Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81447C7EC35311EF912EC2B0762E951A.roa
File: 81447C7EC35311EF912EC2B0762E951A.roa (raw, json)
Hash identifier: ovIaHk/aWWejA0kN8AFlPIICOfFUbJVkWIEha3dm7R0=
Subject key identifier: 36:6B:83:23:D2:6C:60:49:BD:7E:37:77:6F:1A:51:CF:71:43:A4:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81447C7EC35311EF912EC2B0762E951A.roa
Signing time: Thu 26 Dec 2024 06:34:49 +0000
ROA not before: Thu 26 Dec 2024 06:34:45 +0000
ROA not after: Sun 12 Dec 2027 06:34:45 +0000
asID: 17561
IP address blocks: 154.88.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75203 (0x125c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:34:45 2024 GMT
Not After : Dec 12 06:34:45 2027 GMT
Subject: CN=676cf909-93d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:08:5e:c5:03:a3:03:cd:39:92:8c:93:8e:
5d:2e:1e:be:5d:93:e1:c4:f0:a5:58:59:25:32:79:
ee:38:94:b3:c0:2e:49:dc:0c:13:5b:8d:fd:1f:67:
f2:5f:60:3b:b3:2e:84:c9:57:4c:95:76:25:d2:80:
d5:c0:e7:bd:af:58:cf:fa:77:df:6b:76:94:52:45:
df:17:34:58:aa:44:fb:87:a2:1e:af:87:f4:3f:e2:
f0:07:a1:53:56:c3:b1:67:9f:3b:0b:61:22:11:6c:
d7:6d:3c:6d:d3:be:0e:5d:10:ef:dc:e1:4d:7b:d5:
64:70:1a:d0:d2:b1:07:58:8e:d2:93:06:08:04:e1:
ec:e4:83:7e:81:33:8d:70:bd:c3:c8:d5:b1:c3:77:
0b:82:89:25:84:69:ac:c5:a5:b5:07:a4:d2:cd:82:
93:1d:f1:12:39:5f:91:f7:59:f3:16:1e:15:c2:af:
5a:e2:75:d6:c9:dd:3a:c3:34:68:b6:66:4d:0b:fb:
24:bb:72:d1:22:ba:4d:e0:e1:cd:28:7b:5b:d9:03:
ce:30:80:6c:01:20:a7:f3:cb:29:b1:54:5d:96:99:
92:89:f3:c7:0c:74:bd:97:01:5c:fd:c6:1c:01:5e:
19:db:2e:90:7a:84:04:fc:08:f6:1f:eb:30:fc:e1:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:83:23:D2:6C:60:49:BD:7E:37:77:6F:1A:51:CF:71:43:A4:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81447C7EC35311EF912EC2B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.37.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:69:4e:ee:b0:a2:45:0c:e7:94:07:89:3b:3c:b5:61:38:
95:35:cf:ef:87:12:49:57:c0:da:37:2d:5c:3b:95:dc:02:98:
e4:22:73:8d:ac:b2:b8:83:82:de:92:7b:6d:3a:2a:9e:29:af:
ec:d9:ab:74:65:45:e3:c8:36:1e:08:30:47:70:67:29:2a:0a:
46:b2:2f:25:39:f3:9c:7e:92:2d:48:2f:c4:72:dc:b2:cc:bc:
da:5d:4f:8c:f3:41:f4:a1:bf:dd:a8:a0:1f:4c:f5:92:a1:ec:
d4:02:46:59:9c:16:31:7a:0a:2b:bb:4c:11:03:c3:d0:00:b4:
a0:f2:9a:71:47:96:24:71:bd:ad:ea:df:01:d3:23:57:ed:2b:
69:b1:d3:b4:4a:03:ef:1c:6b:7b:82:c3:e1:14:b9:4f:55:8c:
4f:05:f7:30:35:d2:ac:b9:f6:fa:65:bf:da:12:6f:88:51:4f:
be:a0:a3:bd:73:d3:2d:53:9f:97:1a:8c:fa:3e:4c:7d:04:5b:
b0:d6:bb:39:94:6c:fb:d0:e0:75:f4:a9:8f:f3:51:05:74:88:
1d:f4:7f:32:f5:21:03:f2:91:f7:db:28:ad:d8:db:bb:82:2d:
04:b7:a2:d2:75:b2:f0:24:19:d3:72:6c:00:f5:00:22:fe:ff:
b7:25:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:49 2025 by rpki-client