Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22ABB3D4C5DE11EFA2A8A851762E951A.roa
File: 22ABB3D4C5DE11EFA2A8A851762E951A.roa (raw, json)
Hash identifier: e0bvcNGzNv3JABiBCHqGRqMP0nzaO1oNKHFHJ1dWyPI=
Subject key identifier: A7:33:FF:8E:B1:3E:35:AF:94:8E:B5:04:9D:B3:C5:C0:59:DA:87:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22ABB3D4C5DE11EFA2A8A851762E951A.roa
Signing time: Sun 29 Dec 2024 12:12:13 +0000
ROA not before: Sun 29 Dec 2024 12:12:09 +0000
ROA not after: Sun 12 Dec 2027 12:12:09 +0000
asID: 17561
IP address blocks: 154.210.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77108 (0x12d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:12:09 2024 GMT
Not After : Dec 12 12:12:09 2027 GMT
Subject: CN=67713c9d-eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:9f:e9:11:33:94:bd:c9:b1:bb:d6:8a:98:
fe:66:fc:56:8b:e9:12:9a:88:82:fd:f7:28:04:92:
24:1f:57:8c:5a:39:0f:63:a4:42:02:a9:27:24:19:
97:8d:a8:59:64:58:79:6a:77:47:84:88:84:62:74:
9e:84:0d:4a:20:24:e5:38:17:96:23:89:e4:60:dc:
03:89:53:4c:b8:ac:be:89:ec:0f:d3:c6:47:3b:c7:
58:10:c2:7b:06:bb:f4:3b:64:5f:9f:c3:c7:f4:b1:
97:13:fc:05:29:86:de:6d:28:db:0b:f4:4b:60:00:
58:14:43:69:12:89:0e:37:b5:12:d6:f6:8d:60:a2:
0d:b7:d8:d7:d4:3b:a3:c9:d4:a7:9c:73:8b:cb:00:
6e:38:93:3b:0c:ca:f1:b0:1b:54:87:77:55:7f:20:
f1:a3:7a:be:48:9e:47:4b:d2:d7:67:e4:83:f3:ea:
32:e0:68:ea:0f:98:2e:bf:71:27:82:b0:a1:38:5f:
81:c5:46:58:09:02:b1:e0:18:a4:e3:cc:0d:41:66:
3d:ff:38:2a:48:ab:d2:b3:c9:8c:fb:8b:ab:f4:80:
42:71:26:f6:11:a2:46:63:f7:da:46:bb:e1:81:bc:
2a:53:f3:6f:6b:ce:dc:fe:f6:22:48:cb:c9:a2:25:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:FF:8E:B1:3E:35:AF:94:8E:B5:04:9D:B3:C5:C0:59:DA:87:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22ABB3D4C5DE11EFA2A8A851762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.92.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2c:4f:fb:fd:95:c6:52:70:2f:f0:2e:5b:f5:59:38:9b:14:
21:f1:a3:1c:5c:fa:69:fb:ed:4c:f3:5e:9d:06:5c:d3:ed:8a:
26:c5:90:25:48:47:c4:8b:cd:ce:2f:d4:ad:d8:28:8a:ce:67:
c6:53:9e:70:aa:73:3e:1e:3f:ad:cb:b2:4b:c0:17:25:20:c4:
01:1a:d7:1a:e8:ec:40:41:10:49:16:b7:8b:68:fa:7b:c0:89:
98:16:16:e6:b2:7c:9e:f5:6b:ac:05:8d:7c:9e:ce:2b:73:99:
6d:75:4f:72:44:0c:42:6e:34:ea:2c:b0:18:8b:60:72:5d:8b:
db:b9:a7:ad:c4:a6:fe:d5:12:7f:66:cd:39:38:b1:5b:cc:5e:
ac:2e:75:c8:64:6c:25:d0:d7:ab:c0:bb:d3:6e:73:0f:b6:84:
4e:87:0a:2b:32:50:ef:3d:76:06:21:f5:5c:54:44:58:64:79:
9e:e8:a8:10:4d:c9:82:88:42:73:78:0d:43:33:32:88:97:31:
46:92:49:c9:5f:91:9e:99:0b:e2:6a:2b:6e:6b:3c:f7:cd:68:
14:24:66:da:dd:99:dd:9e:55:eb:89:8b:30:da:d9:f7:58:c0:
88:9a:9d:6f:28:c8:bb:10:fa:95:07:1a:55:97:25:2e:22:32:
27:8b:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:36 2025 by rpki-client