Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDF920CC41F11EF8DB44648762E951A.roa
File: 5CDF920CC41F11EF8DB44648762E951A.roa (raw, json)
Hash identifier: aJSy4zCbKTekicsgyh/jaJoYAV5lmfqFqsVuTRjF0nc=
Subject key identifier: DC:F1:B7:16:E4:12:23:D0:8D:92:48:52:3A:78:0D:BB:55:B7:09:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDF920CC41F11EF8DB44648762E951A.roa
Signing time: Fri 27 Dec 2024 06:54:05 +0000
ROA not before: Fri 27 Dec 2024 06:54:02 +0000
ROA not after: Sun 12 Dec 2027 06:54:02 +0000
asID: 17561
IP address blocks: 154.201.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76207 (0x129af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:54:02 2024 GMT
Not After : Dec 12 06:54:02 2027 GMT
Subject: CN=676e4f0d-2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:d8:29:b2:d0:96:b9:2e:f9:93:1a:60:aa:
d6:76:08:d1:eb:ec:44:d4:7e:5f:c6:42:2a:86:56:
e6:00:c1:f7:56:8a:8e:45:45:f8:d9:07:1f:f1:dc:
12:6c:47:10:e0:d8:bc:d8:df:cf:66:ce:65:1d:4e:
81:2b:13:27:a1:9d:ee:8c:8c:04:cd:3c:7d:1a:7f:
1c:d8:ff:f0:0e:6d:d8:31:e2:cc:81:97:29:39:a6:
30:f9:d2:83:9a:94:7a:fa:18:08:af:75:e1:b7:43:
cb:d4:2f:bc:e1:83:77:b5:70:ff:70:68:b8:9c:cb:
8c:c5:04:7c:45:5e:25:51:39:2b:53:70:65:57:65:
98:79:25:b3:15:fe:95:96:7e:16:4c:df:65:85:49:
e4:d6:7d:95:48:f9:35:01:ad:3d:6d:38:52:91:96:
20:db:f7:d1:53:7f:e2:99:fb:43:90:a1:25:1b:a3:
37:85:5c:44:b0:3a:23:20:8d:53:f4:0d:17:5e:e5:
d3:12:f1:99:74:c5:d5:18:56:b9:7d:9e:73:5b:87:
bc:68:50:e5:54:34:5a:a7:b4:fa:0b:52:8d:7f:4f:
c8:76:f4:a1:25:4b:ee:bc:ba:fb:2f:fa:c2:0b:96:
3f:e7:e6:fe:b2:31:a5:b7:79:89:59:43:6f:0f:78:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:B7:16:E4:12:23:D0:8D:92:48:52:3A:78:0D:BB:55:B7:09:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CDF920CC41F11EF8DB44648762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.42.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f4:16:eb:91:5c:6c:54:4b:63:fc:2b:1a:4c:55:77:86:cf:
8c:d3:c3:45:9c:3c:19:72:a9:80:9a:9b:8a:1b:21:9b:c5:2f:
eb:8e:47:ef:96:c5:2c:1f:6b:29:21:12:d9:c2:df:81:f5:5e:
5f:82:c2:e6:60:71:57:75:93:bb:ca:c7:dd:71:1a:b6:dc:48:
ee:12:06:88:a8:19:67:0f:d8:13:75:6e:48:28:90:42:46:e2:
6d:6c:8e:5e:ce:9b:36:00:79:6f:de:32:51:0a:2e:ce:e1:a0:
e7:90:e1:03:14:45:72:c2:a1:95:f9:3d:22:ee:fe:07:6e:e4:
58:cb:02:f5:9d:55:c6:e4:e6:c2:bf:4c:21:9a:74:45:7f:65:
55:d5:28:42:f7:59:ed:5d:bf:b1:00:bc:ba:7b:dc:45:df:27:
5d:14:0b:0e:e3:24:16:f2:56:0c:aa:f3:e8:46:2d:ba:64:a9:
90:99:e4:e2:a3:d2:b5:4f:60:53:88:13:b8:bb:f7:e7:b5:dc:
45:8e:8a:36:39:ab:8a:eb:a3:7f:8f:99:10:14:28:e2:d9:2a:
aa:28:e9:e1:67:c0:43:8c:70:6a:11:d3:17:1b:a0:6c:61:3c:
bc:77:58:9c:07:63:d5:f5:9f:e1:98:ba:42:b6:a2:20:80:ae:
f0:02:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:16 2025 by rpki-client