Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6350A8C36F11EFAFFFEF5E762E951A.roa
File: 1B6350A8C36F11EFAFFFEF5E762E951A.roa (raw, json)
Hash identifier: yYpBpTLb6rTe1uAR8kzlpDvBbWKHBvETEWzRqDqcIjw=
Subject key identifier: 28:24:31:E6:D4:FB:5F:16:BE:11:BF:64:4E:1F:A8:3C:11:79:C3:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012716
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6350A8C36F11EFAFFFEF5E762E951A.roa
Signing time: Thu 26 Dec 2024 09:52:24 +0000
ROA not before: Thu 26 Dec 2024 09:52:20 +0000
ROA not after: Sun 12 Dec 2027 09:52:20 +0000
asID: 17561
IP address blocks: 154.94.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75542 (0x12716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:52:20 2024 GMT
Not After : Dec 12 09:52:20 2027 GMT
Subject: CN=676d2758-b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:48:bd:3a:6e:2c:e9:a2:d1:7d:06:59:b2:
bd:e6:77:fe:d4:5c:83:89:90:e5:cb:7e:06:41:6e:
c0:54:73:22:62:76:4a:28:e4:29:29:ec:e1:31:51:
76:9f:d6:f4:f3:62:ee:5f:58:8d:de:80:9a:d4:c0:
6e:1b:22:bb:1c:eb:7f:b3:78:ab:cf:f9:d4:f4:67:
f7:3b:52:83:48:ee:c5:c1:2d:62:22:01:1e:c8:70:
91:93:39:71:5c:69:b0:65:4a:41:a4:bf:04:84:8c:
8b:ee:8e:1f:ac:5b:5f:61:6e:75:14:6e:0c:dd:e3:
bc:3d:23:16:df:75:3a:45:59:39:0d:5a:ed:d3:a5:
88:bc:24:27:98:ba:8c:58:3f:b1:b0:ae:a6:3d:71:
06:b3:84:38:cf:58:3c:cb:36:20:13:da:25:52:6b:
a6:3a:4b:64:82:ee:40:8e:27:0a:54:2f:72:f4:b8:
13:53:74:46:66:04:5c:b1:e5:84:5a:b7:62:67:84:
de:1b:f7:77:04:9c:c7:3d:dc:de:fb:a6:bd:2e:d6:
fd:d4:12:49:52:0c:5b:f2:f5:26:c4:a1:a0:71:be:
5c:2c:89:01:17:20:45:ee:20:ef:62:04:02:35:aa:
a4:bc:d1:d6:8a:e7:44:62:0c:21:d3:87:e7:7a:00:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:24:31:E6:D4:FB:5F:16:BE:11:BF:64:4E:1F:A8:3C:11:79:C3:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B6350A8C36F11EFAFFFEF5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.162.0/24
Signature Algorithm: sha256WithRSAEncryption
27:55:b1:e3:da:a4:6d:d8:8d:0c:1e:aa:6d:2c:62:30:1a:3c:
7a:af:0a:01:ec:26:fc:ef:73:ff:28:4a:3c:46:1c:89:c5:49:
51:38:10:34:b4:bc:f8:77:d1:bf:3d:f6:c2:7f:d0:ba:c7:4c:
1b:63:47:d1:33:87:ce:9a:1e:32:fd:09:8e:9b:91:72:2b:91:
7b:56:c9:6b:8d:a5:eb:65:95:e5:8a:11:f1:d3:50:55:55:53:
69:0d:2a:32:c9:19:c3:a5:3b:76:ce:be:64:76:1e:78:e7:2f:
21:04:f9:b3:14:2d:72:f1:ca:d5:7a:64:23:32:67:5f:dd:fc:
38:57:76:ea:9e:b1:4c:40:b0:eb:1c:fb:32:8f:99:f2:ed:18:
a4:66:28:6b:2d:07:77:04:e8:9f:5e:f4:13:ab:c5:31:b5:50:
96:f2:00:62:39:b1:89:95:67:7e:2e:b0:bf:dd:25:88:89:2d:
66:94:43:c7:08:f5:f0:97:7c:68:af:22:07:be:bb:0e:41:92:
6c:12:5f:a2:44:8f:0b:10:50:4c:9e:cd:45:56:05:30:41:b2:
a9:70:40:ba:9d:79:b2:9f:d7:22:bf:21:9f:25:50:83:c4:83:
cc:32:7c:2f:1b:ca:74:20:e6:bf:61:fa:07:cd:ac:c9:b8:73:
34:48:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:29 2025 by rpki-client