Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9626EEC36911EFACD53BBA762E951A.roa
File: 4F9626EEC36911EFACD53BBA762E951A.roa (raw, json)
Hash identifier: 9oH8H092bSW9UxyigtVCmyfQ0vQHPD085L5fvgMkdyE=
Subject key identifier: 87:73:8F:6C:DB:95:45:B6:CC:53:47:8D:D7:83:57:BB:02:66:34:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9626EEC36911EFACD53BBA762E951A.roa
Signing time: Thu 26 Dec 2024 09:10:55 +0000
ROA not before: Thu 26 Dec 2024 09:10:51 +0000
ROA not after: Sun 12 Dec 2027 09:10:51 +0000
asID: 17561
IP address blocks: 154.94.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75480 (0x126d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:10:51 2024 GMT
Not After : Dec 12 09:10:51 2027 GMT
Subject: CN=676d1d9e-1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:bb:3e:eb:a4:31:b2:68:ef:27:4d:21:d4:
3c:af:42:9b:79:9a:b1:d7:a4:e3:68:f0:a8:f5:ce:
4f:77:3e:d8:d6:62:b7:9b:59:da:f9:47:a7:c2:72:
33:af:af:e2:fb:db:cd:a3:83:30:a8:e8:eb:3a:af:
c7:6f:45:7f:82:b0:01:77:c1:1b:6c:d1:59:ea:7c:
cb:de:70:26:f4:59:f1:fe:c5:d3:a4:2b:bd:59:15:
6b:88:f3:ef:cc:25:72:97:13:e2:f2:de:51:b4:70:
41:80:fc:f7:d1:69:eb:09:68:97:86:ac:b0:95:93:
ef:4c:a4:1e:15:0e:38:de:2c:6e:0f:2d:ca:34:48:
06:f2:ad:6b:e5:48:93:39:fb:2f:b7:4f:58:b8:b5:
9b:1a:b9:e6:b8:4b:fa:4f:01:2c:aa:d8:b4:a8:31:
44:8e:e9:9d:f5:6d:1e:0f:f5:02:35:cf:06:00:ec:
de:86:35:f9:64:04:c3:f4:e9:ee:59:44:09:44:24:
aa:33:23:4d:f3:aa:f2:35:33:28:0d:d7:85:04:74:
5b:ba:f0:63:20:12:e2:44:41:0e:c2:9d:1a:c4:87:
29:42:f8:ad:5e:c9:3a:7d:31:11:c0:3e:2a:fa:e8:
a6:47:ad:3f:21:c7:d7:98:62:74:3e:db:91:7a:01:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:8F:6C:DB:95:45:B6:CC:53:47:8D:D7:83:57:BB:02:66:34:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9626EEC36911EFACD53BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0d:92:7f:58:b0:51:19:73:30:45:e9:fc:93:57:5a:7c:04:
8e:4f:50:51:ab:cf:73:50:0d:8d:6e:90:44:a5:b8:83:4e:89:
d4:13:64:ff:5c:f4:2b:c7:dc:b8:28:c0:57:77:81:c4:ac:ed:
8c:a6:2c:b5:b8:60:d2:87:83:8c:22:18:00:0a:5b:77:e1:c4:
e0:d9:b6:b4:dd:87:06:d9:79:5f:b3:11:ea:b2:2f:1f:7a:c8:
be:7f:b5:ca:27:b4:1e:e2:78:25:88:33:98:36:d3:0c:68:20:
90:f5:77:0f:16:65:0b:aa:f2:6e:48:31:2b:72:9f:be:fd:3b:
f2:b8:39:3e:80:50:67:83:19:36:fc:c2:3e:6f:ef:94:ec:f4:
e0:eb:5f:3c:44:7a:95:68:e0:82:f4:32:ad:5a:64:48:e1:e3:
aa:22:8e:46:0b:be:a2:d3:76:09:ce:73:c0:6f:b0:9c:47:7f:
ee:47:e9:bd:44:2a:93:41:df:29:a6:66:d8:f2:4d:d4:8c:8d:
d3:74:30:b4:43:a1:f9:78:43:fd:a2:5b:23:06:84:2f:af:e1:
86:56:0d:c3:9c:2f:4a:f4:20:fe:43:4a:fc:ee:28:74:79:f8:
9a:ed:25:7b:53:13:b0:fb:7d:67:27:4b:86:b3:35:2b:53:13:
7d:cb:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:34 2025 by rpki-client