Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B0E68C8C54411EF9855657D762E951A.roa
File: 1B0E68C8C54411EF9855657D762E951A.roa (raw, json)
Hash identifier: Nn22POB5P8mccgdAZNXUpWBrOUidIQ7ERu/qhmY5I2A=
Subject key identifier: 34:95:10:57:11:D8:8E:83:0F:BC:7E:1A:F4:11:8F:F5:04:FC:A0:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B0E68C8C54411EF9855657D762E951A.roa
Signing time: Sat 28 Dec 2024 17:49:37 +0000
ROA not before: Sat 28 Dec 2024 17:49:34 +0000
ROA not after: Sun 12 Dec 2027 17:49:34 +0000
asID: 17561
IP address blocks: 154.208.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76953 (0x12c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:49:34 2024 GMT
Not After : Dec 12 17:49:34 2027 GMT
Subject: CN=67703a31-0ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:82:ac:ed:86:ca:2b:b0:bf:20:d4:d6:eb:
cb:bd:87:35:96:94:6c:29:ce:67:ea:b0:f9:04:7c:
02:44:fa:fb:b7:67:67:de:c5:ab:c3:a1:57:d4:b0:
4d:89:0c:6e:ff:f9:58:63:e4:ea:a9:1b:c6:8a:26:
9d:45:10:3f:fd:45:ce:f9:26:f3:b2:09:6e:83:26:
07:12:12:e5:f7:59:3d:e1:07:ce:3b:99:bd:7b:65:
26:e1:55:3b:36:c3:65:72:7d:c4:c4:5d:38:ac:b8:
3a:52:f9:44:cc:dc:d2:a3:79:38:65:22:6f:8f:25:
58:0d:d1:96:48:67:b6:b3:ae:12:82:6a:8a:d0:5f:
54:58:50:09:09:86:92:76:47:db:1e:2a:49:09:7d:
c6:c2:a2:6f:4a:73:af:e2:4b:90:72:76:e1:c6:c4:
0f:72:ed:26:04:8d:f7:8f:a7:f9:bf:f5:57:de:a0:
8f:9c:b1:c7:61:50:9e:56:b9:1b:2d:25:8b:71:64:
bc:49:71:d5:a7:37:21:02:e9:20:f6:a4:75:9c:58:
86:14:c3:43:e3:11:f3:3d:ee:3c:be:4e:1f:ef:7c:
27:0f:d3:64:b5:8e:2f:03:a4:ad:d0:82:bc:16:f3:
3e:fc:a0:bb:44:0c:b2:96:4c:5b:63:ae:35:82:d4:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:95:10:57:11:D8:8E:83:0F:BC:7E:1A:F4:11:8F:F5:04:FC:A0:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B0E68C8C54411EF9855657D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.177.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ab:78:d6:cf:36:9c:67:44:a8:7f:9e:86:ce:5f:c9:f4:a7:
f2:5b:f2:c3:b1:62:72:9a:eb:02:08:b8:f6:d7:f6:f2:ef:8b:
0f:76:10:19:2c:ed:8c:21:68:d6:89:1c:89:d2:76:d3:a8:1e:
b7:20:c5:c9:7a:3a:6f:70:eb:f1:37:6a:47:ef:28:71:62:4a:
ff:8c:76:ce:a0:67:e2:08:53:b9:d9:1f:3d:a4:c1:9b:f1:67:
9c:26:a2:d9:22:d9:1f:5d:e1:d7:5f:f0:9a:92:c4:3e:3e:ab:
b8:d9:f8:1d:de:66:89:b4:39:3b:43:87:23:6c:57:01:c1:d1:
ed:88:6b:66:62:15:ed:ab:9c:10:2c:d3:0e:de:36:c3:39:2d:
1b:c1:3d:64:78:ae:67:d0:d0:72:b1:7d:91:7d:9b:de:d7:d0:
b5:37:e4:62:e9:4e:79:9e:a3:3d:55:e6:d8:f7:5e:36:88:f8:
e3:4a:58:96:2d:6b:63:40:6a:52:95:4a:ff:e3:f8:2e:dc:8d:
7a:91:17:47:4b:af:8e:22:6a:f6:29:ea:1d:91:1e:3d:7d:d1:
4b:a1:0d:ae:9b:4d:66:d3:6d:c8:a5:4e:cc:86:83:58:68:31:
9b:44:ef:04:1b:85:7a:0b:7b:cc:43:d4:fb:36:1c:c5:fc:07:
7e:35:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:12 2025 by rpki-client