Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FACE264C3C511EF9778517C762E951A.roa
File: 5FACE264C3C511EF9778517C762E951A.roa (raw, json)
Hash identifier: iXBsJpW4ZXkDgL90iBCqhVN9rbrUwHXcOX0zvb7DpQ0=
Subject key identifier: DC:20:44:A8:F0:F6:86:35:21:0D:A9:0F:DA:40:7D:3A:96:3E:33:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FACE264C3C511EF9778517C762E951A.roa
Signing time: Thu 26 Dec 2024 20:09:55 +0000
ROA not before: Thu 26 Dec 2024 20:09:52 +0000
ROA not after: Sun 12 Dec 2027 20:09:52 +0000
asID: 17561
IP address blocks: 154.83.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75722 (0x127ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:09:52 2024 GMT
Not After : Dec 12 20:09:52 2027 GMT
Subject: CN=676db813-442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:4a:c7:7f:04:d8:82:40:e2:1b:6f:91:12:
ca:9a:4e:a6:96:fb:90:0e:1b:75:08:a6:24:4d:4a:
61:e0:2a:4c:87:04:33:7e:b3:e9:6b:f3:56:c5:e2:
77:9e:95:4e:11:88:58:3f:78:1a:75:34:6a:21:8e:
51:58:3b:96:cb:63:55:4c:48:94:c0:e3:3d:f4:eb:
78:22:a7:51:c6:e3:c5:b9:3e:55:b7:db:ee:37:fc:
df:54:6f:04:78:5d:5d:b0:f9:81:6d:98:1b:80:e4:
68:30:56:e2:ca:56:e1:31:92:10:a5:14:41:d4:78:
d7:29:45:09:0d:ed:7b:6b:34:03:6b:5b:8b:3b:79:
22:bf:31:ba:b1:e1:72:e4:f9:3c:98:fd:fc:e1:5b:
64:99:2d:a4:bf:8e:56:66:33:53:d9:d8:6e:28:08:
5f:60:11:30:75:04:b4:82:2e:23:db:4d:ea:33:7e:
5e:1e:60:b2:a9:f8:67:0d:df:d9:70:e4:ce:be:2f:
36:5a:66:7c:c3:06:06:a7:5d:77:a9:66:3f:ee:1f:
c4:8a:1f:d8:95:9e:86:26:2d:d7:c0:8c:18:85:c1:
81:59:0e:90:78:e9:8d:69:a2:6a:c5:47:f6:d5:b9:
52:7e:51:cc:a4:b3:b2:13:fe:4f:e2:28:01:db:c1:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:44:A8:F0:F6:86:35:21:0D:A9:0F:DA:40:7D:3A:96:3E:33:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FACE264C3C511EF9778517C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:dc:13:79:5d:22:42:85:a3:e8:60:51:33:b0:48:6b:69:85:
dd:14:27:c4:9b:69:93:97:64:73:bb:92:9f:58:38:53:cc:6f:
8d:91:18:41:5f:83:6c:72:7a:0f:e9:ce:31:ec:da:76:9c:7e:
05:0c:6c:2e:cb:c6:ea:0f:09:75:49:60:ec:4b:2b:dd:88:0d:
2a:1f:5a:fd:eb:a3:56:73:50:cc:68:61:97:c1:7a:aa:29:5d:
d5:fb:3c:8d:a7:2c:88:00:b6:6f:1c:f2:af:92:6f:fc:32:60:
31:f2:f6:7a:ea:6c:47:24:ee:3b:17:80:1d:45:d4:d8:42:96:
d3:4b:93:0f:4a:5f:43:a9:d4:dc:92:95:bc:c4:6b:91:51:67:
8d:a4:29:6d:91:01:79:34:8b:81:c7:94:5a:c9:46:51:6d:14:
a3:24:28:f0:0d:7e:74:25:87:10:35:7a:6f:b0:90:fa:51:15:
a0:be:3d:29:8c:41:c4:30:09:02:9f:d7:13:5f:20:fb:d3:69:
7f:a1:44:55:74:6b:61:05:ee:8a:d3:51:94:a0:f8:4f:67:88:
93:6d:df:0b:c5:09:bc:64:b3:90:c3:3b:a8:e7:4a:a6:57:7d:
ad:93:de:d9:59:8d:e8:18:fb:ef:fa:83:23:a3:26:2a:c0:2d:
12:29:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client