Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168DD640C5ED11EFA3CE48AE762E951A.roa
File: 168DD640C5ED11EFA3CE48AE762E951A.roa (raw, json)
Hash identifier: j3ZnQoxu18dUQe2NoS3DnbGSyhkkB2tySErLF86cedE=
Subject key identifier: 9D:F7:F3:A7:3B:55:F5:E3:52:CF:B1:9B:E1:C7:8E:2D:9A:B3:FF:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168DD640C5ED11EFA3CE48AE762E951A.roa
Signing time: Sun 29 Dec 2024 13:59:15 +0000
ROA not before: Sun 29 Dec 2024 13:59:11 +0000
ROA not after: Sun 12 Dec 2027 13:59:11 +0000
asID: 17561
IP address blocks: 154.211.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77238 (0x12db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:59:11 2024 GMT
Not After : Dec 12 13:59:11 2027 GMT
Subject: CN=677155b3-db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:c1:7b:fd:e0:48:1f:0d:55:de:50:f4:2e:
ed:e5:2b:28:62:9c:a6:08:85:fd:6f:29:dd:d0:73:
94:ef:82:c1:89:84:89:49:17:a5:ff:fe:a8:97:9d:
fc:d2:c6:54:5d:27:54:20:46:db:71:10:13:28:3f:
72:8b:b5:72:20:4b:1a:c7:67:cb:fc:c8:28:6e:cc:
ff:93:73:5a:a5:c6:23:d6:e8:39:06:88:fc:a0:3f:
72:cb:7d:e3:b6:19:04:6f:73:61:4b:32:f5:41:8b:
86:09:0e:9d:cf:6a:8a:09:cf:69:d9:33:b2:15:48:
4f:55:25:f9:76:24:ec:31:09:e5:7a:c2:e5:f1:59:
cb:fb:d6:7e:8f:3f:ef:99:69:bf:f7:29:9f:66:8b:
e9:88:b7:00:97:93:11:31:d2:7b:b4:2f:df:9f:97:
67:ad:5b:ce:57:c2:26:7c:77:70:40:06:41:45:95:
7a:a2:75:08:3d:ff:2c:c6:87:50:9a:03:bc:3d:4a:
63:2d:e2:3c:5a:e8:17:97:f5:d9:79:11:76:20:05:
39:b9:1e:78:25:bc:26:99:91:e9:9f:f7:54:e5:aa:
a1:05:e0:28:e1:5f:3a:8a:ed:96:7d:05:be:d9:c1:
a8:e7:fd:01:c1:3b:36:b0:23:2c:4b:4e:f7:c4:37:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:F3:A7:3B:55:F5:E3:52:CF:B1:9B:E1:C7:8E:2D:9A:B3:FF:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168DD640C5ED11EFA3CE48AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.34.0/24
Signature Algorithm: sha256WithRSAEncryption
57:94:8b:22:8e:95:75:bd:05:7e:ea:1a:7a:72:fa:8d:56:77:
a9:f0:aa:d0:ae:35:a5:26:be:2a:87:77:90:9f:4b:a2:ed:2b:
64:bf:9b:df:9a:e7:ec:e3:1a:95:0b:3f:6f:93:d2:6a:87:94:
d5:7d:d2:f5:27:33:dd:93:75:b7:57:d5:ec:ba:c1:70:f1:82:
2f:82:76:ac:9c:60:03:77:63:91:08:a1:96:42:89:cc:76:91:
17:08:4b:b8:c8:31:3f:7c:06:5a:15:50:5e:68:0f:5b:58:e7:
af:3b:38:24:66:2a:cd:e5:15:de:e5:85:bb:21:52:f1:7b:a9:
71:72:8d:79:ba:55:91:6c:a3:5f:d6:c3:f4:b8:90:84:5d:46:
6e:0b:2a:1d:dc:99:e5:3d:4d:61:16:b9:ae:58:4f:fb:f1:ec:
a0:86:b5:da:7c:d4:ec:cb:0f:1a:e6:a3:58:c8:1f:a8:55:62:
69:af:78:28:94:3f:3e:f7:3e:b7:00:3d:51:9b:98:0d:bf:d3:
4d:6b:6c:90:b4:e1:96:07:86:3b:4f:48:e3:11:cc:25:6c:68:
81:a0:5f:91:83:78:7e:7a:bd:b3:c9:79:d5:be:8f:09:08:96:
d6:61:f9:7a:5c:0e:06:84:f6:f0:05:3e:2a:36:d6:8a:ef:1e:
04:90:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:47 2025 by rpki-client