Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160DC1D8C53111EF884A9886762E951A.roa
File: 160DC1D8C53111EF884A9886762E951A.roa (raw, json)
Hash identifier: j6NbuhmCAuBhqVJZ83YccEkqAuqplMKWXQgwM+5xMf8=
Subject key identifier: 0D:C0:DB:A4:DF:0B:6C:0F:A0:39:84:E7:59:02:9B:3B:F7:8A:E7:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160DC1D8C53111EF884A9886762E951A.roa
Signing time: Sat 28 Dec 2024 15:33:29 +0000
ROA not before: Sat 28 Dec 2024 15:33:20 +0000
ROA not after: Sun 12 Dec 2027 15:33:20 +0000
asID: 17561
IP address blocks: 154.204.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76781 (0x12bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:33:20 2024 GMT
Not After : Dec 12 15:33:20 2027 GMT
Subject: CN=67701a49-48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:64:6d:a7:05:8f:d6:0c:b9:37:8f:ae:0d:
eb:89:ab:a1:18:04:f5:12:59:04:1f:ab:75:0e:d6:
af:80:87:39:8a:63:da:82:fc:d2:0f:29:93:dd:62:
51:f5:79:64:b2:e0:4f:84:12:7b:46:a6:57:46:83:
60:bc:30:a3:95:0e:ad:48:29:bd:ef:fa:82:7e:5a:
fb:6a:56:65:0f:0f:76:10:be:38:b7:77:18:03:d3:
f2:cb:a3:e6:18:0d:cc:c9:f1:9e:bc:39:ba:29:cc:
1b:9c:53:6b:40:f0:92:ab:0e:d9:a7:30:36:fd:2b:
f5:39:8e:b3:e4:e8:c7:a3:10:e0:08:ca:0b:ba:08:
dd:18:8e:ad:e0:6a:55:e0:23:a4:ed:a3:06:88:57:
39:f3:08:0e:52:93:23:a7:86:7e:6a:87:53:8b:cf:
15:f6:71:99:0c:1b:c2:2e:c6:1a:d6:44:00:bb:29:
47:e3:ce:a5:35:50:d1:cf:29:cb:44:39:51:73:cd:
d2:a5:c0:8d:73:cd:a1:62:81:c6:5b:6e:dd:0c:0f:
80:ac:67:83:af:63:e3:8a:7c:76:7c:17:dd:d2:12:
5f:77:24:a7:e2:f9:03:51:4b:2d:dd:da:6a:01:8d:
a3:97:c7:01:d5:1c:92:c1:21:c4:5d:20:4a:94:be:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:DB:A4:DF:0B:6C:0F:A0:39:84:E7:59:02:9B:3B:F7:8A:E7:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/160DC1D8C53111EF884A9886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.95.0/24
Signature Algorithm: sha256WithRSAEncryption
29:db:98:ce:78:9e:6d:a5:07:85:ce:28:e4:2a:57:4b:4c:3b:
f5:0a:c5:79:71:59:ee:6d:dd:bd:e3:1f:83:d1:50:25:45:f4:
4d:b0:81:87:e2:4f:a1:b0:64:5a:b6:de:ea:fc:eb:28:44:ac:
c0:cc:d9:b9:76:9d:5d:95:26:73:a4:08:cd:a0:30:e1:f4:24:
e4:16:13:5a:c1:99:11:2d:75:12:ed:a0:6b:8b:71:b4:b9:97:
ad:b0:36:58:11:16:b2:94:2d:d8:77:79:14:d5:88:75:f7:9b:
38:1c:3e:1a:95:e5:b4:55:a1:d5:d3:91:10:42:c9:26:85:2e:
67:60:a8:19:bf:b8:43:1c:05:51:f8:76:bd:4c:70:06:45:e3:
0f:81:19:82:e9:a4:72:31:32:fe:0b:c5:a4:d0:34:3e:a0:ff:
63:29:2c:aa:47:44:92:6e:13:b0:0a:42:56:6d:75:64:60:97:
53:17:df:74:a4:e3:7f:f2:a7:cd:e3:7a:7e:d5:80:19:8f:62:
5d:c7:6d:35:ea:9e:b8:e5:a4:d5:54:fa:1a:3d:ae:52:c0:5c:
67:d2:d0:e2:27:3d:63:ff:ab:1c:79:10:e0:aa:d0:76:d9:09:
18:5c:6f:82:e5:84:72:ac:93:1a:32:9a:81:6d:86:27:d9:8c:
13:6a:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:55 2025 by rpki-client