Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB8C9C4C36C11EF9F8C404D762E951A.roa
File: 1AB8C9C4C36C11EF9F8C404D762E951A.roa (raw, json)
Hash identifier: QW/t0zDeWzW4u8htQ/iKPhwc2TvdSRMMAPTL624h9tQ=
Subject key identifier: 64:FD:80:73:E8:51:94:68:B0:EC:BD:05:BE:65:6D:1D:D8:5F:FE:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB8C9C4C36C11EF9F8C404D762E951A.roa
Signing time: Thu 26 Dec 2024 09:30:54 +0000
ROA not before: Thu 26 Dec 2024 09:30:51 +0000
ROA not after: Sun 12 Dec 2027 09:30:51 +0000
asID: 17561
IP address blocks: 154.94.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75510 (0x126f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:30:51 2024 GMT
Not After : Dec 12 09:30:51 2027 GMT
Subject: CN=676d224e-b085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:de:7b:07:d6:72:6c:6b:0f:07:f8:5e:f1:
bd:6c:b2:2b:d3:19:72:1c:24:18:76:4e:31:e7:27:
2d:55:03:38:ad:1b:08:58:bc:bf:ff:25:d7:55:58:
89:39:87:27:e5:7e:1c:05:91:7c:54:21:c7:65:7f:
44:60:ae:4b:f5:6c:9e:68:dd:b7:82:3a:52:61:5e:
19:4b:f4:59:96:1d:32:09:b7:ac:22:93:c3:d7:8c:
47:a8:44:69:55:9a:73:31:f4:37:fe:7a:bf:c4:60:
24:d9:95:e8:10:c8:7d:6b:65:8b:75:9f:b8:2f:df:
75:62:3d:77:a8:f5:e7:f4:e2:01:05:39:18:e1:f9:
75:5a:18:d2:f9:bd:09:f9:6c:08:6b:f1:58:4b:71:
ae:80:90:0f:3c:48:f3:c9:99:da:ea:18:84:7e:26:
60:83:08:24:99:ec:a7:36:67:36:86:c9:5c:82:6d:
98:3d:fc:fa:54:d1:c8:f4:bd:55:c8:b7:dc:28:19:
b2:22:1f:0d:39:a9:90:48:c1:54:6b:4e:c2:4e:9e:
67:a9:8b:e1:bb:d1:ad:c6:71:85:36:f4:0b:a5:9e:
fa:2c:66:cb:ec:a9:c6:f1:ef:29:9d:cd:c1:7a:b1:
63:17:be:16:4d:20:50:c3:d5:2a:37:eb:02:f1:f4:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:80:73:E8:51:94:68:B0:EC:BD:05:BE:65:6D:1D:D8:5F:FE:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AB8C9C4C36C11EF9F8C404D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.146.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b6:e6:e8:93:2e:25:ee:0b:df:bb:cb:70:b5:c9:eb:4d:41:
aa:2c:d3:77:9f:48:f7:0e:77:d7:da:68:9c:e7:fc:67:c9:1a:
42:36:e6:0a:77:f3:e7:50:a7:69:75:e6:f5:55:09:de:f3:a1:
8a:43:ac:ac:c7:61:bc:59:74:58:7a:42:01:d0:19:24:eb:5c:
ef:cc:5e:3c:9e:29:ed:ee:67:f1:c6:d5:8b:c1:76:83:51:63:
84:81:c6:35:2b:9c:42:4f:3d:91:e4:09:50:e5:51:63:7f:8e:
3b:aa:f1:c4:ec:db:fb:95:d9:74:28:37:eb:9f:6c:d6:48:20:
dc:1d:22:15:02:4d:18:44:8b:84:66:1c:2a:e0:f3:1d:12:a9:
01:8b:fb:99:9a:8b:34:0f:71:4d:4b:40:0a:6d:3b:fe:ff:35:
88:93:f2:78:ac:b3:13:09:93:42:fe:7a:2a:71:c6:9a:3e:41:
0a:a2:65:a7:8c:30:6f:76:44:0f:16:93:2a:72:a9:93:a0:98:
03:de:7b:55:fb:51:8c:13:c9:9a:07:1f:e7:ab:06:7f:ba:0c:
de:e7:04:e7:42:10:0c:e5:74:e7:74:de:b3:fc:4a:67:21:b3:
d8:8b:80:a3:9e:e2:71:eb:96:a4:ff:ba:76:bf:c5:e8:eb:87:
5b:85:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:23 2025 by rpki-client