Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9173D714C41811EFA80ADA9C762E951A.roa
File: 9173D714C41811EFA80ADA9C762E951A.roa (raw, json)
Hash identifier: lF04vDSgqK50J8teuFU/buLYyfcPS1lyRxQzj5Oj0oI=
Subject key identifier: D0:7B:05:5E:79:E8:3D:57:A0:A4:D6:D0:5E:1E:F5:ED:FF:6A:2E:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012975
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9173D714C41811EFA80ADA9C762E951A.roa
Signing time: Fri 27 Dec 2024 06:05:27 +0000
ROA not before: Fri 27 Dec 2024 06:05:23 +0000
ROA not after: Sun 12 Dec 2027 06:05:23 +0000
asID: 17561
IP address blocks: 154.197.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76149 (0x12975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:05:23 2024 GMT
Not After : Dec 12 06:05:23 2027 GMT
Subject: CN=676e43a7-3169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:26:40:2c:ee:e7:55:32:8e:a4:82:88:10:6e:
bf:0d:e8:6d:44:ea:40:ea:58:9c:11:ab:f9:8e:22:
62:04:ec:76:16:c9:0a:11:0c:02:38:8f:4b:b9:b2:
cb:73:39:55:1c:c6:60:0f:aa:52:93:2a:a6:d3:17:
8e:ca:2b:e0:9a:32:bb:99:54:54:66:70:e1:50:a1:
fa:52:79:25:66:c7:39:e8:c0:6c:3a:c1:ee:c3:f2:
a1:ae:e9:01:0f:85:ef:b3:a7:68:bd:2a:56:69:28:
f7:58:41:88:68:15:5c:d6:a1:a9:a5:10:a2:be:67:
9f:d6:15:56:9e:10:67:c3:41:fa:a1:6d:cb:dc:04:
ba:46:d2:37:1b:ce:4a:e8:ae:82:52:31:f2:45:be:
a6:ac:eb:fe:4f:75:b5:e5:7e:42:80:68:80:13:32:
d9:31:64:00:a2:78:c9:9f:7a:27:4e:ad:24:15:66:
f9:af:70:15:f5:32:00:2a:f0:19:e2:51:7d:f2:e8:
01:e9:9d:0b:49:8a:2c:46:78:3c:60:6b:a9:51:f5:
63:f8:26:0a:3c:06:fe:df:bd:64:d9:1e:e0:35:61:
fb:15:82:62:61:e3:2a:04:75:f8:78:3b:3c:b5:01:
7d:99:c6:0a:20:5f:8c:57:40:84:6e:30:e6:32:b3:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:05:5E:79:E8:3D:57:A0:A4:D6:D0:5E:1E:F5:ED:FF:6A:2E:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9173D714C41811EFA80ADA9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:05:93:88:78:16:02:59:86:d5:2a:33:1d:e1:ef:45:fd:9f:
b8:38:3c:cc:ec:59:27:83:44:8f:b7:0d:95:9f:be:18:97:a5:
b2:cf:42:04:f0:08:64:e3:ac:e7:ad:b1:e5:48:57:dc:c2:7f:
fc:6e:f7:31:f5:25:49:49:5c:a8:06:b3:40:c2:f9:61:e8:3f:
90:7f:4f:9c:86:ac:5c:dc:ba:1a:53:43:1a:43:e9:e8:e8:d7:
63:be:a1:38:a1:13:e4:25:38:bd:35:96:77:de:3a:83:82:ce:
8c:e5:ab:05:50:e4:48:73:b2:60:88:a7:e8:31:f9:96:53:39:
ba:b0:82:9b:ba:87:35:b9:0d:fe:dd:a2:fb:cb:99:76:51:98:
86:08:20:ad:dc:31:2f:68:14:de:dd:c4:73:16:fb:a8:b4:c4:
76:55:30:91:9b:54:0f:9b:0e:7e:42:4d:54:27:09:e4:c1:db:
4e:84:29:50:55:be:2c:0a:a0:dc:d8:b0:a6:be:b7:f2:d9:d6:
cb:a3:22:ee:f1:2c:39:37:4a:e6:d6:fc:05:02:63:be:18:bd:
b7:c8:1e:a5:9c:52:b0:de:52:27:fd:26:59:7c:25:c3:ca:7c:
6a:b4:39:e7:aa:31:c4:c7:e1:cf:db:cb:05:5b:ae:d7:99:94:
6a:3b:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:41 2025 by rpki-client