Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28916F9EC3C911EF83B35692762E951A.roa
File: 28916F9EC3C911EF83B35692762E951A.roa (raw, json)
Hash identifier: pNy3nngk/t5O8E92uDSmylpNurVKX5tmW7RT8d4hueY=
Subject key identifier: AB:03:EB:B4:B3:D0:9F:EE:3F:EB:56:94:CC:AE:1B:E8:91:29:22:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28916F9EC3C911EF83B35692762E951A.roa
Signing time: Thu 26 Dec 2024 20:37:01 +0000
ROA not before: Thu 26 Dec 2024 20:36:57 +0000
ROA not after: Sun 12 Dec 2027 20:36:57 +0000
asID: 17561
IP address blocks: 154.83.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75760 (0x127f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:36:57 2024 GMT
Not After : Dec 12 20:36:57 2027 GMT
Subject: CN=676dbe6d-758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:22:c8:a6:53:98:a2:72:0e:74:24:de:d3:
d0:7c:f2:a0:01:84:9f:ab:3f:dc:29:33:89:f7:25:
c2:e3:d0:b9:01:ee:9f:b4:cc:6f:7c:3b:14:3a:bf:
35:e0:21:d3:e5:ad:fa:72:4a:46:dc:fb:f4:bc:ca:
c6:27:8e:6a:e1:50:9c:53:e4:2b:fb:16:03:9a:0b:
54:92:a3:57:b2:07:94:eb:b1:98:73:4b:4e:2e:4e:
33:71:fb:dc:f1:f5:f4:93:3c:46:61:e5:d5:58:01:
5e:30:79:62:13:f5:5c:a7:4f:79:b9:2e:78:df:77:
f8:f8:2b:5f:4d:60:3b:22:98:7d:87:ec:04:4c:4a:
16:fa:e7:10:fb:30:ce:09:ed:a3:ea:c1:e9:e5:9d:
4b:c0:f2:b5:b4:8f:68:3f:8b:96:0e:84:82:21:be:
7d:8c:75:99:c7:94:50:93:c1:1a:cd:3b:47:6a:34:
55:63:1a:b3:c3:68:c6:e1:ad:43:4e:ab:28:a2:68:
31:41:e6:1b:68:08:41:30:da:03:4e:26:32:7e:0a:
44:c2:9b:50:5d:63:24:d9:2a:d9:77:12:0e:f9:fc:
fa:99:51:98:d9:74:2c:2b:07:78:1e:63:3f:b4:c8:
62:b2:db:23:3d:ba:f0:47:38:30:8a:1f:91:89:40:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:EB:B4:B3:D0:9F:EE:3F:EB:56:94:CC:AE:1B:E8:91:29:22:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28916F9EC3C911EF83B35692762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5c:e9:2b:e5:4d:df:65:95:97:e3:37:2d:f8:8d:30:00:d4:
21:9e:84:e2:7d:33:69:cf:2a:9f:0a:0d:5f:1b:1b:7f:d0:ff:
c5:e0:cb:f7:2b:da:5f:d0:20:62:1f:20:46:ac:e5:a6:bf:d4:
66:0f:7e:6e:da:44:1e:8a:15:d0:d1:b1:d4:3a:af:83:01:0a:
5c:a1:6f:ee:cc:07:62:f4:9c:c5:a6:75:f7:3c:0f:17:6b:dc:
f9:21:78:35:e4:19:3c:4d:e8:80:02:08:7b:cc:a0:97:72:0d:
c0:11:be:fa:af:1a:80:87:de:81:79:b1:27:4f:94:e7:33:54:
74:41:32:9f:04:4a:87:31:bd:c6:d7:12:ff:36:7e:42:cc:bc:
ad:82:5c:b8:9c:35:25:57:a0:18:19:44:df:55:7f:46:91:7a:
c5:60:32:f5:4c:99:25:89:16:71:08:48:2c:17:38:b5:d8:47:
ce:0b:e8:16:0d:f3:24:ba:5f:61:dc:3d:08:ff:38:0d:aa:0e:
be:5f:4a:1d:79:95:cf:7b:79:d0:5e:19:5a:61:40:ac:af:b7:
e7:44:46:c0:d9:e5:e0:95:3a:db:64:72:7d:ab:a6:15:be:86:
23:17:03:59:f3:40:4a:d8:6c:89:f9:9d:20:12:a0:39:d2:fe:
15:bc:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:02 2025 by rpki-client