Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69800636F47611EFA345D142762E951A.roa
File: 69800636F47611EFA345D142762E951A.roa (raw, json)
Hash identifier: eEQH3V2O6zTMeNCTCUNPDw2s/nYj5k01gJDjYS7eM3g=
Subject key identifier: 1F:1B:14:9E:2C:43:0D:96:A3:6E:04:0D:39:32:5A:0F:0C:47:65:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01658B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69800636F47611EFA345D142762E951A.roa
Signing time: Wed 26 Feb 2025 19:18:09 +0000
ROA not before: Wed 26 Feb 2025 19:18:05 +0000
ROA not after: Sat 19 Feb 2028 19:18:05 +0000
asID: 17561
IP address blocks: 154.82.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91531 (0x1658b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:18:05 2025 GMT
Not After : Feb 19 19:18:05 2028 GMT
Subject: CN=67bf68f0-7de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:30:0a:09:f4:7f:4e:82:48:99:b8:31:ea:
b2:45:a7:3e:e2:ef:12:29:64:3b:8a:07:31:e5:38:
b9:2f:16:a4:67:2d:b4:c8:37:24:74:29:13:28:0a:
6c:05:ca:3a:c0:3e:ec:d8:2c:35:d0:35:36:08:a4:
41:d2:45:3f:2c:40:10:2c:0e:0d:55:45:ec:b8:8d:
c0:64:2c:55:72:d6:40:5f:b4:0c:7a:11:b0:9b:57:
23:17:ee:fe:7b:2a:dd:7c:24:14:d1:f9:8b:89:b1:
dd:fb:8b:03:8d:96:7b:99:4b:4e:7e:12:65:5f:ed:
11:2a:63:29:22:03:1a:ea:b3:10:7c:56:c8:b4:7a:
27:08:bf:82:e2:6a:13:43:dc:66:fc:f3:73:76:ba:
71:af:07:ad:69:63:45:8d:f6:9c:4a:98:af:fa:eb:
8e:5c:e1:fb:38:47:bd:00:6d:cc:b8:8a:be:90:20:
2a:18:b6:60:99:47:ab:9b:ef:6e:7c:2f:ed:25:9d:
46:a0:24:e8:2a:ed:2e:ff:f7:dc:df:06:4d:ba:a6:
33:ac:88:f3:f2:03:88:5a:df:3d:80:7c:3a:b1:95:
74:3e:b2:ad:91:9f:a3:57:28:f7:5b:6b:51:47:8b:
0f:68:1c:d2:54:0b:49:af:9f:4a:b5:38:fd:29:4b:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1B:14:9E:2C:43:0D:96:A3:6E:04:0D:39:32:5A:0F:0C:47:65:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69800636F47611EFA345D142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e7:af:17:43:53:60:af:39:b6:f4:52:5b:6f:09:a4:ae:9f:
4f:12:90:b2:12:85:c2:b7:1f:6f:5a:b6:a4:16:aa:e7:fd:8c:
70:23:ab:0d:95:47:db:bb:02:fd:2a:a8:b7:8c:ed:0f:d8:84:
6e:b7:a9:47:7c:eb:1e:23:cc:15:39:23:83:ac:01:bf:4a:4d:
90:67:da:fa:34:9c:c3:22:16:33:c0:74:ab:d2:00:9a:e8:50:
53:d6:f8:80:25:aa:91:51:65:e2:7b:2a:77:ff:da:72:1b:d0:
aa:be:58:f0:1f:ef:f8:1b:f0:09:d5:10:09:78:e9:90:3d:95:
8a:49:a8:b3:05:a5:6d:d6:c5:c2:17:c9:0d:99:14:2d:9c:35:
52:98:ec:6d:30:01:7f:76:a1:6e:37:24:1d:2c:4e:45:2f:89:
57:71:22:43:2e:24:50:3c:fa:dd:e0:f3:2d:ea:92:a4:31:e4:
0a:b2:80:f1:87:99:72:19:34:16:89:76:88:37:5b:a9:66:22:
08:8b:bd:60:7d:28:ea:02:5b:64:93:4f:10:61:7d:d7:06:f2:
dc:c7:91:dd:6f:12:68:09:40:3a:5f:82:0b:d0:22:c4:27:57:
d4:c1:96:7e:d1:86:d5:3b:0a:46:02:7c:25:5e:d3:ae:c3:b8:
6d:de:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:56 2025 by rpki-client