Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F33B784C36511EFB97E86A1762E951A.roa
File: 8F33B784C36511EFB97E86A1762E951A.roa (raw, json)
Hash identifier: Qfh3xyvRXOgPS/g0Dvbjmi4YdggNwj/4hI+w3CLUplU=
Subject key identifier: 78:76:32:DD:18:96:B6:11:82:1C:F5:CA:FD:F0:91:F5:2A:DA:30:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F33B784C36511EFB97E86A1762E951A.roa
Signing time: Thu 26 Dec 2024 08:44:03 +0000
ROA not before: Thu 26 Dec 2024 08:44:00 +0000
ROA not after: Fri 12 Dec 2025 08:44:00 +0000
asID: 984
IP address blocks: 154.94.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75436 (0x126ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:44:00 2024 GMT
Not After : Dec 12 08:44:00 2025 GMT
Subject: CN=676d1753-85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:5c:23:d5:cc:b1:66:81:7a:79:89:4a:c6:
02:26:75:99:a5:45:fd:a5:fa:5b:da:13:5f:95:fc:
a0:b9:c1:04:3f:e9:da:c7:97:98:be:bf:a2:b8:19:
36:d1:44:4d:58:1b:23:17:7b:1c:d3:51:cd:22:12:
a5:d7:49:a1:a4:f4:95:47:fe:b0:71:70:29:b4:5c:
86:a0:46:8f:17:ee:9a:d0:b1:6a:97:90:a2:f6:54:
58:2b:54:de:23:3f:99:f1:32:6d:96:dc:90:7e:94:
f9:15:6a:31:7a:5c:26:7a:d7:b9:8b:19:ba:8e:f9:
89:50:25:7e:18:1a:f5:1a:9d:82:92:65:ff:38:44:
fb:67:2e:15:43:38:08:1f:6c:48:b0:a6:63:8c:c3:
a5:fa:91:0b:87:eb:fb:7f:ab:cb:2b:6c:60:c5:63:
4d:27:6e:a4:28:87:14:a4:47:10:b0:34:18:e8:7a:
6e:76:25:72:2e:ca:1f:53:ad:0a:f1:de:6e:0d:22:
e1:88:f7:33:95:32:95:79:46:ed:91:91:04:93:43:
6e:e0:09:2c:06:9b:45:a9:b4:79:d9:71:5f:69:12:
fd:de:f5:e1:91:83:9a:5b:85:81:f2:d5:1c:f2:07:
9d:d9:3d:58:7d:8e:fa:d8:27:80:ab:64:54:bd:cb:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:32:DD:18:96:B6:11:82:1C:F5:CA:FD:F0:91:F5:2A:DA:30:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F33B784C36511EFB97E86A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f6:03:81:4c:f7:cc:50:18:61:cf:d8:ac:d0:b4:99:64:78:
e8:4d:4d:c3:21:de:76:9b:6f:7e:d6:68:75:55:9c:eb:92:fd:
80:37:07:65:3c:4a:88:d8:40:67:4d:08:fc:e0:2f:22:b0:1c:
4a:9d:2f:86:5d:53:f1:f3:c6:8d:f6:a3:a5:52:cf:d8:74:14:
18:38:f4:d4:82:51:aa:6c:05:99:54:fb:67:5b:38:44:ab:c8:
6c:66:9f:b8:64:65:d1:07:79:1d:ba:be:0c:b2:3e:b2:df:80:
60:14:db:37:20:06:11:63:9d:33:ae:7f:2e:4e:7f:4e:83:ba:
38:49:65:31:55:7b:c1:46:94:23:81:e3:67:1b:20:21:8d:f1:
19:69:38:d0:b8:26:f2:c3:54:8d:ba:e8:04:ec:43:74:20:cd:
02:ee:62:10:ae:8c:1e:b7:89:ff:fb:d7:9c:1b:bf:89:47:f3:
ee:26:72:d6:a1:13:98:a8:57:22:b4:0b:1c:a0:5f:55:c9:a3:
5e:66:7d:e4:c2:81:8b:34:09:d7:9d:44:d2:5f:e1:6f:b5:bb:
28:2b:37:61:4b:5a:9e:ea:6a:1d:cb:71:ba:03:7f:2c:d4:5d:
a1:0e:c9:75:eb:47:9a:1e:df:19:60:55:8c:78:ec:0a:99:5e:
e8:1f:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:08 2025 by rpki-client