Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E848554C5E011EFACB0485E762E951A.roa
File: 1E848554C5E011EFACB0485E762E951A.roa (raw, json)
Hash identifier: 7ythIPmisWhVqNswqY/cwaitydpGrF6ZpMimtLtTb1o=
Subject key identifier: E6:70:77:03:A7:B7:64:57:DA:08:AD:FC:58:0B:C5:38:AA:2A:C4:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E848554C5E011EFACB0485E762E951A.roa
Signing time: Sun 29 Dec 2024 12:26:25 +0000
ROA not before: Sun 29 Dec 2024 12:26:21 +0000
ROA not after: Sun 12 Dec 2027 12:26:21 +0000
asID: 17561
IP address blocks: 154.210.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77126 (0x12d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:26:21 2024 GMT
Not After : Dec 12 12:26:21 2027 GMT
Subject: CN=67713ff1-5b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:a3:c1:fd:a2:b6:d3:44:cc:a4:72:85:31:
30:29:7d:30:79:07:91:15:c2:b0:79:ad:48:07:0e:
5b:e1:b2:a5:0f:e0:e0:9b:87:7c:bc:a1:99:90:b2:
4b:eb:0d:3f:ea:07:bd:ee:96:d1:7e:59:f8:d4:51:
b1:38:4d:a2:ce:b3:4b:aa:c4:f8:d9:4a:e6:58:ab:
c6:54:fa:ac:e7:45:4c:b6:0d:33:5d:11:ba:07:5a:
64:37:d6:38:00:59:93:99:14:79:f9:f8:b8:60:90:
5a:cb:f8:40:0d:29:bd:89:22:8f:b7:9c:32:25:e7:
11:13:ae:cd:be:7a:d5:87:f1:63:56:1e:e6:1b:25:
e7:2b:48:dc:a8:63:41:73:da:5f:ba:0d:6e:c0:05:
f0:0f:82:8a:99:93:f0:f5:af:f3:4c:d4:e4:91:23:
ba:be:1c:d3:8d:40:0c:ea:e9:b8:bd:5d:11:e7:ca:
9d:8d:04:c4:ac:46:6e:14:dc:9a:4b:af:61:43:8e:
a7:75:7f:8b:32:a0:0b:b7:27:8e:2c:99:3e:ae:2b:
ce:b4:4a:25:2f:22:f2:18:a3:75:02:5c:7f:83:8a:
95:74:9f:cf:de:ec:85:45:4b:e9:59:12:67:99:fc:
ec:2d:aa:a5:7e:6f:50:94:30:92:60:01:6e:c7:f6:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:77:03:A7:B7:64:57:DA:08:AD:FC:58:0B:C5:38:AA:2A:C4:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E848554C5E011EFACB0485E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c8:70:48:a3:7c:74:13:5a:4b:1d:a0:cc:12:e9:02:6a:b0:
1e:48:7c:9b:64:b1:b5:ed:a9:48:e3:4a:e5:1b:54:90:79:9f:
c7:bb:a2:ec:85:bc:77:01:2a:36:65:87:58:42:4d:e7:cc:b5:
cf:e0:51:c0:08:5c:02:09:20:61:9d:52:ac:79:fb:44:99:29:
11:d1:97:6d:f1:10:ea:00:16:d7:32:16:4a:ba:ec:b8:af:30:
af:2c:29:3d:05:c8:38:bb:f9:9e:55:02:f3:eb:f0:a7:3a:72:
d1:11:d8:f3:1e:2d:ef:07:ad:e0:ae:44:be:1a:eb:64:b7:68:
e4:16:db:cf:b3:53:ca:76:d7:19:0b:de:d8:6b:46:fb:de:64:
6a:3a:7b:b9:22:20:81:16:ec:4b:46:2c:97:3b:d8:19:1f:45:
38:8e:81:03:e6:5e:1d:04:d9:dc:90:1e:f7:43:6e:8e:66:95:
f1:32:71:c3:7f:97:18:37:a3:56:5e:bd:00:dd:04:df:72:24:
d0:5d:f2:cc:36:ae:d3:eb:17:33:7d:53:58:97:b5:00:78:21:
ea:67:51:41:42:1b:45:30:75:5c:e9:9d:07:f4:9b:37:dd:a5:
15:bc:15:4f:74:5f:14:06:6c:3b:9d:9e:e0:f2:6e:56:d9:c8:
1f:e4:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:00 2025 by rpki-client