Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045ECD0C3D611EF8A085C66762E951A.roa
File: 3045ECD0C3D611EF8A085C66762E951A.roa (raw, json)
Hash identifier: Bfn8ETVx+216tNxchzy9cLnAOUJJ9CjTTTR171BszMA=
Subject key identifier: 14:99:4F:C9:45:7D:CA:06:7E:96:5F:BA:93:08:10:E4:24:F0:FF:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012874
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045ECD0C3D611EF8A085C66762E951A.roa
Signing time: Thu 26 Dec 2024 22:10:17 +0000
ROA not before: Thu 26 Dec 2024 22:10:13 +0000
ROA not after: Sun 12 Dec 2027 22:10:13 +0000
asID: 17561
IP address blocks: 154.84.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75892 (0x12874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:10:13 2024 GMT
Not After : Dec 12 22:10:13 2027 GMT
Subject: CN=676dd449-af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:fa:5e:93:64:ab:fc:cc:00:1a:96:17:a3:
59:86:7b:e3:57:d0:80:4e:e5:d3:87:75:7d:5f:be:
ee:bb:60:1e:4e:56:65:8f:ee:ef:aa:06:62:80:29:
84:22:10:09:0c:66:20:8f:d1:92:e9:1a:09:2c:13:
02:ce:02:29:46:4c:4a:27:68:ad:3a:0e:39:11:82:
2c:c2:71:68:ce:ee:98:7e:63:b1:ca:9b:95:35:5e:
64:09:f5:9c:3a:bf:15:60:69:c5:76:6b:96:c3:6a:
0d:86:cc:21:d8:33:53:51:87:e3:69:8a:26:74:71:
6c:ab:97:95:db:ec:de:a2:70:fa:d4:b3:cd:82:e3:
62:78:c2:02:88:b2:b7:27:7e:8b:a7:8f:7b:f5:6a:
6b:f5:7c:50:4e:47:78:51:a5:d5:45:13:7b:4e:07:
ef:1d:40:de:cc:76:0c:ab:b3:52:ce:39:9a:42:82:
16:bd:2d:9c:f9:55:55:f2:9e:d9:5c:db:59:d4:32:
6f:4b:d4:fc:f0:e7:f1:19:35:1d:0c:cb:c1:bd:31:
ec:cf:0a:c8:cf:d0:bf:05:12:f8:e1:17:dd:b8:c8:
e1:b9:f8:d6:8b:d7:14:08:3b:4b:8e:35:23:a1:43:
68:e9:bd:72:6a:78:d9:56:24:4a:b3:12:9b:6e:fa:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:4F:C9:45:7D:CA:06:7E:96:5F:BA:93:08:10:E4:24:F0:FF:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3045ECD0C3D611EF8A085C66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2b:98:6a:a1:0e:dd:d6:ef:30:bf:29:0d:7b:9a:17:5d:b9:
e3:74:e9:62:8c:20:0a:6d:fe:85:d5:07:3e:ce:44:d5:c8:28:
5b:25:7a:74:1d:24:99:7d:bd:e9:14:a9:6b:f4:16:15:7e:2d:
2d:1d:3c:e2:12:35:70:44:8f:a5:48:45:22:18:1a:c9:b5:e7:
1d:d6:f9:6e:d6:1e:43:27:58:61:39:a7:70:6c:70:38:3b:01:
a6:8f:c4:20:0d:23:9d:ba:89:fb:cd:07:62:2a:7a:71:4c:19:
26:76:19:b1:37:99:f1:e6:7a:05:da:fd:c8:c9:58:60:88:e7:
19:2b:b7:72:95:80:a6:95:3d:d5:ec:b9:af:2f:c7:84:91:48:
ac:98:78:56:43:bd:ec:5b:77:fa:f5:a6:7b:5c:e6:a6:4b:93:
16:96:69:16:6a:5f:1e:8a:8f:f5:a7:05:e2:a8:25:f9:f9:2e:
8d:f8:e3:21:c1:b4:ed:c4:b5:ae:50:6e:1e:3d:fd:8a:d7:dd:
94:95:1b:ba:2b:83:2f:a5:32:92:a6:da:68:38:2e:5d:23:47:
90:16:f9:dd:52:23:57:e3:f1:59:d2:ca:8b:fb:42:9e:a2:c5:
f9:76:d4:ee:b7:29:8c:00:25:3f:48:40:0f:3c:25:b2:cf:dd:
3c:5a:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:20 2025 by rpki-client