Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/482AF9C0C37D11EF92DC4BB6762E951A.roa
File: 482AF9C0C37D11EF92DC4BB6762E951A.roa (raw, json)
Hash identifier: N+M00yedO+cNx2uRVADCKP/uBOrE5UI11dp0havsc0A=
Subject key identifier: 32:8B:B9:8E:16:43:94:30:92:14:F1:E8:96:BF:49:92:2D:07:E5:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012738
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/482AF9C0C37D11EF92DC4BB6762E951A.roa
Signing time: Thu 26 Dec 2024 11:33:52 +0000
ROA not before: Thu 26 Dec 2024 11:33:48 +0000
ROA not after: Sun 12 Dec 2027 11:33:48 +0000
asID: 17561
IP address blocks: 154.94.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75576 (0x12738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:33:48 2024 GMT
Not After : Dec 12 11:33:48 2027 GMT
Subject: CN=676d3f20-4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:26:cd:27:9e:9e:4e:65:c8:18:79:fb:ce:
2f:fe:34:03:4e:c8:94:12:85:60:e6:43:4a:94:92:
f9:8f:53:fa:e6:01:bd:9e:9a:a5:c9:0d:e1:6a:72:
71:31:5e:41:55:3b:1e:01:36:f7:ec:0a:0f:5d:b2:
5d:56:d9:59:b2:af:a0:ff:2d:ff:0a:7f:da:2a:8b:
85:12:e0:f5:7b:90:c5:d7:3d:5f:ca:07:64:08:ff:
00:4d:c6:b8:42:5c:f5:fa:1e:cb:5c:d6:09:2d:3f:
f8:2e:46:37:1b:ee:40:f7:13:5d:cc:f1:d4:d5:39:
0f:6b:58:43:c9:d4:37:66:9c:4c:a8:6b:a7:b5:be:
ec:cc:85:93:8e:1d:36:a6:34:8d:38:a4:f0:6c:9e:
5e:6f:09:d9:89:d9:8c:93:ca:a2:bd:3a:75:75:b9:
eb:f4:87:87:09:84:99:18:95:29:68:8a:03:88:11:
5e:83:5f:cf:d4:50:f2:bb:30:03:8a:f8:a0:38:d0:
de:c2:2d:00:e2:2e:2e:07:c9:48:5f:2c:c5:45:0c:
cc:26:69:a9:50:f8:7a:ba:2a:28:63:05:a1:19:b5:
d6:4a:95:61:13:d5:54:7b:f6:03:1b:cd:d5:b0:88:
18:83:bb:3f:31:be:29:5e:54:a5:a7:29:94:93:49:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8B:B9:8E:16:43:94:30:92:14:F1:E8:96:BF:49:92:2D:07:E5:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/482AF9C0C37D11EF92DC4BB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.179.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:2a:aa:8f:f8:c9:41:fb:08:1a:2a:8e:48:46:97:24:86:d8:
4f:9e:af:66:60:cb:d1:a0:fe:5f:b9:34:f2:f9:97:29:47:f2:
87:6e:a4:34:d1:e6:00:d5:84:54:9e:16:ee:69:f5:c8:1e:73:
5e:78:7d:49:c3:81:16:ca:2c:ba:1c:ba:09:e6:59:d5:67:fb:
44:e7:91:89:bd:7a:20:35:56:fd:42:d6:6b:ae:c2:ad:6e:76:
98:72:9e:88:6d:2b:84:e0:e7:eb:d6:b1:8d:ce:58:a0:15:ad:
c4:f7:b9:58:4f:0b:52:97:44:a5:22:a3:e0:56:66:6c:51:ad:
6f:03:95:a5:d2:f1:44:5d:a2:1d:dc:b9:46:bf:20:23:f2:99:
64:19:4a:d6:e3:7d:72:a2:57:67:9f:e4:e1:26:ce:12:bf:c8:
71:ed:a2:17:e5:12:58:05:de:08:cf:6c:e4:1b:10:e2:82:14:
73:d0:44:6b:ba:87:a0:62:82:e1:13:e2:c2:15:f8:12:14:3e:
24:d4:2c:de:ec:e7:b1:69:4d:ef:20:a8:49:7e:77:a8:57:19:
ce:70:00:74:81:62:6a:fe:d3:f2:63:64:cc:65:36:05:72:69:
5d:c7:fe:6b:9c:c7:93:15:e0:10:59:09:a9:fd:eb:85:3b:ab:
81:2c:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:47 2025 by rpki-client