Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547B92D6C54711EF89BC0591762E951A.roa
File: 547B92D6C54711EF89BC0591762E951A.roa (raw, json)
Hash identifier: Srtu6fS8e651Q2BYBGy0x5GUEX6CF506BpKwgj0ohPw=
Subject key identifier: BE:E9:28:DD:70:91:80:1D:4E:87:93:6C:55:88:CA:38:3F:E2:47:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547B92D6C54711EF89BC0591762E951A.roa
Signing time: Sat 28 Dec 2024 18:12:42 +0000
ROA not before: Sat 28 Dec 2024 18:12:39 +0000
ROA not after: Sun 12 Dec 2027 18:12:39 +0000
asID: 17561
IP address blocks: 154.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76983 (0x12cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:12:39 2024 GMT
Not After : Dec 12 18:12:39 2027 GMT
Subject: CN=67703f9a-48ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:97:e3:7d:ea:3b:7e:43:08:bf:23:fa:e5:
c0:c8:4b:47:d7:e2:0c:68:ee:e7:b7:59:85:98:ef:
42:a5:41:d5:c3:42:bf:3b:94:b6:9b:f2:1b:ac:b3:
37:b3:05:1f:58:51:7b:e9:bb:f8:5a:99:c7:32:5c:
fe:4d:65:81:ac:5e:f3:fe:91:24:26:52:44:72:18:
98:e1:74:c5:e5:85:ed:18:aa:fc:8c:ac:c1:fe:12:
ea:74:7d:23:8b:5e:72:32:92:f7:2c:72:fb:c3:08:
89:1b:94:07:3a:af:35:e4:90:12:42:ec:c1:bf:a1:
d7:87:2e:93:a1:df:f4:1e:52:1e:b3:0c:3f:9c:a2:
26:2a:0f:4f:f9:86:0f:73:b9:30:da:e9:81:3e:03:
bd:18:48:2c:77:cb:60:35:8d:80:80:2c:1b:e4:66:
96:37:45:20:36:bb:d9:ba:4a:ec:36:4f:b4:11:6e:
b8:d9:c0:93:57:4a:14:b3:0a:a8:7d:66:3d:ff:ed:
d4:76:88:61:d7:19:0d:13:ac:17:53:e4:a6:d8:87:
b9:d0:2a:5b:8a:23:f7:2c:0e:69:ee:ca:e0:e2:9f:
7d:a2:06:d9:d1:c5:34:17:19:b9:8b:4a:82:cd:f0:
63:3f:ec:52:07:8c:b6:fa:2f:d0:73:7f:bc:80:be:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:28:DD:70:91:80:1D:4E:87:93:6C:55:88:CA:38:3F:E2:47:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547B92D6C54711EF89BC0591762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cf:61:21:ef:95:aa:87:91:7a:1e:31:ee:51:95:cd:b8:0c:
de:87:14:a9:c5:ab:fd:bd:8e:48:84:cb:20:04:03:ba:09:c2:
55:18:a7:5c:5d:4a:99:fd:fe:e1:8b:cc:ea:74:10:2f:a0:b4:
bc:61:fe:f5:e7:75:3b:40:58:46:d1:24:9b:e8:f8:ad:c3:d3:
24:f2:8d:7a:ff:b1:24:11:fd:f4:64:53:53:50:50:ea:8a:95:
65:09:a2:33:69:92:8f:10:af:20:7c:4a:66:b9:91:f8:db:66:
23:ca:4c:fd:3d:43:18:12:25:57:12:95:e6:e3:d4:ec:16:de:
4d:03:16:30:75:58:85:b0:44:04:e7:6a:2a:73:aa:ba:51:ba:
6c:23:df:91:fa:2c:86:bc:0a:20:34:c1:69:28:90:7d:51:03:
5c:e0:4a:62:80:0f:94:3d:5d:98:12:28:97:fe:68:92:69:e4:
cc:66:94:7a:70:8a:d1:01:06:17:6d:a0:e2:09:44:61:e7:4e:
61:7e:d4:73:39:4b:dd:a2:10:70:63:22:6f:0f:b9:43:a6:6c:
a2:03:82:db:92:54:84:68:73:93:93:83:14:48:e6:62:a1:cf:
07:72:16:9c:7b:be:ff:86:bf:de:46:a5:e3:29:fa:ca:9e:5f:
9e:fe:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client