Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13946D4EC91E11EF81812079762E951A.roa
File: 13946D4EC91E11EF81812079762E951A.roa (raw, json)
Hash identifier: SVhhK4CXFSk0hqWOluQ/piJ7+Ebv1rJno6D3yGb6k00=
Subject key identifier: 12:F3:1A:25:6A:E4:76:91:FC:BA:18:81:5B:40:DE:D5:94:97:65:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013313
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13946D4EC91E11EF81812079762E951A.roa
Signing time: Thu 02 Jan 2025 15:27:29 +0000
ROA not before: Thu 02 Jan 2025 15:27:25 +0000
ROA not after: Mon 13 Dec 2027 15:27:25 +0000
asID: 17561
IP address blocks: 154.222.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78611 (0x13313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:27:25 2025 GMT
Not After : Dec 13 15:27:25 2027 GMT
Subject: CN=6776b061-5179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:ff:6d:aa:9f:b2:ae:fa:f7:74:f5:8b:ab:
51:da:bf:c3:87:79:91:22:1a:40:18:53:5e:20:96:
62:37:ec:b4:b0:6b:a8:41:40:c6:60:38:e9:e8:22:
6f:03:1a:a9:57:b4:a7:f2:25:c2:41:97:23:35:2c:
38:93:31:58:20:b1:c1:ab:32:40:72:c8:57:ca:00:
90:aa:4b:13:18:71:55:59:fe:4c:59:c7:32:68:97:
ab:3a:9c:47:ab:69:0f:79:c6:13:60:7d:09:cc:30:
ac:4b:b2:7a:a6:1b:ff:7d:9a:19:d1:01:ec:22:55:
42:21:29:ba:1d:de:3d:be:24:77:18:b0:83:a5:79:
54:00:a4:ab:7c:11:9f:a0:ab:6b:92:2d:c5:fc:67:
fd:fc:1b:48:09:c8:ea:c9:9f:9a:eb:ac:b4:16:99:
7f:d8:73:e2:71:89:29:fc:f6:76:5c:45:86:b7:6a:
98:ea:d2:ba:c7:9c:0c:86:fb:75:cf:7e:8a:84:a2:
b0:b7:e6:14:a8:1b:75:af:db:33:03:93:20:3d:04:
3d:68:85:65:c1:94:40:48:c0:d5:6e:76:7f:e2:e4:
3f:8a:ae:03:78:31:55:97:51:10:c2:c4:cc:c8:fd:
97:e4:25:20:08:c1:e1:f1:aa:5d:e9:18:a0:40:59:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:1A:25:6A:E4:76:91:FC:BA:18:81:5B:40:DE:D5:94:97:65:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13946D4EC91E11EF81812079762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.78.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3b:50:6e:2e:7c:95:7a:76:69:13:b2:30:78:5d:9e:b2:b2:
2b:52:e1:71:6a:c0:3b:ed:2b:7d:20:0b:4e:84:dd:92:5a:dd:
b3:a4:19:78:d5:14:b8:43:66:27:ee:26:b3:d7:1b:a4:da:16:
38:49:11:3c:9c:27:6d:b7:81:cf:07:27:ab:b2:88:10:6d:c6:
5b:a4:42:79:3b:14:d3:f8:2a:46:be:ae:fd:bf:ea:7d:75:f7:
d7:01:7c:90:9b:6e:71:d8:92:cc:d4:c1:46:83:58:2b:c2:be:
d5:3c:e6:ae:23:e1:33:ed:99:8a:22:64:5f:58:05:a4:f5:4c:
80:fc:a1:22:03:6c:b0:27:2b:27:18:1c:fa:f6:e6:21:83:19:
38:50:08:f5:2d:79:c9:ba:0e:fa:10:bd:f3:a0:e7:46:23:25:
3f:0f:32:2f:48:7a:9d:9f:13:ef:e2:72:a2:01:8f:fd:df:b9:
99:e3:b1:d8:2e:d1:cb:89:87:9a:4f:b8:00:05:40:30:ec:ee:
aa:9e:82:b3:79:68:b7:9c:a4:c7:a2:54:21:b6:6c:e4:f4:a0:
98:85:51:34:eb:31:b4:f9:c2:9e:de:83:02:d7:66:ea:36:f9:
cb:1d:9e:ec:17:6b:f5:62:d7:a8:0e:74:7d:be:70:2c:00:5e:
b9:f7:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:46 2025 by rpki-client