Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890042D4C54411EFA041CE7F762E951A.roa
File: 890042D4C54411EFA041CE7F762E951A.roa (raw, json)
Hash identifier: 8c4BQCrsf4T+YrV1cf70HYyEmPmydci2i/J1U9BQZgc=
Subject key identifier: 29:BE:9B:57:62:EE:FE:59:53:F2:64:A9:40:DE:80:17:3E:5C:4B:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890042D4C54411EFA041CE7F762E951A.roa
Signing time: Sat 28 Dec 2024 17:52:42 +0000
ROA not before: Sat 28 Dec 2024 17:52:38 +0000
ROA not after: Sun 12 Dec 2027 17:52:38 +0000
asID: 17561
IP address blocks: 154.208.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76957 (0x12c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:52:38 2024 GMT
Not After : Dec 12 17:52:38 2027 GMT
Subject: CN=67703aea-e073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:87:6a:81:f0:07:b3:8e:d8:d7:70:a4:b6:
9f:2c:05:0a:79:0f:69:59:31:c9:ba:ff:e3:54:8a:
a7:17:ae:35:e2:08:a1:fd:12:36:70:a5:4a:bf:8c:
aa:06:89:9e:0d:66:15:27:c1:d5:e3:36:14:08:f9:
e0:5b:65:d8:0e:7d:56:a3:05:4c:43:aa:8b:68:95:
ec:1f:6c:d7:af:21:34:20:9f:5c:5e:03:6d:cb:23:
db:a3:41:de:6f:25:8c:e0:14:0d:96:90:4d:6b:d0:
87:4a:e2:c5:85:bc:eb:7a:8e:8a:23:cb:5f:b2:ec:
bb:be:11:f5:2f:0c:b9:6b:74:25:fc:8a:6c:da:0c:
20:bd:a1:dd:a5:42:70:62:e4:b7:6a:22:63:8f:31:
13:51:f0:8f:8d:6f:af:75:b8:bd:04:e5:34:64:59:
32:c6:c2:db:9b:28:58:b4:6b:ee:7a:16:87:1e:f2:
20:b7:be:72:d9:2e:b8:f5:7b:d3:44:02:50:4a:6e:
42:4a:ca:d4:f3:49:30:49:a1:4d:60:0e:3b:f6:87:
d5:62:bb:08:86:8c:37:b4:e8:98:85:30:45:c0:37:
99:03:05:03:d1:68:a5:f7:29:ac:34:c9:62:40:c1:
a2:2b:24:4e:92:48:35:43:d5:f6:11:9b:81:f8:ac:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BE:9B:57:62:EE:FE:59:53:F2:64:A9:40:DE:80:17:3E:5C:4B:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890042D4C54411EFA041CE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a3:66:08:63:43:c5:39:cd:5b:e0:3c:de:81:58:85:ad:2c:
45:74:ba:07:f7:12:86:b2:70:b3:cc:a7:f4:bd:8b:24:4c:7f:
35:2f:40:65:ed:cd:02:df:d8:1d:62:dc:f2:b2:bf:cc:91:e2:
32:57:b1:b7:4f:93:69:69:11:81:5a:0b:6a:b9:f8:cc:ca:16:
40:9b:cc:8e:31:44:59:05:b3:98:54:cb:2d:3d:46:95:1a:e4:
b4:87:9e:56:5a:bb:bd:e9:a5:f6:35:f5:45:12:c3:4b:b1:e5:
85:be:0c:a9:9c:68:e1:20:39:84:20:07:a2:ba:c8:9f:25:63:
ce:68:a8:b3:08:81:08:e8:df:92:cd:5b:18:3e:dd:b0:d1:af:
65:ec:74:a0:8b:db:58:81:ce:34:14:7a:0a:50:9f:b6:37:85:
70:41:1b:ab:b9:19:34:98:71:15:ec:ae:84:e1:9a:ca:1b:f5:
25:6a:06:d6:b7:34:11:85:72:00:12:7a:2b:ab:b6:fe:d7:c5:
e1:f7:3f:0b:e5:f5:6a:6a:92:3c:53:f4:65:9b:1a:75:b4:83:
1f:95:d6:ac:f2:aa:d7:4f:21:ea:59:e5:11:58:45:a5:33:74:
e4:ec:fe:c5:20:ca:2c:9b:30:96:2c:21:89:82:a3:78:ae:6a:
c3:5d:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:32 2025 by rpki-client