Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78989312C36C11EF8C9F694F762E951A.roa
File: 78989312C36C11EF8C9F694F762E951A.roa (raw, json)
Hash identifier: 5tUUiNb5uRJ+iVuZIWB5tqouLWFOxav389lU873l7pY=
Subject key identifier: A0:17:03:6A:03:98:A4:64:4D:CE:E8:0E:EE:F3:D9:A9:F1:8E:DB:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78989312C36C11EF8C9F694F762E951A.roa
Signing time: Thu 26 Dec 2024 09:33:32 +0000
ROA not before: Thu 26 Dec 2024 09:33:28 +0000
ROA not after: Sun 12 Dec 2027 09:33:28 +0000
asID: 17561
IP address blocks: 154.94.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75514 (0x126fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:33:28 2024 GMT
Not After : Dec 12 09:33:28 2027 GMT
Subject: CN=676d22ec-f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:81:6b:17:35:2d:ee:13:b3:45:40:5a:5c:
19:58:96:a4:9b:ab:33:fc:04:fc:a8:4e:bd:64:85:
b8:bc:e3:2f:40:eb:f7:e3:eb:c6:56:d5:6e:4e:7b:
f1:da:c6:12:0b:96:07:4b:46:f6:c9:62:3d:e6:54:
05:1b:8f:9f:3f:9f:59:2b:59:32:cf:06:6c:23:08:
fa:fb:cc:29:c5:9b:82:0a:1b:d6:a7:8e:c1:d5:03:
e6:c9:23:54:3d:c1:5b:45:47:c0:81:3e:d0:c3:69:
d2:85:22:30:d7:f7:d2:3e:75:21:ae:e1:3d:3c:a3:
33:b9:e7:d8:70:f5:54:46:82:4e:ec:e4:72:34:2c:
13:f5:7a:26:c0:cd:ca:ea:cd:a2:92:1c:f6:6c:0c:
66:42:0d:50:a0:c3:92:a3:f8:21:91:c1:1c:71:36:
25:91:a9:09:33:e2:9f:9a:57:5b:1f:e1:17:68:db:
ff:84:77:71:df:fd:fa:e9:b9:11:cd:93:a9:a5:9a:
46:5e:ad:ef:28:46:3d:e3:78:9b:b6:3f:16:27:a1:
a4:a9:2c:df:09:87:2a:62:81:73:29:c9:70:4c:d3:
63:79:05:fc:11:c0:be:c9:d0:08:0f:9e:c4:2a:ee:
02:ff:1e:06:c8:65:a3:89:11:70:98:d9:2b:f9:b4:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:17:03:6A:03:98:A4:64:4D:CE:E8:0E:EE:F3:D9:A9:F1:8E:DB:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78989312C36C11EF8C9F694F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8c:de:0f:a4:99:c4:c7:53:c4:fa:d4:14:c3:bd:62:7b:c0:
2f:61:22:02:f3:1b:9a:b4:45:4b:53:10:31:c2:9e:76:d3:8b:
2e:f2:a4:37:91:47:db:ad:f5:08:4e:50:b4:31:56:0c:51:47:
8c:5f:74:a7:0a:1c:c4:bc:70:b8:76:5d:85:f1:30:68:bb:1f:
8f:b8:f2:3f:bc:bd:ab:a3:63:f0:b6:50:dd:6b:fd:35:b1:80:
1b:75:f1:1f:4e:9d:d5:64:0b:61:44:06:fe:2a:71:0a:21:f3:
1e:7f:e6:3e:ed:42:8a:fa:d5:16:79:1a:8b:94:f8:17:5c:a8:
ee:24:04:25:eb:6a:39:9c:c4:dc:fa:04:e6:c2:f2:a0:57:7c:
c9:c4:d1:8b:bc:57:09:4e:e1:58:12:95:ca:4b:71:fe:c2:2e:
e6:bf:29:8b:9f:b1:4a:4b:dd:3f:a9:95:81:2a:4a:a3:d9:ed:
3b:2d:08:b4:74:c0:e6:eb:bc:8c:07:e2:f0:4f:17:12:50:7d:
09:ce:f7:c7:20:1e:d7:5b:6f:33:f3:a8:7d:27:d5:0e:40:6f:
12:ec:f9:bd:8c:f5:5e:75:00:ef:37:74:06:29:15:0f:4c:c9:
c4:df:ec:e7:9b:f0:33:3a:c7:35:5f:c2:d5:a3:42:b3:ad:32:
f4:27:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:40 2025 by rpki-client