Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/580D8978C3D911EF9DFEDB77762E951A.roa
File: 580D8978C3D911EF9DFEDB77762E951A.roa (raw, json)
Hash identifier: ERH+MtYRV8O1hlD2uvowraMirBZIp2Ad/16mLjFxV8E=
Subject key identifier: D0:A1:C4:46:48:75:A7:83:7A:76:77:E5:1C:44:FA:CC:34:F9:65:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012894
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/580D8978C3D911EF9DFEDB77762E951A.roa
Signing time: Thu 26 Dec 2024 22:32:53 +0000
ROA not before: Thu 26 Dec 2024 22:32:49 +0000
ROA not after: Sun 12 Dec 2027 22:32:49 +0000
asID: 17561
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75924 (0x12894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:32:49 2024 GMT
Not After : Dec 12 22:32:49 2027 GMT
Subject: CN=676dd994-05bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:4b:5d:a9:a3:7f:24:1c:48:00:9e:c8:77:
de:17:2d:17:2e:ff:85:7a:70:ef:5c:a5:35:51:89:
53:b7:78:ab:be:03:1d:db:6d:97:4a:fa:8c:8e:91:
12:c8:20:fb:79:d6:b9:96:49:1e:87:5a:31:79:f3:
3e:5e:1c:b3:2f:ac:00:67:88:90:52:54:ab:b8:e2:
83:24:b1:06:db:d6:d6:63:b3:d7:4b:70:ef:a3:bc:
67:81:2e:1b:d3:6f:a6:a7:a8:49:9f:fa:8c:37:17:
8d:6d:00:24:c5:4b:0e:eb:d1:47:e2:e3:4c:eb:18:
db:db:19:c4:0d:c3:4c:fb:98:d7:bb:60:79:43:d3:
5c:c4:3d:f6:d1:c8:61:0a:84:47:b7:71:9d:3d:67:
75:8f:e7:b6:f3:0b:fe:88:1e:de:d6:c7:63:b4:3b:
31:d9:df:bc:bd:75:0a:e4:35:d7:4d:4b:a6:c5:63:
9b:d6:d9:60:c8:dd:08:c0:88:14:5d:54:0b:a4:aa:
d0:d3:23:38:62:71:c1:01:36:ca:2b:00:b0:08:d7:
9e:26:a5:47:c9:2a:5f:5e:c6:b8:7e:42:2d:e8:9f:
f6:b2:4f:b9:8d:40:81:4a:95:ca:59:4c:b4:1a:82:
f4:12:c4:a2:8f:a3:37:aa:68:79:30:99:b1:b8:ec:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:C4:46:48:75:A7:83:7A:76:77:E5:1C:44:FA:CC:34:F9:65:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/580D8978C3D911EF9DFEDB77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:fe:8c:21:e1:ea:05:b5:2b:71:03:87:ca:9a:d3:91:c0:1f:
21:6d:ec:d7:69:47:29:fe:85:ee:61:3a:a7:ea:12:9b:d7:5e:
8d:81:a3:8b:5e:cc:4f:b7:b1:10:e0:8e:0b:16:d1:bd:3e:d9:
93:fc:69:94:96:53:a0:05:3a:f8:e8:ee:0c:25:96:3e:93:97:
7e:a9:6f:64:4f:6a:06:a7:e8:63:38:85:65:dc:51:d8:f8:a1:
32:58:34:46:b8:52:7b:45:a8:19:f3:00:72:df:2d:c6:ac:a9:
0d:aa:08:40:d7:8a:2e:66:be:85:1b:31:d7:b5:34:93:1e:80:
e6:33:1b:38:a2:cf:73:d5:84:ea:60:9a:de:8b:29:47:01:dd:
a8:1d:8b:e3:80:6a:8f:3a:c6:9b:c1:ae:4b:e4:cb:91:4a:51:
24:12:67:be:db:9a:7f:c2:eb:b7:f1:19:00:20:2e:5a:0c:a0:
6e:17:aa:b9:19:f7:f7:a2:8b:ee:ad:d2:9d:29:7d:4f:d7:ea:
57:ce:2c:1f:76:82:7e:82:69:95:e6:d8:35:f2:c6:ea:8e:a3:
8a:d8:99:ba:ff:31:79:da:4b:3d:cd:44:87:70:63:a1:6c:33:
63:ad:db:a9:14:1f:e7:4d:65:96:5a:97:a0:b1:24:de:6c:05:
58:8c:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:01 2025 by rpki-client