Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AFDFD96C3CF11EFB873F8B9762E951A.roa
File: 7AFDFD96C3CF11EFB873F8B9762E951A.roa (raw, json)
Hash identifier: 4yqrEUOjVXWlY6NNC0RHo4udCP5CrXTEKv/g4hjWduU=
Subject key identifier: 55:93:50:D5:B2:00:75:EA:BC:23:89:65:8E:26:ED:4E:BF:8D:D7:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012830
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AFDFD96C3CF11EFB873F8B9762E951A.roa
Signing time: Thu 26 Dec 2024 21:22:16 +0000
ROA not before: Thu 26 Dec 2024 21:22:12 +0000
ROA not after: Sun 12 Dec 2027 21:22:12 +0000
asID: 17561
IP address blocks: 154.83.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75824 (0x12830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:22:12 2024 GMT
Not After : Dec 12 21:22:12 2027 GMT
Subject: CN=676dc908-d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:91:d8:14:13:17:b1:35:5b:79:7e:c7:08:
a7:68:b0:dd:68:62:60:a7:7c:51:d5:64:b5:20:d0:
38:1c:ea:6b:ed:a5:eb:61:b1:ea:b2:cd:c7:21:18:
8c:f8:d7:d7:2d:a4:e4:49:bd:29:c5:15:38:50:b5:
4b:b9:14:3b:df:e3:ef:81:90:19:a0:4d:8b:7b:c6:
75:7a:ed:28:73:42:1b:ad:0e:40:6a:85:ec:4e:a8:
07:76:d8:f1:b2:16:c7:33:53:c3:90:ed:09:9c:30:
48:c9:dd:b2:b1:9e:ae:a9:3d:6c:77:aa:3a:9a:e2:
fa:c9:4f:50:22:3d:f2:56:fd:c8:12:b9:86:3d:24:
7c:00:cf:ef:7d:a7:21:e6:a6:bb:99:5f:72:99:5e:
01:4a:3b:b9:e0:b1:93:33:c5:73:37:26:4d:11:6c:
98:b4:98:1b:7e:b7:c5:17:8c:f6:a2:41:5d:7c:78:
78:9e:d9:90:5d:42:23:36:0c:d4:b2:b7:bd:84:fc:
3c:41:37:1c:96:77:70:4a:b1:83:de:74:7f:7f:90:
83:67:dc:8a:9a:07:32:ae:3c:d5:44:51:e0:a3:c9:
6c:fd:f8:b8:c6:2e:4e:e8:cf:c5:38:a3:16:2c:46:
16:d3:ef:aa:3c:e1:18:99:b5:db:de:e7:c7:0e:27:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:50:D5:B2:00:75:EA:BC:23:89:65:8E:26:ED:4E:BF:8D:D7:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AFDFD96C3CF11EFB873F8B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.174.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f6:c2:fb:51:3a:dc:5c:67:39:74:e5:57:1c:3c:54:37:25:
e7:88:df:cc:fd:66:6a:79:fa:9f:e4:71:24:38:34:db:c0:8a:
f7:55:92:13:c2:4d:f9:a1:2f:4e:36:9f:54:2e:ec:9a:e9:76:
21:ae:be:9b:9c:ab:17:f8:fe:e0:9f:c2:f3:97:d5:47:be:44:
94:cf:ce:6b:6a:a9:6d:8d:1c:88:8e:9c:d0:41:b7:49:73:25:
dd:ee:58:63:6e:75:25:44:e4:43:dc:6a:40:48:6f:08:cb:06:
e7:9f:eb:5c:cd:49:2b:ae:93:fc:c4:18:6a:1c:5a:c9:98:13:
3a:63:6e:81:68:09:67:5d:bb:21:f2:a2:1d:9e:21:84:77:ae:
22:84:a4:bf:9b:f0:26:1b:ee:06:8a:97:8d:01:57:64:82:fa:
4e:af:b8:fc:00:8e:bb:f0:2e:98:20:95:b7:d2:c5:75:f5:74:
27:50:e5:b6:04:56:8f:2b:36:53:9c:ea:2a:57:cf:d6:62:4e:
b5:36:a4:21:de:92:74:bf:e0:24:ea:83:b6:f4:7b:5e:85:8d:
0f:e1:59:55:3c:94:aa:b6:cf:d8:11:18:34:a5:fd:0b:9e:37:
65:af:ed:9d:86:6d:68:2f:ea:27:4b:1c:16:5e:48:75:95:0d:
c9:8c:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:37 2025 by rpki-client