Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17323CA6C26B11EF9F55E06C762E951A.roa
File: 17323CA6C26B11EF9F55E06C762E951A.roa (raw, json)
Hash identifier: 5LccakhfaruYwbyC5b8WyjChezpQM17ZQZrP8+utQsE=
Subject key identifier: C3:F5:BF:DD:0F:6C:7A:FC:02:EA:DB:95:8C:DB:E4:7D:F6:36:6F:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012422
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17323CA6C26B11EF9F55E06C762E951A.roa
Signing time: Wed 25 Dec 2024 02:51:08 +0000
ROA not before: Wed 25 Dec 2024 02:51:04 +0000
ROA not after: Wed 10 Dec 2025 02:51:04 +0000
asID: 984
IP address blocks: 154.211.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74786 (0x12422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:51:04 2024 GMT
Not After : Dec 10 02:51:04 2025 GMT
Subject: CN=676b731c-19d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:4a:49:94:5d:8d:41:60:44:0d:bf:e3:bc:
89:5c:e7:9d:e0:2c:23:38:20:b2:94:df:91:6e:99:
ad:f4:c9:c5:94:a5:ce:1d:bf:c6:95:95:c2:32:52:
18:07:1d:26:98:ad:93:7c:77:06:8e:8e:ce:93:18:
17:1d:bd:85:d1:1b:cc:a7:d7:ce:4b:85:d8:6f:24:
21:99:f7:bd:73:d6:b5:84:10:a7:94:34:5a:af:05:
04:e8:81:32:7b:c3:41:ab:ca:57:d4:50:b6:a5:6c:
6a:29:ff:e4:5e:ee:01:be:d4:a6:0e:c7:44:72:8d:
ec:a5:eb:4a:69:8f:5b:de:2b:c3:06:66:c4:49:ed:
03:b6:c6:2d:05:64:90:4c:68:d1:98:58:25:a4:43:
a7:be:c9:ef:21:00:38:34:6c:ec:b9:6b:f7:af:52:
bb:c5:f9:db:a1:c0:56:77:97:16:99:0b:f7:f3:a2:
02:1e:b1:59:6d:c2:02:b2:56:0e:a0:da:f8:67:c7:
56:50:a5:a4:07:b3:eb:73:65:21:0f:c4:95:f5:48:
dd:15:64:0c:a0:19:8f:bf:2d:06:3f:2e:fb:e6:6b:
89:c2:21:47:09:b0:88:0e:11:7d:a5:3b:14:1b:7a:
42:69:52:e0:fc:c8:29:cc:f6:53:00:c5:16:2e:12:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:BF:DD:0F:6C:7A:FC:02:EA:DB:95:8C:DB:E4:7D:F6:36:6F:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17323CA6C26B11EF9F55E06C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:5d:83:dd:44:c1:36:87:1a:71:98:89:42:88:79:22:9f:f6:
46:55:6d:20:0b:ad:f5:07:45:be:a2:11:80:6c:ae:0a:9e:fa:
53:14:ec:db:ba:4f:3c:d1:32:a8:7e:29:6e:bb:69:53:55:d6:
34:ec:df:e8:bf:31:25:43:21:45:6f:ee:69:47:58:9a:15:25:
e7:21:1f:1e:a2:ae:6d:44:9d:97:16:8a:91:c2:a4:ec:28:62:
c6:c7:25:a4:e4:27:55:8a:c7:c9:bd:dc:13:b5:12:5f:e2:3f:
b8:32:48:7d:26:f7:5a:9e:64:67:18:69:d5:98:51:4e:41:28:
13:0b:e8:44:a7:ef:1f:e4:60:48:ae:9b:2d:2d:13:1d:5a:c3:
d1:dd:51:7a:e6:e1:d5:bd:de:46:d7:a6:bb:c5:c9:b9:74:b3:
94:d2:53:95:4b:0f:e5:63:38:f2:28:3f:b4:d7:ad:62:d3:57:
8f:1b:d2:29:6c:08:de:9d:9b:bc:f3:eb:30:e7:70:2d:cf:54:
4c:14:3b:fd:76:d7:76:0c:b4:c8:6d:69:f9:2f:73:30:a1:00:
2e:d2:8b:28:3f:42:2c:a4:25:84:4d:25:71:a9:45:59:a4:6c:
aa:52:2e:68:62:bc:91:18:b6:44:20:4d:c1:c9:0a:8e:d5:58:
a7:6c:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:28 2025 by rpki-client