Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/125243CAC51D11EF98318D89762E951A.roa
File: 125243CAC51D11EF98318D89762E951A.roa (raw, json)
Hash identifier: xFiRCLqBlE4SbvcTg19ifDxLM04pNkNxURXFMRHctlU=
Subject key identifier: 8C:76:0B:1D:80:FA:C8:D0:67:8C:33:E4:F4:A9:0E:2D:EA:11:CD:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/125243CAC51D11EF98318D89762E951A.roa
Signing time: Sat 28 Dec 2024 13:10:12 +0000
ROA not before: Sat 28 Dec 2024 13:10:09 +0000
ROA not after: Sun 12 Dec 2027 13:10:09 +0000
asID: 17561
IP address blocks: 154.203.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76595 (0x12b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:10:09 2024 GMT
Not After : Dec 12 13:10:09 2027 GMT
Subject: CN=676ff8b4-3973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:63:a0:a0:75:5a:32:eb:a2:c8:6a:75:97:
6c:e6:93:4c:12:84:8d:f4:78:46:3b:6d:80:c3:68:
71:fe:0c:01:4f:86:30:3a:a9:18:fc:c6:cf:28:5b:
e7:ee:c5:a8:09:40:6e:a0:15:43:8e:1e:3f:f0:7a:
df:89:d6:30:28:18:a9:47:f7:9d:d6:e3:85:93:e1:
97:7a:e5:a9:cd:27:f0:fc:c4:8c:e7:11:b5:6e:94:
f4:08:5c:87:58:87:54:00:0c:00:1b:6b:7b:4b:61:
e9:b7:a9:b0:6f:ee:b2:e1:52:95:d3:fc:c6:93:41:
70:fa:2b:ed:09:f6:28:8d:02:48:8d:32:fd:b3:a4:
f2:89:bb:8f:9c:d9:87:3b:75:8d:c9:9e:bd:b5:24:
7c:42:ea:a1:86:8f:33:3a:ac:e7:14:e1:52:23:2b:
2e:fb:c9:92:17:80:d8:4c:c2:fc:c2:bf:87:5f:16:
8d:c2:eb:84:25:64:fc:cc:89:36:ea:7d:51:92:4b:
17:6c:31:22:63:2f:30:8f:6b:4c:ed:8f:6d:1b:74:
dd:67:b0:78:00:be:cc:02:69:1b:77:b6:22:9a:84:
ca:b8:51:52:9d:1f:cd:c8:c8:3c:cd:0f:74:ad:9d:
1b:5d:6e:44:4b:0e:03:a8:fb:f0:1f:b9:99:e4:c3:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:0B:1D:80:FA:C8:D0:67:8C:33:E4:F4:A9:0E:2D:EA:11:CD:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/125243CAC51D11EF98318D89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.37.0/24
Signature Algorithm: sha256WithRSAEncryption
21:06:8c:0f:28:a6:c1:52:56:3f:a3:a5:53:f1:71:18:d0:26:
43:e4:a0:74:f9:85:77:c9:31:ba:49:bc:5d:47:bd:dc:ab:20:
51:74:2b:0c:5a:6c:ad:1f:25:d9:85:a7:f8:64:5f:00:86:e6:
ae:32:3f:15:d2:08:3f:70:4c:b4:f4:5c:6f:9d:b6:44:64:a2:
aa:3e:59:91:5d:27:2c:f4:a6:d3:94:36:1f:33:34:63:3c:42:
b8:b2:24:73:39:16:0b:0e:fa:51:1f:52:29:12:c0:de:36:0c:
0d:98:87:54:7c:a3:08:d3:52:8f:1f:48:75:03:b0:cd:95:fb:
a8:c2:bf:27:8f:83:19:18:cf:22:7b:7c:df:86:ea:5c:46:dc:
52:82:df:41:84:e5:ba:34:1d:2b:bb:71:40:0d:71:f1:1f:64:
79:4c:06:1f:57:97:3f:07:90:ec:be:a8:a9:c1:be:e1:08:15:
a2:75:ce:b5:25:f0:ea:49:7b:ec:e1:37:e7:b8:bb:a7:f3:f5:
dc:fb:5d:56:10:8c:b2:e0:33:07:72:8d:21:0d:39:9d:2e:50:
a4:1a:cd:57:b6:4b:09:6d:5c:bc:a5:c9:9f:b4:d2:b6:41:ac:
41:a5:05:26:e7:38:cc:73:8f:6b:fe:8e:1e:ea:ec:9f:1b:d9:
aa:1a:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client