Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5213252CC3DF11EF9D11FB9D762E951A.roa
File: 5213252CC3DF11EF9D11FB9D762E951A.roa (raw, json)
Hash identifier: UbXNdOPK4G4TLe3YJY5FAEL+f1gWB3QIZ/ljxvu9jWU=
Subject key identifier: 2C:BB:4B:1D:99:DA:82:31:1C:AC:A9:8F:84:B3:D2:0D:4E:5C:96:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5213252CC3DF11EF9D11FB9D762E951A.roa
Signing time: Thu 26 Dec 2024 23:15:39 +0000
ROA not before: Thu 26 Dec 2024 23:15:36 +0000
ROA not after: Sun 12 Dec 2027 23:15:36 +0000
asID: 17561
IP address blocks: 154.86.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75984 (0x128d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:15:36 2024 GMT
Not After : Dec 12 23:15:36 2027 GMT
Subject: CN=676de39b-9d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:f0:d0:94:0a:6d:4a:5c:0b:84:3c:de:e7:
a6:1f:28:5a:ca:11:c3:46:47:74:e1:e8:3d:2d:e2:
e1:aa:49:91:48:9a:81:40:8d:8f:b7:0b:d6:cb:03:
bf:13:03:28:04:d8:d4:95:5b:4d:48:3b:bb:61:fb:
c7:f2:a9:2b:c9:30:25:66:c3:ac:45:94:18:aa:50:
5b:4e:f3:69:97:71:23:ee:b0:5c:88:b7:c7:83:e4:
1d:6a:17:89:e8:2c:72:3c:42:3c:df:5a:a7:75:d5:
30:a7:5f:6c:7d:33:2d:5f:10:7a:81:3b:e5:45:cc:
85:28:7d:f7:ea:0a:d4:05:58:5a:94:c0:78:66:fc:
d3:78:7e:44:a6:2a:08:cc:71:b4:c4:19:5e:b8:44:
2c:0b:3c:24:24:5f:10:d3:d6:e9:33:51:1e:71:58:
83:13:6a:1b:b8:40:65:46:55:13:d3:8f:b2:1b:df:
43:87:99:8c:6a:c3:b3:f1:74:e2:b6:55:82:4e:9a:
c9:f7:09:ae:13:ef:ae:02:52:3e:e4:a8:6c:9e:56:
1d:14:37:a2:d2:b3:bc:79:80:b1:2a:cc:e5:b2:4b:
0e:a3:e7:80:90:b6:cc:3a:26:85:13:8f:93:7c:9b:
4a:55:69:3d:f8:14:8c:41:2e:45:02:1d:e1:f3:ff:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:4B:1D:99:DA:82:31:1C:AC:A9:8F:84:B3:D2:0D:4E:5C:96:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5213252CC3DF11EF9D11FB9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d3:7e:99:d8:dc:cd:f3:18:4a:0e:73:2b:bb:f5:a5:a1:ae:
ae:65:54:a9:c5:f5:94:b2:10:41:c8:71:30:87:10:04:a3:f2:
95:c0:5c:7f:2a:01:65:07:0d:24:1d:d6:fd:23:c7:a9:2a:8f:
22:cb:28:ef:2b:c2:f8:32:9e:c4:ca:fa:e4:38:a0:2d:49:46:
cc:6b:4d:64:ef:28:6f:3b:ad:ef:21:82:37:8e:c4:d7:18:76:
0f:49:9e:d3:45:a5:d2:c9:11:79:86:bb:60:73:82:bb:ef:2d:
9e:f1:b2:b3:66:d9:b5:7a:62:d6:c2:6d:60:6b:f2:89:40:a5:
46:d6:b7:10:f2:77:0b:9e:3f:1a:25:e5:98:43:c5:5b:c2:e7:
aa:b3:df:e0:10:4b:1a:da:62:de:fe:0a:17:58:ee:b5:89:2f:
49:9c:1d:fb:7d:c1:bd:64:e2:a6:70:2d:d6:3f:78:d1:8a:5e:
62:ad:50:0c:0f:3b:e0:e0:7b:f9:b3:bc:58:d5:b4:fe:4e:d0:
d9:5f:f8:17:9f:e9:27:fe:91:f0:21:a1:d1:6e:b7:30:c8:6a:
07:35:67:43:fa:02:f0:ba:0f:81:42:73:31:47:26:a0:43:0b:
26:46:d4:1a:42:9f:2b:42:80:a6:5e:6c:a0:b8:15:fe:c3:a3:
27:99:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client