Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F750222C3DD11EF8B99D990762E951A.roa
File: 1F750222C3DD11EF8B99D990762E951A.roa (raw, json)
Hash identifier: ekcDysgfsMtAG6F9gr5HHKnvUP+dhpApbsnVBoM9bCs=
Subject key identifier: 57:A8:8F:6F:CD:0E:75:6A:22:EF:B2:89:12:84:B6:12:91:1B:58:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F750222C3DD11EF8B99D990762E951A.roa
Signing time: Thu 26 Dec 2024 22:59:55 +0000
ROA not before: Thu 26 Dec 2024 22:59:52 +0000
ROA not after: Sun 12 Dec 2027 22:59:52 +0000
asID: 17561
IP address blocks: 154.86.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75962 (0x128ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:59:52 2024 GMT
Not After : Dec 12 22:59:52 2027 GMT
Subject: CN=676ddfeb-7567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:5b:e8:99:29:4d:27:a2:a3:76:5d:98:33:
9c:9f:78:f2:9f:c4:80:4c:d4:2b:fa:01:d2:a6:03:
25:5d:5b:4b:a4:86:8b:7c:95:7b:12:82:0e:91:95:
db:30:03:38:93:4f:d5:fe:56:6e:9f:4e:a3:d3:aa:
d9:be:f4:cc:c4:03:c3:3f:fe:35:72:27:e9:dd:99:
45:cc:de:15:b8:aa:59:9c:f3:38:21:d5:76:a4:33:
a9:85:91:bb:d6:cf:e9:24:ae:82:5a:73:2d:19:a8:
cf:44:65:6b:6c:5c:25:14:c8:cf:48:80:99:a8:41:
e5:10:3d:57:d6:b8:4c:c3:b3:a9:10:aa:17:dd:98:
ed:95:58:32:0c:9c:92:0b:38:1a:6a:4a:3a:b0:ef:
44:04:a8:8e:dd:73:ba:dc:2b:b9:55:6d:d8:9e:e1:
ed:ce:dd:8f:e5:13:69:d6:a6:10:dc:df:09:25:f4:
a4:28:ff:fa:32:72:b0:0e:c4:d9:c9:b9:bb:51:4b:
76:ed:37:4b:ce:bc:05:cf:b8:1b:b2:10:b3:12:a6:
84:f8:e7:85:23:e4:4c:f3:b0:2b:f2:05:88:2c:5d:
20:35:20:01:83:a7:61:dd:cd:18:aa:be:62:94:38:
1c:49:7c:22:8c:42:b4:01:8c:b4:cb:b8:5e:83:6c:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:8F:6F:CD:0E:75:6A:22:EF:B2:89:12:84:B6:12:91:1B:58:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F750222C3DD11EF8B99D990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.14.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e8:f5:57:27:e8:f7:5e:b7:61:dd:9b:10:2d:f0:b1:7e:00:
3b:df:15:ab:0b:82:d9:98:94:2a:11:7b:df:d4:73:17:e2:f2:
7a:f8:66:22:4e:e0:10:1b:43:f1:bb:1e:f2:a1:ff:72:dc:ba:
3e:23:2f:0a:58:af:a5:51:61:1d:dd:bd:59:1c:79:6b:8d:0c:
c7:4c:17:1b:be:52:da:cf:9d:a8:16:fa:9c:e8:07:97:48:39:
5a:c2:3c:23:e2:af:43:8c:16:f2:9d:a6:e2:f8:b2:c4:8f:43:
36:fb:ba:ca:d1:37:d7:dc:f6:66:ff:f1:88:9d:06:12:19:82:
3b:c2:cd:96:cd:d5:b2:2b:36:ec:ae:fe:f0:25:6e:bb:8a:0d:
0e:7e:a1:6d:88:9d:63:1e:d5:b5:82:9c:58:58:69:23:b4:11:
6e:67:24:20:2c:39:e1:95:38:53:3f:b2:c7:4f:a5:1d:25:00:
30:0f:4e:e8:27:f6:d3:94:07:18:72:e0:eb:1d:2e:71:f6:17:
9c:0e:00:8c:99:e0:a4:22:c9:5d:da:fe:25:bd:67:1a:9b:1e:
76:9e:6e:3e:d3:1e:06:bd:14:ac:b3:a9:53:68:c0:28:19:49:
22:ec:8b:f1:15:d6:b1:c4:a3:82:a3:42:83:37:0a:71:d2:fb:
0f:13:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:51 2025 by rpki-client