Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FBF96CAC54911EFB259C09F762E951A.roa
File: 7FBF96CAC54911EFB259C09F762E951A.roa (raw, json)
Hash identifier: Cg3eubcoRY+F4orNLu1jkUMhX7FSy4wExFuqUBDWQSE=
Subject key identifier: 73:FE:FB:2A:8C:52:B0:F5:43:9A:F7:E1:B9:C5:29:AE:9C:CF:02:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FBF96CAC54911EFB259C09F762E951A.roa
Signing time: Sat 28 Dec 2024 18:28:14 +0000
ROA not before: Sat 28 Dec 2024 18:28:10 +0000
ROA not after: Sun 12 Dec 2027 18:28:10 +0000
asID: 17561
IP address blocks: 154.209.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77003 (0x12ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:28:10 2024 GMT
Not After : Dec 12 18:28:10 2027 GMT
Subject: CN=6770433e-2463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:a9:5a:9c:50:9e:a5:a4:98:2e:77:6c:73:
06:2a:60:39:b0:ef:b1:a1:fd:6c:56:47:ea:9c:45:
22:ad:8f:69:83:2d:11:4a:a3:df:b3:e6:d7:31:92:
e1:3d:c6:c7:81:bb:9f:e0:43:22:ff:75:2b:f9:d9:
7b:0b:ad:e9:90:fe:ea:62:29:71:82:fd:53:f4:fc:
79:bb:91:a1:38:b2:13:e6:ba:7a:a6:05:b0:c5:1c:
05:cc:0c:d4:e3:4a:77:5d:62:4e:32:4c:f3:c3:b1:
67:4a:ad:1e:41:cd:2a:4c:22:0b:1f:c8:cc:3e:08:
13:77:b8:3e:18:ee:2d:e4:f1:b9:eb:f5:50:60:15:
0f:83:15:45:fd:cd:83:6b:20:88:d6:e9:6f:d9:2e:
90:48:12:e7:7a:a7:20:6f:9d:e6:27:e2:17:24:88:
9f:fa:ed:6e:55:79:df:33:d9:88:36:ee:d3:8f:dc:
90:3a:79:74:42:b4:5e:89:6c:7a:42:af:13:f9:14:
9a:cc:a4:77:1f:fc:e4:b2:2e:19:80:b3:b2:a2:c1:
2a:ed:59:b9:31:a4:9c:1b:83:df:12:a7:ec:15:ed:
f0:59:1e:92:13:f9:a6:83:71:e1:f5:b3:5c:2d:57:
c7:c2:34:82:1b:02:68:29:42:6f:c6:9c:f4:c6:2f:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:FB:2A:8C:52:B0:F5:43:9A:F7:E1:B9:C5:29:AE:9C:CF:02:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FBF96CAC54911EFB259C09F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.64.0/24
Signature Algorithm: sha256WithRSAEncryption
30:27:b0:5b:6b:5d:4f:fc:09:b7:37:76:b2:72:67:37:1e:3d:
29:54:99:38:cd:82:f0:f0:f0:40:40:8c:fd:91:9d:16:1b:2f:
71:a6:80:e7:9d:3e:04:f8:88:7f:d2:f4:1a:bd:73:61:7f:ee:
80:28:9b:af:b8:49:55:59:a9:16:a1:9a:71:55:c5:ac:c4:f6:
ed:b0:ec:49:6c:43:f6:c4:42:8d:01:98:08:c0:36:7a:1a:78:
42:18:70:e1:fc:80:22:03:b6:f7:ef:a0:3f:a4:9e:2a:3d:40:
a7:3c:4d:cd:64:09:50:36:e1:80:6b:aa:0c:13:53:db:d4:97:
14:3e:af:c4:30:70:fa:1d:40:d0:0b:f9:c0:47:90:8e:de:8a:
79:b4:ab:9c:4b:3e:94:d1:54:37:b2:37:9d:61:82:37:5f:ec:
69:e3:84:ce:64:a2:ea:9e:67:67:f6:bc:f0:1f:ca:2f:7a:8d:
4b:9e:87:80:a9:22:a6:68:9c:8e:36:9c:2d:f3:12:cb:87:e0:
a8:39:44:fe:54:09:34:93:eb:8b:85:d7:d7:4f:8c:a9:e3:47:
09:29:09:9f:37:98:09:a2:03:db:03:f7:d8:de:77:c2:ee:d4:
99:78:db:03:d0:49:83:ce:22:1e:25:d3:ab:36:32:aa:f2:79:
56:18:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:40 2025 by rpki-client