Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/694829BCC35411EF9FE382B5762E951A.roa
File: 694829BCC35411EF9FE382B5762E951A.roa (raw, json)
Hash identifier: lQIJt5blP0QE3k0bg/J0YK9oC1gedmuO3yrfzpSNhGs=
Subject key identifier: 42:F6:F8:FA:06:BC:77:93:3D:6A:0A:E9:ED:DE:07:74:7E:93:1D:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/694829BCC35411EF9FE382B5762E951A.roa
Signing time: Thu 26 Dec 2024 06:41:18 +0000
ROA not before: Thu 26 Dec 2024 06:41:15 +0000
ROA not after: Sun 12 Dec 2027 06:41:15 +0000
asID: 17561
IP address blocks: 154.88.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75213 (0x125cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:41:15 2024 GMT
Not After : Dec 12 06:41:15 2027 GMT
Subject: CN=676cfa8e-1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:c3:b8:20:20:c0:34:bd:43:4b:04:30:9b:
2d:26:e7:a4:54:b9:35:c5:f2:89:67:b5:19:26:8f:
43:98:09:71:f6:12:37:e4:1b:05:07:e5:1f:06:54:
d2:6d:79:51:a2:5c:76:f6:72:71:b2:7c:0b:d7:55:
eb:3a:c0:05:ee:d6:48:f1:94:45:55:ce:40:9e:d7:
d6:b5:79:4d:bb:f6:63:67:8f:b1:de:bc:6f:73:ff:
05:d5:7f:7a:46:fe:d5:76:ca:6d:e0:74:59:26:a9:
0d:c3:6e:78:c3:42:02:39:da:e7:90:17:e1:09:05:
ca:95:cf:04:2e:b8:ab:58:49:58:5e:0d:00:0f:35:
10:f0:72:c7:66:1d:78:f4:7c:b7:42:c5:ba:4a:3e:
d1:f2:59:ea:e2:3a:c1:50:c1:91:8e:95:9d:4a:f6:
c6:cc:23:ab:76:63:dc:f0:0c:bb:9c:25:01:24:77:
3c:71:34:8a:42:55:db:47:82:43:82:84:64:1e:be:
13:fb:40:d6:c6:c2:e3:bf:75:bb:c7:68:dc:9b:f4:
4d:6f:ab:f3:86:10:2b:93:27:0f:dd:72:85:e4:08:
d1:4f:92:4b:9d:43:4b:2e:df:60:37:f8:88:f5:a7:
37:36:df:f1:5c:e1:e1:06:2a:fd:ff:0d:87:a9:f4:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:F8:FA:06:BC:77:93:3D:6A:0A:E9:ED:DE:07:74:7E:93:1D:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/694829BCC35411EF9FE382B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0b:f9:31:4d:65:11:d7:79:84:a8:bf:73:4c:6e:cb:4f:37:
ee:e2:e5:a2:72:27:76:c7:f7:26:27:4e:02:0c:47:29:9d:d9:
f9:38:6b:82:0c:f1:ea:cb:fe:00:bd:0f:f8:30:7a:85:f6:5f:
bd:ad:42:06:7a:0a:6e:82:e0:56:a4:f2:16:f3:22:79:9a:d1:
62:54:5c:1f:3c:9e:98:c7:99:a4:9d:c0:4a:97:26:4a:81:86:
8a:8d:36:7b:30:29:fb:8c:8c:c7:70:52:09:8b:c2:d7:88:0b:
85:31:2d:bf:c8:45:c1:be:63:8d:9f:3f:4b:02:20:40:7f:77:
d6:f1:e5:3e:e7:f3:64:3b:2d:51:4c:39:96:32:73:90:4d:6e:
67:6a:d2:37:ef:64:50:41:2b:e0:2a:b0:b5:0c:bd:14:2d:92:
90:7b:d0:36:dd:31:4e:23:85:91:9d:6a:d1:7b:da:54:99:3c:
c4:79:99:34:0b:bf:a9:bf:97:9c:5a:b4:a8:78:04:4f:14:87:
d6:3f:a3:8d:76:2d:58:78:81:aa:ce:22:ac:0d:37:80:40:6d:
16:9c:73:2c:10:5c:33:2c:e5:fc:5e:54:48:c5:57:fb:14:4a:
91:a9:01:e5:1a:5c:0b:36:94:84:3e:51:e5:c9:0e:a6:b2:45:
70:a1:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:42 2025 by rpki-client