Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E64C808C35011EF8E20BE9A762E951A.roa
File: 3E64C808C35011EF8E20BE9A762E951A.roa (raw, json)
Hash identifier: /+2BnvLQqGtOXA0SSchmR7NSYC7A2JD3gjLiC2+jwwc=
Subject key identifier: 51:A5:6F:48:90:51:0F:E3:17:2D:70:C3:F0:76:B0:7C:0B:96:56:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01259F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E64C808C35011EF8E20BE9A762E951A.roa
Signing time: Thu 26 Dec 2024 06:11:28 +0000
ROA not before: Thu 26 Dec 2024 06:11:25 +0000
ROA not after: Sun 12 Dec 2027 06:11:25 +0000
asID: 17561
IP address blocks: 154.95.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75167 (0x1259f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:11:25 2024 GMT
Not After : Dec 12 06:11:25 2027 GMT
Subject: CN=676cf390-7260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:0e:15:42:2a:46:1e:9b:b9:54:9c:68:a4:
9a:a5:3b:1c:b3:3a:02:9c:93:e0:fd:39:75:ec:41:
60:8f:38:66:a6:1d:1e:bc:af:75:1d:44:8b:6f:cf:
b3:41:c8:5e:0c:86:10:dc:d3:0f:78:23:8e:bf:6c:
a2:d5:ee:cd:b6:e1:45:e7:df:b7:6b:00:9c:f2:01:
b2:c9:0c:b5:d6:30:30:fc:a1:73:82:c6:82:d5:9f:
3d:d0:d6:dc:1e:63:a2:bc:ee:ce:ea:02:46:5a:95:
1c:70:68:e1:1b:a8:5e:48:cb:4b:b8:0c:4f:ab:e0:
a7:91:6e:10:cc:d4:28:bd:1c:1a:a0:21:c4:0b:57:
24:bc:62:18:28:b2:d2:4e:58:a5:d1:e1:73:27:93:
b2:b0:bd:d6:40:59:37:de:f2:ce:0b:cd:50:5b:0e:
47:62:47:47:e7:d6:c3:ad:76:a6:45:9c:96:a9:9c:
61:8e:d2:12:4e:11:71:b0:d3:4c:b9:3a:54:a0:ed:
59:9c:ad:8e:2d:06:7c:a8:f8:dd:1c:80:5c:50:aa:
73:f3:b8:8a:30:54:ef:7e:28:05:d8:81:d4:b5:6e:
83:12:be:7a:52:c5:a5:61:6f:3a:aa:09:5c:ba:f8:
9f:a6:df:dd:23:16:c3:20:b8:c0:5c:10:2b:2d:ae:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:6F:48:90:51:0F:E3:17:2D:70:C3:F0:76:B0:7C:0B:96:56:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E64C808C35011EF8E20BE9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.28.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:08:18:9a:c2:1c:68:11:3d:4d:8b:97:41:c7:14:8a:4c:75:
dd:ed:2b:02:75:84:c9:43:6f:a6:18:4b:59:a4:da:39:78:a3:
e9:8c:f3:29:93:99:a8:76:ab:02:1e:6b:33:a8:e8:26:0b:da:
c0:bb:16:8e:03:f8:99:1e:1a:92:9d:7f:59:eb:15:a5:4a:0e:
b2:58:35:5f:d8:6b:74:ca:d5:7a:3e:db:02:6d:a4:bc:16:5c:
d6:77:3f:bf:b2:99:ce:53:fd:fe:23:b2:6f:ed:f9:3f:52:df:
7a:38:77:17:8f:d9:fd:b0:15:c3:de:af:8e:20:b4:2d:de:2a:
69:a2:b6:8c:ec:ff:a7:19:d3:4e:f1:49:78:08:eb:ac:98:ee:
f1:b4:37:f9:e3:3d:d1:82:59:13:c5:f7:0d:75:11:36:1e:5b:
1f:92:b3:47:2f:79:3c:36:f1:9f:bd:48:a0:52:8a:1d:ce:50:
6b:d8:43:b2:3b:bd:29:a7:fb:30:de:34:5f:11:bb:08:10:a7:
8e:b6:b6:80:0f:98:19:3c:a9:21:2b:6c:b1:7d:41:4f:b2:de:
88:d5:55:79:28:66:51:ab:c9:21:9d:9d:d9:a1:dc:f2:af:37:
31:ac:b9:4a:00:3a:51:8f:cc:80:6e:60:90:33:5e:af:70:49:
e5:7e:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:42 2025 by rpki-client