Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1893D0C6C54C11EFB5200DB0762E951A.roa
File: 1893D0C6C54C11EFB5200DB0762E951A.roa (raw, json)
Hash identifier: E0Eh49wwrNGCDNlGSMzPRUHTKS/e1YU+s9bdXzfC+5I=
Subject key identifier: EF:B5:7D:F4:00:76:21:40:9C:D6:64:2F:B5:66:23:95:15:1F:E0:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1893D0C6C54C11EFB5200DB0762E951A.roa
Signing time: Sat 28 Dec 2024 18:46:49 +0000
ROA not before: Sat 28 Dec 2024 18:46:46 +0000
ROA not after: Sun 12 Dec 2027 18:46:46 +0000
asID: 17561
IP address blocks: 154.209.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77027 (0x12ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:46:46 2024 GMT
Not After : Dec 12 18:46:46 2027 GMT
Subject: CN=67704799-d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c8:27:de:9a:e7:d7:70:89:68:a8:3f:8e:ae:
91:13:74:9c:ef:d4:93:74:9a:05:66:a1:40:ff:ae:
f2:8c:46:dd:c9:4c:52:ee:51:e6:6b:21:86:dc:5e:
72:b3:5f:c7:9b:98:13:7e:98:85:0c:72:ea:08:37:
93:2d:db:11:02:6c:0a:9b:a3:55:02:06:6e:13:5d:
1d:a7:15:a7:0d:e9:f9:a2:90:7b:5d:bb:74:be:a3:
a8:8d:14:b2:2b:38:6a:a7:28:ae:dc:be:c4:02:d5:
9e:8c:16:75:8e:bb:6b:26:df:6e:d4:c2:4b:34:0f:
8d:69:4f:17:88:37:53:a3:29:58:3d:05:fc:1b:f4:
b2:db:27:57:df:f9:a1:74:81:45:ef:1b:d5:46:d0:
ac:3b:af:08:98:b3:74:35:6c:71:e8:22:13:91:c7:
2c:0a:59:cd:5f:76:35:9e:f8:9d:10:a7:c4:2f:a4:
fd:f7:e2:43:5b:be:cc:bd:35:2e:db:7c:92:d6:cc:
41:e6:3f:ed:79:4c:f2:24:8e:b7:a5:44:3d:01:2a:
6d:c5:f4:5f:4e:d6:fe:e8:40:4f:1d:2c:39:d8:a2:
31:95:ac:42:8b:e0:22:02:1d:29:04:4f:17:38:e5:
7c:cd:63:cb:d6:49:d9:b8:84:0c:6e:df:a1:a1:d5:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B5:7D:F4:00:76:21:40:9C:D6:64:2F:B5:66:23:95:15:1F:E0:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1893D0C6C54C11EFB5200DB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.78.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d8:66:c8:2e:fe:9c:03:91:0e:7d:de:7d:e2:91:1d:1b:2d:
86:a2:90:49:1a:c8:03:ae:62:88:9b:a3:63:cf:6c:49:43:f8:
c1:75:60:5c:87:55:83:53:77:4c:4c:56:5c:bd:24:6c:f9:14:
a2:66:d2:e3:7c:f8:06:a7:aa:7f:67:27:d8:21:c8:b8:4b:f0:
f6:9f:74:75:a5:32:8e:ce:71:ef:4c:13:47:2d:34:71:f2:8a:
57:14:38:8e:21:1a:96:2c:9b:b8:2e:91:a0:ec:a4:67:a9:e6:
d9:d0:85:03:3e:b4:a6:53:a8:c0:22:cd:bc:a5:41:c6:3a:d0:
e3:2c:ef:b0:51:5a:05:55:36:52:8c:93:71:37:1d:63:8f:ea:
6c:de:c8:fb:cd:ca:9f:2b:91:91:cd:26:42:b8:45:2f:37:b5:
50:3a:ea:6e:46:ab:4e:c4:6e:f5:61:da:7d:54:16:db:5d:cd:
59:a5:26:43:32:c4:04:a6:81:a9:a5:94:05:aa:14:38:10:70:
2c:9a:c6:14:59:32:11:ef:8c:c3:6c:16:3a:f0:4f:f3:b3:90:
e3:3e:da:6f:c6:e7:d6:76:32:3f:5f:2b:d7:ff:01:49:14:7f:
cf:de:f5:5c:b2:3a:63:05:50:6d:98:75:8e:49:bd:c7:0a:1a:
b5:35:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:49 2025 by rpki-client