Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FF1358C3C211EFAD1E4F69762E951A.roa
File: 72FF1358C3C211EFAD1E4F69762E951A.roa (raw, json)
Hash identifier: NzXDFxiK9RlNSBPLvddZA5VT/l/RTt5Lp0K6kinYaC8=
Subject key identifier: 5E:0E:81:56:A8:C9:0C:6A:8B:E9:6B:8F:3D:79:3B:D9:25:CA:A5:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FF1358C3C211EFAD1E4F69762E951A.roa
Signing time: Thu 26 Dec 2024 19:48:59 +0000
ROA not before: Thu 26 Dec 2024 19:48:56 +0000
ROA not after: Fri 12 Dec 2025 19:48:56 +0000
asID: 984
IP address blocks: 154.81.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75692 (0x127ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 19:48:56 2024 GMT
Not After : Dec 12 19:48:56 2025 GMT
Subject: CN=676db32b-081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:7a:9f:2f:8f:67:01:94:32:9c:db:31:8b:
a2:c2:81:4b:f5:40:30:31:47:15:f5:ab:27:89:b7:
15:e0:be:82:94:79:a2:50:ff:8d:34:64:c4:a0:2c:
3f:1c:4d:d0:08:ab:c9:b7:d0:b8:60:33:01:fe:66:
e5:64:d0:23:76:8e:34:a2:a6:72:be:e3:68:b0:fa:
8a:83:8b:e7:34:78:67:05:7f:d2:70:92:9d:c5:bf:
f5:a6:d5:f7:e1:e1:ac:6d:3a:56:2e:3c:df:06:15:
b7:1f:50:ab:77:10:ec:72:30:ad:0b:01:80:98:67:
6e:32:be:84:f8:b3:ef:87:3e:c1:de:16:9a:50:5d:
b0:c0:be:d3:b9:28:bf:4b:66:f3:48:f2:c2:d2:0d:
4e:ed:6c:ab:32:89:5c:75:8d:6e:5f:7d:2c:9f:5b:
a1:10:37:8e:62:ca:92:e6:22:96:85:c0:a5:04:93:
f1:99:c4:97:af:3d:e0:ff:ec:67:27:9e:07:f1:a5:
be:21:78:da:08:91:e9:54:90:0e:26:bc:26:d8:15:
27:18:2a:24:3a:a2:62:41:2b:8a:d8:e4:66:fb:c6:
20:85:67:b1:aa:4d:92:c8:17:ab:61:92:76:ac:aa:
ba:cb:63:6c:58:24:38:70:5c:ef:7a:8e:b4:84:d5:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:81:56:A8:C9:0C:6A:8B:E9:6B:8F:3D:79:3B:D9:25:CA:A5:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72FF1358C3C211EFAD1E4F69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:61:e1:38:a9:23:00:98:54:48:db:19:fb:8a:08:31:7d:81:
53:d7:99:73:e7:07:14:3f:6d:84:d6:b8:da:c1:8d:b8:3b:c2:
1b:ba:2c:04:65:38:a6:6c:66:ff:1b:ea:94:0d:de:00:f3:1c:
0d:eb:ab:36:d7:03:2e:ad:42:82:9b:ee:8e:02:c6:96:c7:2b:
55:58:84:13:38:d1:0e:17:4d:82:2b:79:7c:c8:9f:7c:80:48:
39:f3:a7:c1:0c:13:47:9a:e5:e4:aa:ac:86:a6:b3:c9:12:5f:
3c:76:02:df:f9:70:2f:3d:7a:9b:9c:24:9d:4e:ff:31:38:c0:
18:a1:64:47:3a:02:34:e1:32:f4:20:2c:9b:e4:af:52:67:66:
5f:1f:43:11:c5:44:38:24:23:10:4d:98:43:b0:f1:c9:b6:19:
be:b9:5a:f4:8a:6e:b1:29:68:9e:45:26:bb:80:e4:c0:f2:d4:
66:2b:ad:4a:9f:69:e4:79:4c:8f:eb:45:88:61:2c:38:6b:b4:
a1:dd:e1:62:76:3c:98:d1:45:7b:a9:c6:9c:09:c2:53:54:fa:
f5:fa:a6:7f:a5:2c:ef:35:19:a3:74:92:f0:3b:ed:74:f8:4e:
3c:9b:23:4f:f9:3d:37:bf:b0:f9:42:88:57:40:fb:77:64:39:
4a:26:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:10 2025 by rpki-client