8:76:87:a0:18:b5:f3:2c:54:45:29:53:
7a:ff:03:1a:f5:ae:79:4b:bb:49:d8:f7:24:b7:29:
a4:7f:4a:b5:25:d0:a9:89:cf:8b:0b:2f:1f:ae:18:
4b:4f:de:df:0e:ed:ef:bd:f0:bc:e9:3f:10:68:4f:
99:88:ee:78:95:60:b0:2e:da:52:88:0b:cb:61:c9:
4d:29:64:68:65:77:53:ae:dc:6e:b0:98:30:18:67:
92:86:90:12:ed:67:e4:0d:8a:c5:6a:ff:d0:f2:56:
ab:8e:1c:e6:bd:50:52:b9:2d:05:75:64:90:6a:c6:
cf:ff:61:a9:9a:0c:ef:c4:76:99:d5:15:dd:2e:56:
61:8a:3d:c4:09:9d:39:d3:9f:d5:56:a9:1d:60:dc:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:EC:8A:A9:C5:52:92:FA:B3:52:7B:AE:B4:69:44:45:4A:3D:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EF76562ABA411EFA0CA0B6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:8c:b8:8a:fe:f3:aa:7f:3e:5d:8b:b2:83:fc:fd:d4:a5:03:
94:c6:cd:4e:33:1e:6e:72:47:1e:03:71:15:6d:b3:6a:12:b9:
41:63:d1:87:23:82:9c:e8:96:d5:02:cc:01:10:14:bc:d3:f4:
11:99:5f:39:0a:b2:7b:8c:61:b7:b6:69:9e:83:77:59:b5:01:
a1:71:0e:15:a3:38:1e:8c:81:ed:f6:d2:e0:50:1e:88:c8:eb:
a6:cb:8d:85:67:a7:d3:4d:eb:02:d8:b4:0e:45:a5:6c:b5:95:
ac:f6:98:cf:aa:df:59:3c:b7:9d:88:c3:d4:03:84:e5:63:0a:
f0:a1:58:2b:d1:4e:0b:7f:f6:4b:f8:0c:a6:2f:a8:d8:ea:b0:
dc:76:8d:b2:b9:86:2a:21:80:db:61:6e:ff:6e:01:1b:c0:1d:
ba:95:0f:6b:91:e9:b6:93:17:cf:c0:21:df:16:37:a8:36:98:
90:8d:37:82:bd:b0:b0:ea:51:6a:e7:0b:a8:d6:45:8c:67:16:
b8:e2:4d:4a:95:ed:11:c5:99:53:af:a1:5b:61:20:8e:0b:93:
12:e3:23:cd:3f:f2:b0:58:c6:e1:ce:b9:16:7d:4d:11:82:49:
dc:42:ad:42:06:a5:d1:ab:44:6b:cc:37:5e:17:a1:2a:2b:20:
a4:6a:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:19:37 2025 by rpki-client