Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D438178C36611EF9912F1A5762E951A.roa
File: 4D438178C36611EF9912F1A5762E951A.roa (raw, json)
Hash identifier: MPLvD4oDGmpUm3d6lvxhadlp94Z2bwg5fCl8AGbZDaM=
Subject key identifier: BA:EF:74:57:71:A2:F4:87:34:A4:2F:E4:FB:96:68:1A:B5:C2:AB:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D438178C36611EF9912F1A5762E951A.roa
Signing time: Thu 26 Dec 2024 08:49:22 +0000
ROA not before: Thu 26 Dec 2024 08:49:19 +0000
ROA not after: Fri 12 Dec 2025 08:49:19 +0000
asID: 984
IP address blocks: 154.94.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75448 (0x126b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:49:19 2024 GMT
Not After : Dec 12 08:49:19 2025 GMT
Subject: CN=676d1892-c64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:a1:dd:19:e2:fe:72:f9:f9:41:8b:29:61:
fe:0b:34:3a:c2:25:8f:9d:ce:28:7c:b4:f9:25:1b:
20:19:54:67:35:21:c2:78:cb:bd:68:f2:52:56:6d:
24:ec:52:92:d2:fc:d3:6b:59:ac:19:96:4b:4f:65:
22:5f:21:f8:a6:ba:2d:73:b2:2f:82:f1:be:de:de:
d8:7f:ed:99:59:54:f0:c7:40:71:5b:c0:aa:b9:5b:
92:79:ed:eb:06:78:ae:c6:25:c8:b2:7a:b8:f0:39:
fe:98:82:f7:d5:35:d8:cb:a5:fa:23:c6:ee:b2:f7:
f8:13:d0:3c:ff:a4:1b:e0:b8:65:97:38:c7:4a:2f:
37:ab:46:67:c8:00:77:68:74:56:90:4a:4f:1c:c6:
e8:ca:f2:9b:dc:14:84:1a:fb:5c:a2:06:a0:68:e0:
03:96:64:d8:33:37:ea:d2:14:f7:59:b2:62:ee:a5:
34:1e:f4:8a:26:b1:6e:a5:45:ef:83:dd:e9:6c:ec:
c1:6e:9c:5b:4c:3e:14:89:e3:cb:f0:c0:85:d3:56:
a4:52:9d:94:39:b8:0f:87:c8:de:47:2f:0c:2f:f0:
e0:60:ff:c0:65:81:7c:63:16:21:3a:48:6a:c1:98:
74:36:4d:b8:01:eb:5a:f2:b0:57:5b:6a:b8:14:71:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:74:57:71:A2:F4:87:34:A4:2F:E4:FB:96:68:1A:B5:C2:AB:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D438178C36611EF9912F1A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a1:c3:90:75:a7:62:07:8a:0c:4b:1e:ab:00:60:e1:c3:b7:
92:06:e3:1a:d6:61:8b:df:5d:fd:17:72:b2:a6:23:54:0b:d0:
59:94:fa:0d:e5:9f:b4:a2:16:aa:3e:89:96:48:6e:4b:d1:25:
7a:44:59:91:ff:fc:d5:8d:29:29:27:27:a0:2f:88:55:4c:80:
a7:0b:e6:3d:29:81:07:ed:08:89:b6:19:57:12:08:0e:d5:d9:
e7:e3:ca:bb:04:30:69:8b:44:6b:cc:af:09:20:c5:1a:cd:b0:
5f:46:e3:a7:c4:72:9e:b5:03:50:ba:9b:b0:3b:85:e9:96:a5:
47:57:04:a5:37:a8:84:d2:2b:57:d6:22:df:96:62:0b:b5:25:
01:13:df:4d:ac:41:b3:f9:f1:9d:b8:52:1a:85:0b:27:7b:ba:
f8:9b:e7:d1:dc:c4:9a:81:5d:1d:d5:ee:53:db:e7:fa:13:98:
45:d6:b4:44:c2:5d:93:14:72:6c:24:6f:ee:83:ab:80:a0:f9:
bc:62:02:99:30:dd:b4:1a:35:30:b4:9e:95:8e:5a:af:e3:56:
d2:dd:59:46:9c:61:05:3b:27:65:26:8e:1f:3e:88:d1:52:8f:
4d:bf:af:e5:ac:8e:cd:d3:30:aa:da:35:64:aa:45:ba:97:24:
ee:f8:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:58:10 2025 by rpki-client