Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52155C82C54411EFABCA877F762E951A.roa
File: 52155C82C54411EFABCA877F762E951A.roa (raw, json)
Hash identifier: duHjnKpNh4LgYcxZULAR2qMPUPynEnaWh/0Z5XxfNiI=
Subject key identifier: 0E:85:68:C2:2E:50:02:E3:C5:96:45:14:AB:6E:61:4E:B1:B8:AD:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52155C82C54411EFABCA877F762E951A.roa
Signing time: Sat 28 Dec 2024 17:51:10 +0000
ROA not before: Sat 28 Dec 2024 17:51:06 +0000
ROA not after: Sun 12 Dec 2027 17:51:06 +0000
asID: 17561
IP address blocks: 154.208.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76955 (0x12c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:51:06 2024 GMT
Not After : Dec 12 17:51:06 2027 GMT
Subject: CN=67703a8e-075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:aa:b0:df:85:b9:30:34:b7:a8:46:f2:25:
4b:f1:3f:e5:0e:89:a7:df:e7:56:f8:35:da:c8:45:
f0:c5:9e:56:5f:e8:65:26:14:dd:f8:a6:6a:5f:7f:
f7:32:2f:f1:17:b5:67:4e:ff:cc:41:a8:be:c2:d5:
60:d3:cc:5f:76:97:57:85:48:a0:20:f4:02:80:0b:
4f:05:a3:db:e1:34:1e:99:3b:7c:49:7e:f4:7d:ee:
ee:ac:4b:60:c0:7a:81:78:b7:0a:65:c8:b5:5c:82:
f9:9b:db:f1:28:ff:d5:cc:f6:d0:91:c7:29:cd:86:
f4:18:53:61:04:d9:5a:4f:fc:dc:d6:31:d3:fa:04:
bf:08:32:07:41:af:b3:90:16:90:85:bc:9d:03:ae:
6e:b6:a7:7e:f0:e0:cd:5a:06:ea:dd:6e:96:58:77:
95:e6:b1:4e:99:14:40:0f:93:15:3e:4b:b0:e0:41:
31:0a:a2:25:96:be:06:f7:4c:38:c6:04:7b:1c:0d:
9a:d3:34:5e:0e:25:b9:35:dc:4a:68:d2:d5:ff:36:
4e:0a:8c:d4:61:30:6b:f0:b9:67:66:5e:41:1b:d1:
96:ce:1b:b0:3a:87:b4:6d:fa:68:91:38:8e:46:e6:
f8:ec:ce:43:e4:c4:08:32:eb:6d:3f:53:ae:97:0d:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:68:C2:2E:50:02:E3:C5:96:45:14:AB:6E:61:4E:B1:B8:AD:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52155C82C54411EFABCA877F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.178.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bc:c0:c0:8c:5b:9c:3f:fa:55:2c:70:37:d7:79:48:50:ea:
f2:50:34:01:1c:b6:26:3b:c9:63:1c:63:b3:25:95:bf:db:d5:
67:ee:78:98:1b:ea:24:30:05:7f:ad:fe:7c:e4:d6:94:d6:f6:
49:c8:4d:40:ab:c4:6f:7c:fd:31:4b:b7:59:4a:1b:aa:56:69:
f7:d6:91:4c:42:3e:44:4b:ac:83:85:8d:51:ef:72:b7:2b:ca:
f4:db:e3:47:42:07:97:f5:fa:a7:a0:63:8d:02:0a:fc:b6:3e:
59:fc:dc:15:e8:da:8b:12:50:5f:fc:02:ca:86:0c:3b:94:89:
fb:d4:0f:6b:60:35:81:db:67:08:8e:39:e6:bf:2d:8e:74:37:
9b:e8:a1:1d:3f:c8:03:ec:85:43:11:8c:3d:d9:c0:cb:e4:e0:
ca:65:a8:4b:04:19:71:61:3b:38:25:2f:e5:7a:38:69:dc:71:
73:57:e1:03:08:e7:c0:fc:a7:64:49:ee:66:14:a8:f5:b3:b5:
73:f5:78:c0:93:66:dc:5c:28:18:5d:1b:9f:bc:b9:6f:72:93:
d9:94:3e:2a:81:8c:7e:6b:df:72:c0:d7:35:fd:3c:be:08:93:
1a:8f:8b:62:d7:42:4c:7c:4e:fb:f5:1a:03:4e:63:79:b7:a3:
e5:b8:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:03:59 2025 by rpki-client