Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A49A454C35D11EF9A71F16E762E951A.roa
File: 6A49A454C35D11EF9A71F16E762E951A.roa (raw, json)
Hash identifier: vCRMiD2aP8e3g0xVqOE0RSwI7CNt32GozqRE1w6GeVo=
Subject key identifier: 47:7C:A9:BA:7F:55:E6:43:CF:38:29:E3:1A:CC:0D:EE:D7:0B:A9:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012605
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A49A454C35D11EF9A71F16E762E951A.roa
Signing time: Thu 26 Dec 2024 07:45:45 +0000
ROA not before: Thu 26 Dec 2024 07:45:42 +0000
ROA not after: Sun 12 Dec 2027 07:45:42 +0000
asID: 17561
IP address blocks: 154.88.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75269 (0x12605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:45:42 2024 GMT
Not After : Dec 12 07:45:42 2027 GMT
Subject: CN=676d09a9-ae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:87:21:e7:b7:25:37:bb:14:08:87:5c:06:
57:f6:2a:28:98:ee:7f:b0:ad:0d:39:18:4b:64:3a:
98:0e:c7:79:ec:cc:55:87:87:67:54:3c:8d:16:f1:
5a:cb:76:8d:2c:90:8c:ed:d4:d1:c0:69:00:ee:79:
e9:3f:1b:67:ba:ec:f7:2e:3e:ce:05:d6:4c:0d:a2:
9a:d3:1b:71:cb:43:73:2f:ad:95:1c:78:5a:01:30:
76:37:b5:00:21:99:7e:de:74:c6:82:7c:46:cf:52:
55:2c:44:3a:46:83:16:2b:f3:9d:c6:d9:03:d5:16:
20:da:ea:d5:08:e7:e9:29:fb:16:00:dd:78:e1:7f:
da:e5:35:d2:e2:86:a8:cb:84:17:38:3e:f9:c7:03:
4b:b5:8b:e7:99:7c:1a:f1:35:72:ba:99:d4:53:d5:
5e:7d:e4:36:ef:ac:f2:80:fd:64:da:8d:37:f0:de:
ed:79:6d:2d:51:f4:70:11:5d:0e:96:94:fe:d0:86:
95:9b:05:86:4b:55:2f:5d:1c:0b:52:a5:d4:8e:fb:
5d:53:fe:fb:85:6c:89:40:8c:3e:0f:38:5c:ed:15:
e0:a0:f5:6f:b3:d5:be:ec:13:c9:cc:5c:9e:d7:19:
68:1c:48:51:55:68:0a:7e:12:fb:14:ca:91:bc:23:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:A9:BA:7F:55:E6:43:CF:38:29:E3:1A:CC:0D:EE:D7:0B:A9:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A49A454C35D11EF9A71F16E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.57.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3b:5d:a1:33:63:87:41:6d:f7:fe:8c:d3:f2:ef:ca:52:bc:
16:a6:84:b1:27:fc:c3:9a:c3:62:c3:ce:bc:dc:7c:80:c3:7d:
ff:a5:84:7c:7c:b4:f3:b2:bc:88:6d:2c:90:e5:c3:59:af:92:
23:ca:40:65:95:be:7d:83:77:05:7a:6e:62:db:3f:18:90:db:
34:c9:31:b4:29:b6:a3:c4:8b:d2:d0:56:71:b6:3d:2c:3f:9d:
79:cd:40:f3:19:84:88:76:aa:0e:16:a2:69:48:f3:77:23:b6:
41:5c:e4:ad:63:15:20:c2:fb:5d:7d:64:72:3b:d4:35:5f:6e:
d5:16:85:42:09:aa:01:83:54:58:f5:28:aa:30:22:15:84:eb:
4e:e7:d6:ef:d4:54:d6:e5:77:2f:a3:1e:97:bf:84:92:82:d0:
76:01:b1:ed:53:fd:da:8c:e2:36:64:d8:7e:18:dd:b9:14:d1:
94:eb:5c:fd:b7:c9:17:4f:15:cc:54:ba:7e:44:9c:47:2a:1f:
80:40:9c:c1:ee:d5:12:28:9d:09:67:fc:87:96:09:22:6a:b8:
71:56:75:ec:8a:2f:a0:3a:63:4d:f5:d9:7d:b2:e0:2c:17:8d:
87:b0:3b:b7:c5:ed:5d:19:bd:06:5c:8f:18:a9:24:05:5f:a2:
6f:eb:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client