Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61997AF4C3D611EFA9B49566762E951A.roa
File: 61997AF4C3D611EFA9B49566762E951A.roa (raw, json)
Hash identifier: HYTqjgfbfR4BK0EnuYkG4SwCabdNR+G0Mo+OgQsKoOs=
Subject key identifier: CD:79:55:A7:AD:90:59:E1:79:6B:2C:4D:8E:EC:C7:46:D3:68:72:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012876
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61997AF4C3D611EFA9B49566762E951A.roa
Signing time: Thu 26 Dec 2024 22:11:40 +0000
ROA not before: Thu 26 Dec 2024 22:11:36 +0000
ROA not after: Sun 12 Dec 2027 22:11:36 +0000
asID: 17561
IP address blocks: 154.84.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75894 (0x12876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:11:36 2024 GMT
Not After : Dec 12 22:11:36 2027 GMT
Subject: CN=676dd49c-c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:2a:3c:f4:2b:9e:7f:e2:45:0d:23:9f:7d:
ba:99:5c:aa:a3:eb:34:f7:b2:57:57:c9:a5:c4:95:
3d:a0:a1:15:4f:39:1d:2f:0e:9b:56:f7:7f:dd:99:
d2:15:82:3e:4b:53:47:36:7c:8d:89:89:52:94:d8:
3e:b0:9e:89:34:99:88:ff:be:2e:9a:a5:3f:bd:30:
41:37:7b:3f:fd:c1:7c:a2:0a:a4:10:a4:c6:5f:4b:
ed:bb:e0:f4:5b:e3:bd:db:60:fa:07:e9:de:7e:db:
c8:14:44:cf:d7:29:66:66:74:41:69:09:2a:68:07:
01:6d:54:98:3c:cf:46:1a:11:6a:aa:d4:8d:3b:6e:
77:a5:3b:d5:57:37:3b:04:e7:46:78:f8:23:ba:f3:
c2:a0:be:5b:ef:34:b3:52:6c:dc:04:bf:7f:3b:76:
75:b2:3e:ab:d1:93:3a:6d:a8:9e:61:63:e0:57:f6:
39:ef:e6:41:7a:d4:24:fb:d4:77:60:cd:f3:cb:e0:
5d:5e:50:99:f0:27:11:d6:ec:e4:dc:58:8d:bc:96:
3a:46:12:a5:71:61:fe:75:45:ab:64:29:5a:99:5d:
46:3f:19:66:2e:cf:63:fc:f4:e2:05:4f:a8:17:d6:
29:4b:63:64:1a:fa:7c:9a:57:d5:d5:86:3e:b8:2f:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:55:A7:AD:90:59:E1:79:6B:2C:4D:8E:EC:C7:46:D3:68:72:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61997AF4C3D611EFA9B49566762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6e:47:0c:89:5f:57:d2:6f:e7:bd:a0:5d:09:9c:89:84:fc:
fc:bc:3d:e1:8e:22:97:ec:fb:5d:f7:fe:64:55:40:c1:4b:f9:
3d:8a:4e:cc:c1:90:46:ed:b9:70:6b:29:c0:23:dd:13:c2:e8:
85:ca:2a:2e:8d:30:2b:da:46:14:f4:74:6c:93:93:5f:03:5b:
be:8c:84:88:52:69:0d:b8:f8:36:27:d6:3d:41:e6:91:94:4e:
93:f0:ee:66:74:61:5d:4c:95:32:d9:45:7a:67:2b:e7:69:cf:
82:70:8f:b3:f2:44:0d:0a:76:b1:6b:7d:12:7d:13:a4:19:be:
96:27:e8:ca:52:99:bc:ca:36:64:66:c4:1f:33:9a:01:6f:da:
99:71:86:17:21:c8:7f:ac:21:cc:e6:f7:cd:13:ec:75:be:71:
c0:9e:2c:73:70:3d:82:5d:ca:04:9d:33:b4:fb:c4:4b:99:fe:
d0:89:40:3a:2e:1d:28:38:af:90:42:2e:8d:f5:8e:65:b4:c1:
29:3f:5f:bd:9b:4b:72:c9:a0:25:65:3a:dc:5d:88:a6:d2:d9:
ab:a4:17:3b:44:f1:7d:ef:0f:5b:c3:0b:6b:cc:2f:fb:f6:f3:
d9:ff:34:9f:89:7d:78:03:fe:b6:c3:bf:91:a8:69:3e:a8:dd:
92:35:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:56 2025 by rpki-client