Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9DF11EC3E011EF9E93A7A2762E951A.roa
File: 4E9DF11EC3E011EF9E93A7A2762E951A.roa (raw, json)
Hash identifier: JM4R2RExtD1pGeRQM+cTFGfcBHh1HvOvRBlTJPzx+JE=
Subject key identifier: A2:1B:5E:9C:B4:86:85:46:AA:B3:CE:1E:AA:21:E2:A7:74:C2:3B:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9DF11EC3E011EF9E93A7A2762E951A.roa
Signing time: Thu 26 Dec 2024 23:22:43 +0000
ROA not before: Thu 26 Dec 2024 23:22:39 +0000
ROA not after: Sun 12 Dec 2027 23:22:39 +0000
asID: 17561
IP address blocks: 154.86.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75994 (0x128da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:22:39 2024 GMT
Not After : Dec 12 23:22:39 2027 GMT
Subject: CN=676de543-5ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:5d:25:b5:27:e6:6a:5a:46:ad:9e:9b:33:
58:59:0b:77:da:ba:6b:c9:97:03:92:3c:75:a3:f2:
10:15:93:e9:11:42:a2:5e:ae:9e:8c:bb:ba:1a:d1:
bc:4e:89:03:cb:a8:e8:d9:a3:e7:0f:30:af:0a:74:
1a:3a:03:25:5f:92:10:96:9e:61:25:68:98:c3:49:
d6:f8:98:6d:71:68:aa:fe:77:83:30:45:09:94:09:
c7:eb:ee:df:b2:95:d2:a6:85:a0:87:d3:30:dd:bc:
20:d8:ff:d7:3b:56:33:ee:7b:03:6e:b2:a4:09:b4:
bd:bd:8f:59:fb:4b:f5:09:30:58:c2:0a:15:02:ab:
cf:71:13:8d:ea:ea:3f:91:e2:5c:d1:24:97:62:f8:
e5:94:d0:3b:f7:9a:3a:5e:ba:43:08:ed:23:e3:ab:
3d:3b:4a:b6:b1:9b:a2:8d:62:47:22:58:b7:74:fa:
b3:4c:9a:15:93:11:8c:c1:8b:2c:1c:e9:e3:8c:b4:
6e:b0:6f:89:d5:75:da:2d:a5:39:0e:42:18:ba:d2:
83:2b:3e:9d:4b:18:95:a3:26:0a:78:62:df:f1:3c:
9b:14:b4:17:0a:8e:1f:20:f5:1b:1f:77:14:a1:dd:
9e:ec:40:b1:29:0e:e5:4b:6a:41:80:7a:07:4d:34:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:5E:9C:B4:86:85:46:AA:B3:CE:1E:AA:21:E2:A7:74:C2:3B:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9DF11EC3E011EF9E93A7A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:35:c7:4b:da:e3:1a:b4:53:ac:92:89:32:d1:b1:99:61:4a:
29:ef:f4:b9:cc:94:b1:54:09:ed:9f:21:97:77:ad:e9:de:66:
aa:28:6d:37:14:c1:ca:c5:d6:29:50:6f:3c:42:e3:2e:9d:13:
dc:0b:91:33:11:b5:8e:2f:89:2c:89:eb:cb:e3:bb:b1:e6:4c:
d1:f6:24:6c:cd:cc:a3:de:43:50:28:95:8d:5c:59:33:e1:cf:
04:95:fd:8e:c5:70:50:c1:49:b6:88:70:f7:8b:a9:10:7a:d5:
54:14:c9:e1:1e:f0:7f:10:e9:43:2a:20:a8:a8:b8:8c:2c:2e:
75:db:ec:80:7b:2f:4b:88:a1:d4:bf:f8:c4:2e:4c:5c:b3:8f:
e5:3a:b8:c1:4f:30:3d:9a:1d:7b:a2:10:05:eb:51:be:d5:0b:
a5:01:fa:c9:59:ab:46:9e:df:69:08:a7:34:e8:75:60:46:b6:
4b:53:d0:8c:8c:28:55:57:2c:df:5f:3b:9c:aa:c4:0a:28:00:
77:13:8f:b7:f9:7f:2d:a3:df:17:5e:e0:82:33:b6:6d:ff:dc:
c6:ef:e7:7f:88:66:c9:71:38:b9:c4:5c:c4:ef:a1:c0:ee:eb:
81:01:36:f4:ef:a4:19:88:3c:b9:14:3a:d6:20:f3:6d:fb:4a:
98:ff:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:37 2025 by rpki-client