Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37C642C3CE11EFBD5E77B1762E951A.roa
File: 1E37C642C3CE11EFBD5E77B1762E951A.roa (raw, json)
Hash identifier: /3TxSi0j26Qgi51PnuZtj5Ai8wdMBSGZkdtFSnwZ3Gs=
Subject key identifier: 79:59:EE:DE:A5:3C:00:7C:74:07:88:BD:AF:8C:17:5D:6C:68:D7:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012822
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37C642C3CE11EFBD5E77B1762E951A.roa
Signing time: Thu 26 Dec 2024 21:12:31 +0000
ROA not before: Thu 26 Dec 2024 21:12:27 +0000
ROA not after: Sun 12 Dec 2027 21:12:27 +0000
asID: 17561
IP address blocks: 154.83.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75810 (0x12822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:12:27 2024 GMT
Not After : Dec 12 21:12:27 2027 GMT
Subject: CN=676dc6bf-5f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:41:a2:5f:b9:2d:d2:2b:8a:d4:4e:b8:dc:
79:cb:d7:ce:3b:fc:d0:4c:38:83:b3:db:78:8f:89:
43:7f:4d:ef:d2:a3:82:bd:63:6e:da:87:35:73:73:
e6:af:03:f1:e9:b4:9f:02:2d:77:01:96:aa:3d:59:
49:c6:b9:40:71:e4:a6:32:07:03:51:25:1b:9c:58:
0a:9d:bd:48:e2:55:79:cc:36:3f:48:dc:ec:80:79:
ac:61:ba:6e:13:43:0b:d5:c8:65:2e:48:89:cc:2a:
84:89:a1:9f:f5:1b:87:76:c0:8b:10:3a:8a:cd:02:
8a:db:ea:9e:3c:6a:85:82:05:1d:72:e4:90:dc:98:
e7:67:d5:f3:8e:95:0b:ca:21:ec:29:7b:97:29:51:
4b:a3:20:23:6d:83:2d:02:75:0e:28:25:d0:71:5c:
29:58:8b:e0:d3:3e:32:20:ff:f6:e4:bd:90:01:c4:
12:2e:9a:2b:8b:69:34:2a:b9:58:21:9e:78:14:11:
dd:05:33:6e:83:52:a3:05:6f:bb:41:19:b3:a0:5a:
ae:75:bc:ad:d2:c5:f7:b1:0a:e7:a4:71:08:86:70:
7a:b7:3c:9e:08:15:26:54:a1:b4:7b:76:61:ff:4c:
7b:e6:48:2e:67:cb:13:8d:da:70:17:8e:d4:56:35:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:59:EE:DE:A5:3C:00:7C:74:07:88:BD:AF:8C:17:5D:6C:68:D7:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37C642C3CE11EFBD5E77B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ce:65:56:11:98:45:2c:65:c7:09:42:31:2a:b0:36:0f:88:
8f:2d:04:47:d7:0a:ae:e0:3d:22:16:d1:73:6f:70:a5:7c:06:
b3:ac:81:34:b7:55:50:cb:f7:0d:b2:8f:ac:5c:73:f9:4d:24:
79:bb:b6:c6:0f:e7:2a:88:1c:6c:94:ba:01:f8:21:9d:d9:65:
84:98:d7:2d:0a:8b:b2:8e:5f:04:f7:bd:e0:d2:b7:fc:c3:1d:
13:f9:18:30:1f:4a:2f:69:1a:77:7f:e1:22:9d:85:c0:6f:ab:
86:06:31:80:49:f1:97:ec:1b:8f:1f:4b:60:39:9e:2e:f2:44:
bf:d4:5c:21:b7:d6:19:d7:7f:7f:6a:d2:92:e0:b8:25:a5:12:
f8:13:cd:84:db:b1:64:8f:11:29:d4:37:51:a4:66:6d:92:05:
c3:f1:57:d9:43:5d:20:3b:cd:5a:f1:8e:d0:4d:54:60:bc:82:
ad:c5:02:c3:1e:0a:b6:55:c4:5e:07:3e:fa:ca:1f:b3:46:fb:
3b:64:f8:f4:19:78:01:44:00:c0:8e:62:fa:66:20:ff:e6:8b:
65:ae:1c:17:ff:25:45:18:5f:a0:5f:fa:62:e7:7e:3b:3b:35:
29:cb:21:a3:68:2c:52:ed:e2:ef:49:3c:ac:9a:61:78:5d:7f:
40:3a:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:54 2025 by rpki-client