Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F8145C6C3DF11EFA289F69B762E951A.roa
File: 1F8145C6C3DF11EFA289F69B762E951A.roa (raw, json)
Hash identifier: kI64Ea6raEha7E7zq8rKs1+rDSoAo0/7Nz+4Cx+qHMQ=
Subject key identifier: 90:DE:FB:76:C9:0C:3C:77:DD:46:B7:B6:C7:B0:6B:17:49:7E:97:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F8145C6C3DF11EFA289F69B762E951A.roa
Signing time: Thu 26 Dec 2024 23:14:15 +0000
ROA not before: Thu 26 Dec 2024 23:14:11 +0000
ROA not after: Sun 12 Dec 2027 23:14:11 +0000
asID: 17561
IP address blocks: 154.86.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75982 (0x128ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:14:11 2024 GMT
Not After : Dec 12 23:14:11 2027 GMT
Subject: CN=676de346-69b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:9b:a3:c6:2f:a4:5d:f7:f2:da:e8:0b:39:
e4:1e:49:ee:2f:9f:00:25:48:dd:fe:4b:f1:f7:82:
5a:44:2d:44:2f:a0:4b:29:b6:61:fd:11:66:29:c3:
73:de:5d:60:f3:e7:bb:ce:ba:2b:75:8e:8f:fd:84:
26:ea:01:1f:ca:42:f9:65:10:f8:d4:6a:df:a8:2c:
4b:b0:f8:f6:15:cc:ed:d9:e0:80:41:b1:eb:a9:54:
c4:90:54:b0:34:e6:d9:17:a3:67:58:08:02:fd:77:
6b:c2:80:1b:87:c6:27:b8:67:87:2e:31:c1:02:f7:
95:1a:b8:a7:1c:f4:bd:4c:43:52:95:b8:83:1e:a9:
4d:13:8f:eb:25:36:f1:d6:70:c2:84:ba:0e:07:65:
46:60:10:f8:9b:0a:a5:3a:ed:0d:1a:7f:5c:9e:57:
55:13:fe:64:d9:5c:4c:20:62:91:c6:72:8a:23:a5:
42:9c:74:10:94:23:88:a2:2e:24:88:ad:a1:1e:26:
ef:c9:cf:6e:19:dc:77:63:fb:39:1a:5b:ad:58:b1:
3e:0e:f7:56:0e:b4:23:62:13:07:ce:96:6e:9c:ca:
de:ee:8a:50:aa:95:2c:fe:3a:b3:33:e4:fb:f2:f5:
49:6a:fc:5e:dd:e0:c6:ef:46:81:65:3d:af:4d:b2:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:FB:76:C9:0C:3C:77:DD:46:B7:B6:C7:B0:6B:17:49:7E:97:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F8145C6C3DF11EFA289F69B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.121.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:08:93:c3:8c:29:f8:5d:40:d7:db:8b:9f:c4:9d:23:0c:5a:
d5:57:72:19:d5:7e:88:79:bd:65:a4:f4:1e:96:80:31:30:48:
c1:f2:63:82:fd:28:02:0c:cb:5c:ba:bf:44:9b:84:56:df:21:
d4:21:8a:21:f0:c2:eb:46:9c:e4:d3:37:72:1b:36:77:c6:fa:
e9:a6:48:b3:eb:77:95:83:8a:5d:32:15:4f:25:42:cf:e8:a6:
a1:79:8a:9f:fa:ae:cc:71:69:f8:44:b4:c3:55:72:b7:79:96:
1d:fe:4e:48:40:a7:10:cb:36:2c:63:aa:51:33:1f:cb:bb:b6:
ea:08:97:f0:64:52:f0:02:21:82:35:ee:9a:1e:91:08:8d:3b:
40:51:56:e8:ce:0a:8b:b6:e3:a3:2c:e2:04:4f:86:39:c5:02:
4c:31:af:d8:c0:3f:37:95:fa:d0:f5:85:19:f7:e0:c4:0d:f2:
08:4f:17:04:25:df:02:53:19:d6:bf:b5:19:f0:dc:03:d7:09:
1f:66:ad:e5:48:ef:33:5e:84:65:ec:22:37:37:4a:23:fa:6a:
2f:c2:47:9e:92:75:13:24:ce:4f:aa:90:59:8e:04:7f:23:b0:
16:cf:37:bf:dc:bb:44:00:c6:81:2a:37:69:04:b3:6d:72:4d:
1c:95:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client