Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94B44496C1CE11EFA36DFE79762E951A.roa
File: 94B44496C1CE11EFA36DFE79762E951A.roa (raw, json)
Hash identifier: VaHIuiZNhpIAK5cPCx0P97SKcjK/PGVmfppKXy8HM9k=
Subject key identifier: 18:35:56:AE:45:B1:1B:2B:9F:2B:50:36:12:36:A7:89:B2:9A:03:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012285
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94B44496C1CE11EFA36DFE79762E951A.roa
Signing time: Tue 24 Dec 2024 08:10:47 +0000
ROA not before: Tue 24 Dec 2024 08:10:44 +0000
ROA not after: Wed 10 Dec 2025 08:10:44 +0000
asID: 984
IP address blocks: 154.193.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74373 (0x12285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:10:44 2024 GMT
Not After : Dec 10 08:10:44 2025 GMT
Subject: CN=676a6c87-d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:99:55:7f:03:d0:23:55:70:f4:13:d4:9b:
ef:12:1f:ac:6b:c6:4f:a1:fd:ad:d2:e1:84:de:28:
bc:22:66:77:11:df:c4:1f:89:26:8b:67:55:b1:1c:
7a:aa:12:f3:47:81:64:e9:84:91:e8:44:88:cc:e5:
6c:c1:96:a0:c8:54:27:12:20:2e:2e:b0:bc:4e:77:
4c:a9:19:11:82:35:88:ca:3c:42:1f:91:0a:1d:ce:
87:20:b6:9a:6d:ec:38:3c:55:9e:f8:47:b1:b3:5a:
40:6e:6f:61:f8:b0:49:a5:d4:78:10:77:3e:42:ba:
97:41:1b:7c:5d:36:56:6b:36:00:ec:66:1f:3c:ff:
d2:f4:e2:11:1b:f4:af:0f:ed:60:48:13:78:fa:c9:
5f:a5:b7:5a:84:4f:1f:e3:4d:9d:cf:7c:d4:d6:b8:
28:77:94:4e:a6:a0:66:76:65:0f:3f:b4:d2:54:42:
3a:8a:ec:e5:e9:35:1b:20:63:88:a3:64:c2:f0:48:
0c:fb:c1:cf:89:9c:61:0c:b4:30:23:45:9c:97:0f:
85:c6:63:38:f3:60:f5:a2:fb:15:1d:5b:4a:a4:40:
70:2c:e5:f3:54:be:d9:a0:92:61:fc:28:8b:e0:15:
b7:68:e1:a6:2c:56:d0:c1:3a:92:0a:3d:49:70:68:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:56:AE:45:B1:1B:2B:9F:2B:50:36:12:36:A7:89:B2:9A:03:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94B44496C1CE11EFA36DFE79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.226.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:15:8c:84:40:d9:14:8b:80:ba:da:3f:81:d8:20:d0:bc:ce:
1a:dd:72:0e:e2:0a:b3:f9:39:26:25:b2:95:95:e7:cc:c6:91:
b6:02:c3:45:92:ec:f3:54:21:ff:39:1b:42:52:55:25:24:22:
29:19:2a:96:7a:ef:e2:ae:53:71:7e:24:b3:6e:45:19:05:74:
b4:75:ad:cf:3c:55:5e:c1:ca:9a:13:fd:a5:8e:2b:4d:68:89:
71:e4:80:2e:c3:5b:67:35:f2:b0:e2:62:35:02:06:7a:c4:1e:
a7:86:39:29:ba:43:eb:60:03:45:4f:7f:f6:ef:bc:88:ad:b3:
62:37:db:e2:68:d0:04:67:2d:9c:ba:21:59:60:25:23:fe:d7:
a6:c9:36:a0:61:ee:36:82:b1:1d:57:2d:fe:e6:be:79:9d:94:
06:bc:90:23:68:15:eb:96:d6:c9:07:b5:1f:64:3c:58:05:f1:
7e:22:a7:8f:79:e2:c1:80:09:ce:56:af:72:48:ab:94:12:b4:
f0:32:dd:e4:03:da:30:ec:c2:f8:85:6b:93:1f:7a:39:8f:ac:
45:63:d4:21:b6:28:a0:a6:8c:30:ea:da:d9:0e:54:af:b5:d5:
a8:05:a9:fd:b6:c1:6e:f9:e8:70:db:fe:1d:7e:90:d8:23:ac:
cb:db:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:27 2025 by rpki-client