Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44873C7CC3D011EFBA0E4BBE762E951A.roa
File: 44873C7CC3D011EFBA0E4BBE762E951A.roa (raw, json)
Hash identifier: A03SKrlwjcM7JLOHBLUagrtSo406Ci8YmtynTtg9G+4=
Subject key identifier: AA:21:E4:E3:8C:A5:6E:E7:8C:AF:05:C8:F4:68:C6:4B:21:C8:ED:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012838
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44873C7CC3D011EFBA0E4BBE762E951A.roa
Signing time: Thu 26 Dec 2024 21:27:54 +0000
ROA not before: Thu 26 Dec 2024 21:27:51 +0000
ROA not after: Sun 12 Dec 2027 21:27:51 +0000
asID: 17561
IP address blocks: 154.83.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75832 (0x12838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:27:51 2024 GMT
Not After : Dec 12 21:27:51 2027 GMT
Subject: CN=676dca5a-8866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:e5:81:83:19:fa:5b:be:29:36:ea:85:69:
88:c9:cc:83:a9:3b:f7:96:ba:fe:07:50:83:43:73:
e8:37:31:06:76:eb:65:e1:db:48:3c:18:a9:4a:11:
5c:5f:85:d3:11:be:3f:a8:4a:66:b2:53:fa:94:e7:
16:ed:c1:6e:60:d6:70:17:50:fd:a8:f4:8b:3a:7b:
c9:ff:83:c4:a3:1e:61:b5:2a:fd:11:5c:31:b1:e8:
4c:29:40:b0:5a:63:f5:b1:20:cc:c0:b1:b5:02:6f:
e2:3e:21:d9:8d:c6:47:9f:fb:64:8e:08:a1:35:83:
63:12:d5:66:30:3b:55:5e:ef:8c:47:1e:d5:ba:d7:
c4:df:d2:1d:10:e0:b5:d3:d7:65:7e:94:c6:63:75:
16:c8:b4:a8:ca:84:06:c4:c2:d9:af:66:b3:f4:a2:
e4:26:3a:ac:8c:fb:3c:21:46:a1:1c:8b:15:1a:77:
2a:60:51:93:e9:e2:86:40:85:52:02:56:86:c6:5c:
c8:3f:85:40:48:23:55:34:74:ed:12:8c:a2:1d:67:
4b:70:f0:eb:55:9c:04:05:4d:9f:83:3f:3b:0a:78:
2d:02:92:2c:04:44:9f:ae:2e:38:15:af:be:78:40:
69:c7:fe:f9:86:ba:16:c1:20:ec:cc:f8:9b:77:d7:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:E4:E3:8C:A5:6E:E7:8C:AF:05:C8:F4:68:C6:4B:21:C8:ED:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44873C7CC3D011EFBA0E4BBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.178.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b7:4e:dd:3b:fb:ec:70:26:87:a7:e3:51:31:69:5c:a8:00:
ab:1a:8e:63:bc:bd:d3:dc:e0:32:8a:92:78:c3:3d:2f:9b:d8:
26:ab:3b:f9:90:9b:46:8a:f4:68:95:9a:2a:59:f2:38:67:eb:
59:e0:59:c5:ca:9b:d3:d2:5a:56:8c:78:a0:ba:72:8e:6e:4c:
a8:36:41:57:d1:b5:8d:1a:5b:b0:b2:84:94:62:6e:8f:c1:7b:
5c:e4:58:80:47:77:4b:96:38:5b:eb:ee:a1:b0:13:12:5d:21:
9d:16:8c:63:59:cd:ee:fc:a0:7c:7c:5a:62:59:9d:d2:29:9d:
51:c3:2b:d8:37:49:f8:63:1f:2f:2a:76:d4:62:7a:94:67:d1:
74:bf:26:c1:74:e7:8e:c2:5a:d4:3d:1c:25:11:a2:a1:ff:78:
59:d2:fd:d2:9a:26:86:2f:93:41:02:74:ee:90:93:1b:88:1b:
8c:dc:2c:0a:a7:4e:d6:05:b5:b6:7e:79:9e:df:dc:e5:b0:50:
62:36:2f:3f:72:3d:54:ad:cd:ef:4c:2f:6c:f6:4d:49:40:30:
ad:86:32:7f:22:43:7e:6a:cb:63:43:e9:e7:1c:9d:47:5d:1e:
9e:63:a4:8e:fa:b4:4d:92:8f:c4:e6:95:83:d2:ff:2b:ad:d1:
de:26:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:01 2025 by rpki-client