Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D6F6F6C42C11EFB4B8669A762E951A.roa
File: 86D6F6F6C42C11EFB4B8669A762E951A.roa (raw, json)
Hash identifier: irW8Rfz7LOXQhUJW7tE3vDkXY99f+cdYnufjl6y1xtw=
Subject key identifier: 4E:E5:18:28:40:D3:AA:04:E2:92:54:56:FF:96:F1:5C:90:B9:FC:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D6F6F6C42C11EFB4B8669A762E951A.roa
Signing time: Fri 27 Dec 2024 08:28:19 +0000
ROA not before: Fri 27 Dec 2024 08:28:15 +0000
ROA not after: Sun 12 Dec 2027 08:28:15 +0000
asID: 17561
IP address blocks: 154.202.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76337 (0x12a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:28:15 2024 GMT
Not After : Dec 12 08:28:15 2027 GMT
Subject: CN=676e6523-28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:c6:18:5c:91:07:c0:97:94:9b:b1:c0:08:
b9:51:16:4d:4a:62:31:72:bb:27:8a:3a:a3:91:39:
bd:7d:c1:2c:a9:f8:1d:66:b0:71:5a:c2:81:24:db:
e4:39:c1:3b:a1:15:ad:8a:6a:8c:f3:bf:62:4b:b1:
9b:0b:b7:ed:ca:85:6d:db:cc:50:99:ac:ce:e0:9b:
11:56:18:fd:f3:ca:54:e0:2d:79:57:2c:a9:2a:29:
f1:ff:de:f7:64:28:a9:4d:86:45:a8:8f:2b:55:4c:
d9:42:93:a5:4b:47:c1:32:42:2a:d3:27:ae:37:5d:
82:d3:2f:24:66:4f:a9:94:8a:1f:87:2d:64:da:76:
cf:72:eb:cd:a9:59:1b:10:04:be:82:d7:61:c8:6f:
ae:92:04:41:78:7b:2a:52:6a:04:15:01:92:fd:a3:
a8:9a:4e:b4:da:10:9a:ba:c4:33:f7:2c:0b:25:f5:
de:c1:e3:96:3a:ce:0c:40:c3:f1:33:64:5a:1d:01:
f2:70:a3:33:c1:25:b4:a3:20:ed:84:5e:0a:a7:4b:
6b:4f:ff:df:f6:95:0d:8c:f0:1b:70:2d:39:0c:8c:
11:56:19:83:0b:6a:4d:c1:15:45:da:f8:50:99:0b:
8f:3a:6e:8f:25:a1:32:ed:fa:8e:38:2e:50:82:88:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:18:28:40:D3:AA:04:E2:92:54:56:FF:96:F1:5C:90:B9:FC:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86D6F6F6C42C11EFB4B8669A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ef:ab:d1:5b:87:eb:ef:57:09:2d:57:00:ab:3c:55:f0:a7:
64:e2:8b:44:64:43:d7:df:90:f6:01:60:65:4c:f2:28:1f:4d:
ed:5a:47:9f:eb:cc:60:0c:4e:5f:fe:67:97:0c:bb:81:3b:02:
d0:50:8b:a9:4e:ed:bf:78:b1:70:5f:5b:85:17:4e:17:3c:d8:
e3:d9:e0:31:a2:63:33:09:3b:c3:82:98:18:ef:74:eb:04:02:
50:22:55:34:2f:e6:b4:a5:f8:a0:fa:5d:94:e5:97:6a:00:68:
c4:25:2a:c7:22:dd:b8:7e:52:0c:79:a8:04:81:bb:b2:e2:5d:
0b:9d:8a:0a:a0:cf:d6:70:9a:69:06:d3:86:e4:83:e4:d3:ec:
87:9d:49:49:10:be:70:c2:45:ce:08:a1:4d:0a:2a:f1:f1:d0:
84:92:c2:6c:ce:95:6d:99:bc:d2:e0:55:f9:f8:c1:7c:87:22:
87:c3:8f:60:53:01:ac:86:71:e3:93:cf:b7:2d:d8:64:ae:2e:
d6:78:4d:78:75:31:00:55:84:de:d1:e3:11:ca:bb:61:15:e6:
55:4b:f1:d8:a1:a7:b9:9c:32:32:d1:02:d2:c8:0e:19:bc:0d:
d3:76:6a:60:dc:44:ba:89:b1:05:02:5a:1d:48:c3:0e:21:bc:
40:53:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:46 2025 by rpki-client