Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD09404C37C11EF99C920B0762E951A.roa
File: 4CD09404C37C11EF99C920B0762E951A.roa (raw, json)
Hash identifier: n0Vw2lT16yisUOuQQ2uIqUZb6rBZ85j0889mfK/gjfM=
Subject key identifier: DE:CA:E9:5E:AD:76:65:2B:C2:04:40:2B:AC:04:06:85:0C:AA:DB:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01272E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD09404C37C11EF99C920B0762E951A.roa
Signing time: Thu 26 Dec 2024 11:26:50 +0000
ROA not before: Thu 26 Dec 2024 11:26:47 +0000
ROA not after: Fri 12 Dec 2025 11:26:47 +0000
asID: 984
IP address blocks: 154.94.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75566 (0x1272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:26:47 2024 GMT
Not After : Dec 12 11:26:47 2025 GMT
Subject: CN=676d3d7a-d91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:86:ca:af:6c:4f:db:3f:a0:f9:ca:01:26:
e6:7c:ea:71:16:78:31:a6:fb:76:84:e1:91:41:ca:
bb:09:9d:28:09:ff:8a:4c:6e:70:de:0d:0e:35:54:
c1:20:e2:eb:fe:56:7f:0a:e0:bc:0c:7e:2d:f5:d1:
c6:ca:66:c6:60:ce:f4:ce:c3:d5:26:4e:3b:ef:60:
d2:1f:1f:4f:02:5a:30:81:62:5e:4b:e2:63:cc:59:
56:72:84:99:7f:a8:c9:89:95:10:b7:5e:72:c8:77:
e3:89:61:de:64:de:6b:07:64:57:d1:cf:62:e3:ff:
c9:48:92:17:eb:dd:07:cd:cc:df:27:6a:4f:b7:8b:
ef:76:1e:94:6b:60:32:92:9c:94:84:d2:2b:84:39:
e8:7b:75:1d:c6:74:69:84:43:0a:45:70:f1:9b:26:
18:d5:00:17:79:50:9c:7a:c4:48:5c:9d:4d:ea:6b:
1c:96:71:73:92:59:2b:81:00:d1:83:94:3b:bf:b7:
7e:94:9b:67:97:bd:89:56:2d:47:e1:c9:80:ab:d0:
72:57:27:67:41:09:57:c9:6f:e0:d1:ba:6e:9c:cf:
f8:7b:72:95:16:61:40:08:44:48:5d:04:1f:83:e3:
16:ce:92:f8:15:dd:13:12:df:7a:82:98:79:a9:08:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:E9:5E:AD:76:65:2B:C2:04:40:2B:AC:04:06:85:0C:AA:DB:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CD09404C37C11EF99C920B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:89:4a:df:19:28:5f:27:4b:90:ac:e7:23:12:2b:44:2f:83:
b6:8e:c3:eb:7c:ab:93:6b:cd:05:36:cb:5e:d2:71:05:7a:98:
08:14:e4:f0:c8:68:6d:58:d8:47:31:1e:4b:38:65:50:88:33:
d3:29:52:4b:08:07:45:4b:51:78:1b:fc:54:55:8d:f3:98:20:
8e:4a:64:4a:3f:e7:9e:97:43:49:ba:43:16:8f:14:1a:ec:ee:
11:74:42:af:82:8f:40:58:30:51:3e:a1:31:8a:ae:9c:b3:03:
30:07:1d:f7:5f:2e:a5:18:36:ec:be:f0:ce:cb:eb:8b:9e:81:
ab:6b:1c:c4:08:1f:d3:a0:01:0e:3f:52:59:76:c2:6f:af:4f:
2f:e6:5c:a5:ae:e2:14:4e:3f:da:d8:88:06:d8:79:4e:da:f6:
dd:a0:a2:05:7c:43:61:c9:81:7d:93:1f:5a:73:fe:36:04:38:
ec:78:0d:1a:55:2f:a4:0e:b9:0d:18:79:9e:bf:82:01:80:44:
c7:61:97:4e:46:38:c6:f3:e4:0c:a3:bb:ed:32:69:2a:60:89:
fd:3b:89:60:ee:4a:ad:b6:ac:86:fb:ea:8b:ca:eb:1a:ff:e7:
48:47:00:7b:30:2c:ed:46:b5:2c:f0:27:47:95:1a:92:47:e7:
1e:34:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:57 2025 by rpki-client