Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EF50B2C5DC11EFA3327046762E951A.roa
File: 24EF50B2C5DC11EFA3327046762E951A.roa (raw, json)
Hash identifier: XD3PLKTShIqAYgavSF3r0GElPr+B7KlvuKIDNIR0jYk=
Subject key identifier: 1C:CE:98:3E:F8:8B:48:1B:91:60:2E:0F:19:9C:C8:82:CA:89:A1:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EF50B2C5DC11EFA3327046762E951A.roa
Signing time: Sun 29 Dec 2024 11:57:58 +0000
ROA not before: Sun 29 Dec 2024 11:57:54 +0000
ROA not after: Sun 12 Dec 2027 11:57:54 +0000
asID: 17561
IP address blocks: 154.210.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77090 (0x12d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 11:57:54 2024 GMT
Not After : Dec 12 11:57:54 2027 GMT
Subject: CN=67713945-d066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:b9:cc:d4:11:0b:3f:d4:df:bd:55:d5:45:
69:d9:69:b8:4c:e6:ee:58:81:54:eb:fa:1b:45:07:
56:79:a7:38:81:96:61:6d:d2:6f:10:19:6b:96:13:
40:c9:44:52:e4:79:59:26:46:0c:91:c1:fb:60:13:
e5:25:ad:e4:a8:71:09:f8:bc:d2:2a:f9:c3:f0:62:
a8:73:eb:d3:fa:35:a2:d5:33:f7:80:57:cc:1d:65:
23:01:3d:b5:bc:2a:82:7d:b0:f5:20:e7:fa:08:af:
a8:cc:ec:2b:62:11:79:26:0d:10:89:d7:7c:0b:01:
08:27:15:41:29:83:65:7b:36:a7:2e:77:f4:2b:39:
31:69:b3:fc:d2:b8:66:97:7d:0b:8a:50:80:a6:d3:
f6:df:00:2e:bf:de:56:f2:c8:f9:52:a8:89:1b:31:
83:91:5b:a6:f9:d3:48:24:e3:96:08:cb:11:5f:94:
cd:24:29:c8:90:f5:7c:df:55:16:9a:23:a4:0b:1b:
29:87:59:ee:2c:56:93:b4:01:48:27:34:46:f0:f0:
f3:ed:73:7d:88:e1:73:1a:02:4f:28:f4:4d:80:92:
de:a5:4b:26:8f:20:90:c8:7f:46:5a:c9:ab:27:e1:
29:24:87:a2:81:14:aa:be:f4:e3:86:03:f3:56:76:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:98:3E:F8:8B:48:1B:91:60:2E:0F:19:9C:C8:82:CA:89:A1:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24EF50B2C5DC11EFA3327046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.79.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5d:a9:ec:86:c2:b2:31:d3:f7:e3:1e:05:c8:cf:27:73:41:
2a:a8:6a:f5:2f:da:eb:0a:76:59:35:26:48:01:91:13:07:f3:
f8:79:52:da:2b:b0:ab:27:9a:9b:18:e5:26:2e:41:0a:b6:cb:
4e:f8:97:0f:12:98:87:84:cf:96:f0:94:07:03:00:57:8e:a2:
7d:0e:4d:be:10:9d:9c:91:24:bf:45:2d:52:28:2d:98:1c:01:
5d:20:53:29:71:1f:5c:97:2c:47:3e:6b:f8:38:8d:67:31:d0:
62:0e:8f:12:be:29:c1:15:3b:a2:0b:be:1b:6d:d7:02:61:a0:
31:95:38:f7:ae:06:ff:0a:19:f1:c3:33:68:9b:78:9a:af:34:
2e:47:0b:d8:39:51:a3:c9:e6:b9:ae:e2:09:b5:a7:fb:6d:39:
05:de:84:1e:bf:70:2f:75:e2:87:2b:fb:cc:c3:79:e7:ad:ae:
42:f3:3e:08:7f:4a:95:dd:73:ac:38:73:cd:22:80:5c:83:21:
2e:07:2b:70:70:4c:5e:62:d6:8d:ac:d6:79:f4:a2:9f:71:ef:
9f:b1:97:01:ff:63:42:8c:b5:dd:e9:32:98:b0:e7:30:08:60:
63:9b:e4:32:ef:8c:4d:2c:03:d6:d4:5a:8d:14:96:8f:2c:cf:
8b:62:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:23:05 2025 by rpki-client