Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54248C62C51E11EF808A1090762E951A.roa
File: 54248C62C51E11EF808A1090762E951A.roa (raw, json)
Hash identifier: FyoCACijxsrtiy2Mtr1PTTZeqJZP7AXkFepYunfRpiA=
Subject key identifier: 3D:5F:2F:D2:33:FA:27:AF:C7:3A:5C:76:02:59:E6:20:08:65:F8:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54248C62C51E11EF808A1090762E951A.roa
Signing time: Sat 28 Dec 2024 13:19:12 +0000
ROA not before: Sat 28 Dec 2024 13:19:09 +0000
ROA not after: Sun 12 Dec 2027 13:19:09 +0000
asID: 17561
IP address blocks: 154.203.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76607 (0x12b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:19:09 2024 GMT
Not After : Dec 12 13:19:09 2027 GMT
Subject: CN=676ffad0-9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:ab:c0:09:e6:c7:8e:f6:c2:5a:75:e2:51:
c0:b6:9c:d7:5b:3f:3f:cd:14:53:9f:97:c7:d1:c2:
e5:7b:5a:dc:80:64:12:b4:87:04:8a:49:8d:a6:83:
fa:2e:20:dd:33:21:8c:52:5e:57:3e:82:7e:d6:d2:
c1:01:a6:4e:d9:cc:52:14:48:a1:b0:b6:da:dc:93:
16:6a:f4:26:c8:ef:f9:b9:89:4a:0d:4f:9a:56:fe:
a7:8b:f2:ac:68:84:09:55:9f:a7:ce:f8:68:f6:95:
c2:6f:d0:f6:38:ad:71:33:83:ed:75:d3:ba:6e:b4:
4a:78:ac:90:b3:2d:5e:d7:b8:1d:a3:91:15:30:62:
4c:bd:2e:79:86:eb:b2:01:7d:73:60:a6:62:7e:2f:
43:dd:1a:89:12:f8:e3:74:27:59:20:bc:a2:2c:68:
fb:f6:b0:f1:2e:cb:72:5a:d2:d2:21:bd:12:4d:09:
c4:3b:ef:31:02:61:f5:38:9d:69:a2:6c:a8:55:09:
93:75:4c:08:48:c1:9f:75:cf:a1:ab:d5:cf:75:6d:
58:54:64:4b:9f:1f:16:17:c2:4f:1c:5d:bb:32:cc:
87:76:79:6e:c5:88:32:5d:0f:66:1d:a6:39:7e:47:
a6:5e:21:dc:d8:7a:c1:18:5b:dc:f6:8e:7e:76:11:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:2F:D2:33:FA:27:AF:C7:3A:5C:76:02:59:E6:20:08:65:F8:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54248C62C51E11EF808A1090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2b:4a:b0:29:d9:7e:c8:10:2d:d0:e8:7a:d9:ac:4b:08:47:
04:e3:7e:18:cb:fe:82:6b:d8:59:43:62:63:84:77:aa:6c:74:
5d:e4:bd:85:00:34:16:4d:3c:16:8b:10:53:c2:bd:5b:03:de:
d1:a9:c0:d6:34:15:c1:07:66:06:4d:dd:41:c7:e9:3c:1d:94:
74:6b:5a:61:fb:c4:e3:00:55:c6:df:76:9e:a2:c0:95:50:2b:
cf:a9:f1:da:52:50:0f:93:67:a0:73:cc:ab:8e:e0:67:de:08:
a5:ed:d3:c0:f5:d3:ca:d7:69:77:c9:db:70:ea:15:fa:44:07:
5d:48:b0:a7:37:d4:37:10:f0:ad:c6:0b:64:6d:31:95:97:a9:
b3:35:57:05:17:01:76:52:29:a2:44:59:23:ad:5a:67:b9:73:
06:f3:a3:16:1f:4a:7e:8a:8d:72:fc:8e:9b:28:af:b7:79:0f:
48:4e:d3:17:20:04:35:49:55:48:31:ca:d3:f2:f5:0b:00:d3:
80:c0:cb:d7:cb:4e:9a:b1:c4:72:1d:95:26:9d:c0:77:28:60:
b4:56:5d:74:e5:97:9c:ba:ca:d5:9d:ad:fc:39:19:d5:b8:91:
f4:59:c8:76:cf:1c:3f:ce:89:52:7c:62:1a:a8:3d:7f:9d:f6:
ae:c7:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:53 2025 by rpki-client