Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F219CC36F11EF99D1D662762E951A.roa
File: 7C1F219CC36F11EF99D1D662762E951A.roa (raw, json)
Hash identifier: cyhO3k1+9P6Z943H2xsAZP0msVPou+1T2EDtureCRdw=
Subject key identifier: CC:7B:9C:0F:58:6C:8C:3E:0F:FA:FA:5C:79:74:3C:55:5F:75:80:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01271A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F219CC36F11EF99D1D662762E951A.roa
Signing time: Thu 26 Dec 2024 09:55:06 +0000
ROA not before: Thu 26 Dec 2024 09:55:03 +0000
ROA not after: Sun 12 Dec 2027 09:55:03 +0000
asID: 17561
IP address blocks: 154.94.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75546 (0x1271a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:55:03 2024 GMT
Not After : Dec 12 09:55:03 2027 GMT
Subject: CN=676d27fa-c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:e6:63:0d:30:80:b4:cb:bc:ff:a5:73:2b:
96:41:85:cd:95:99:96:0c:68:87:84:55:e1:49:24:
22:e2:72:af:5a:c7:82:d2:03:ae:8b:b6:3e:da:5f:
16:78:12:39:b9:b1:d9:d5:98:94:ce:71:41:63:f4:
43:b7:ac:81:73:2f:aa:1a:a5:c3:ed:06:de:0d:08:
e7:f8:22:fa:ad:9f:5f:b7:c4:38:17:95:42:c3:93:
61:1f:19:d3:79:bc:78:ce:b6:bd:16:15:9e:28:bd:
02:06:00:12:25:56:4c:3f:a3:93:16:cc:46:99:f6:
55:57:b8:0e:2e:7d:93:f2:71:6e:55:5d:1b:8a:47:
b3:26:fd:e7:38:42:e4:80:c9:36:d4:57:b7:0f:f1:
5a:a7:3a:42:83:57:99:64:82:52:eb:59:ff:44:20:
dc:6b:2e:12:c0:31:c8:aa:5b:fa:05:78:c1:8e:d6:
07:be:59:83:ea:2c:07:45:2f:a6:74:78:1f:39:b5:
f4:23:6e:d0:54:d4:1b:70:d2:ac:10:77:88:e2:d2:
02:70:b0:61:7e:01:b1:60:ab:22:e1:01:ad:6f:c8:
43:36:f6:11:a1:9d:62:0c:01:41:5a:86:07:8f:a9:
c5:f8:2c:5a:9f:6d:3b:96:82:10:2e:9a:c2:03:2c:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7B:9C:0F:58:6C:8C:3E:0F:FA:FA:5C:79:74:3C:55:5F:75:80:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F219CC36F11EF99D1D662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.164.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ca:13:1b:9d:ef:d9:6b:d1:e5:38:7e:0a:52:d7:ba:97:34:
43:2a:93:80:65:03:a8:76:5f:8a:9b:cd:a4:94:12:a2:b7:9a:
cf:cd:34:43:dc:96:41:14:0f:02:be:e4:2e:1c:35:19:2e:4f:
fa:55:58:9a:ec:87:81:0c:d8:3d:b3:be:b2:c8:a8:40:19:fa:
cf:7d:94:d7:57:4f:e2:d2:43:b3:9c:fa:21:5b:fd:b2:57:c4:
0b:ad:7e:7c:00:f9:df:85:44:b7:22:06:2e:7b:e1:e6:b6:10:
2a:f4:a0:6e:7a:9d:b3:4f:fa:ca:a2:b6:3e:91:2c:8d:f2:00:
f7:60:13:2d:8b:81:f1:ac:ad:b2:d1:77:ba:f9:73:60:f4:6b:
03:4f:52:09:87:53:04:e3:c8:7f:ed:0c:39:4d:df:2c:da:49:
97:2e:c9:9e:e8:14:75:31:d7:30:f0:e0:df:85:78:25:c8:63:
24:88:28:9b:5b:67:22:26:15:f2:73:3b:cb:ad:25:78:56:4f:
25:90:41:d5:9b:b6:d4:0a:a9:9a:97:d0:41:c7:f0:aa:ff:86:
4f:32:7d:89:e5:26:6a:8e:68:5e:35:35:6a:ed:19:51:50:ff:
4f:e8:64:23:ed:78:a0:03:61:43:6a:33:0c:d9:a8:5c:be:3b:
1e:32:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:13 2025 by rpki-client