Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95335CD4C41E11EFB371D943762E951A.roa
File: 95335CD4C41E11EFB371D943762E951A.roa (raw, json)
Hash identifier: iESvRCSeAQMiBjrgijikP7QgzlXappAv/GeTF6Nw2ck=
Subject key identifier: CC:6A:AA:B1:73:78:5D:AF:C5:47:23:01:9A:D3:7E:56:30:4C:2C:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95335CD4C41E11EFB371D943762E951A.roa
Signing time: Fri 27 Dec 2024 06:48:30 +0000
ROA not before: Fri 27 Dec 2024 06:48:27 +0000
ROA not after: Sun 12 Dec 2027 06:48:27 +0000
asID: 17561
IP address blocks: 154.201.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76199 (0x129a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:48:27 2024 GMT
Not After : Dec 12 06:48:27 2027 GMT
Subject: CN=676e4dbe-52f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:68:0d:4f:50:f9:5b:7c:b2:f0:65:b4:c3:
0a:d7:98:97:fd:2e:ca:b0:93:9e:9a:db:27:aa:ce:
04:d6:7f:c6:b4:49:f2:49:ae:d1:52:90:e1:1b:af:
df:c0:53:a2:a2:21:5c:03:2e:5d:d4:78:da:b6:d5:
5f:13:41:d4:a6:87:f0:75:c7:29:71:57:cf:0f:7b:
b3:60:c6:5d:8b:a4:62:85:91:dc:3a:11:d2:6d:69:
d9:2c:4e:5d:84:19:dc:8e:3e:31:54:b5:5f:d1:fb:
de:3d:c4:b2:56:b5:d7:86:12:45:6d:f3:c5:c1:c9:
d9:21:78:e3:ed:11:69:0e:05:3d:ba:8c:03:cc:46:
7c:17:61:96:6b:b8:56:ce:72:80:83:f1:14:13:13:
b1:3a:01:12:15:98:e6:be:de:16:04:73:1d:2b:68:
76:ad:e7:96:07:87:42:4d:aa:8c:be:d7:5d:e2:13:
3d:ad:a0:5c:db:b6:af:07:83:b1:fb:91:7c:08:0a:
8c:d5:7e:84:c4:57:04:e5:ba:a7:90:3f:a5:8b:68:
9e:99:f0:7b:13:52:88:2f:f4:d2:e5:ec:57:3a:39:
c3:e3:55:7f:25:62:9a:a7:1d:5b:d6:71:c3:74:d2:
b1:2f:e1:38:09:87:d2:8f:20:df:b7:0c:05:89:16:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:AA:B1:73:78:5D:AF:C5:47:23:01:9A:D3:7E:56:30:4C:2C:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95335CD4C41E11EFB371D943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:9d:0a:c7:c1:d1:f3:ba:84:c8:aa:8c:4f:95:4f:64:79:b3:
12:d6:4d:e5:73:e5:9b:01:35:8d:6f:b9:31:b5:80:59:dc:d4:
29:c6:05:d5:5e:be:94:c6:8e:ad:d4:70:f7:ca:63:73:20:f6:
94:85:ee:97:1a:12:a8:97:95:f6:11:65:b7:a7:de:ee:62:5f:
2d:91:4b:0c:f8:af:fd:48:c6:c7:9d:06:16:96:83:3f:df:9f:
a3:ce:fd:e0:b2:ff:19:c7:30:f3:f9:27:06:73:65:83:ab:5f:
89:34:14:53:ad:f1:2c:1b:c3:7e:c9:97:e0:90:bb:1d:a8:fa:
52:1a:95:a8:fd:88:7d:b0:15:24:fa:a5:8b:cc:4d:fb:30:d3:
63:92:7a:31:33:3a:27:cc:65:03:a1:da:cd:5f:11:8e:d6:65:
d7:e3:23:5a:7d:c5:dd:04:c8:77:00:97:f2:8e:0f:bf:9f:64:
22:56:67:56:c0:78:d6:40:9c:6b:ec:a1:df:63:c2:a1:e5:0a:
c7:5b:0e:bf:ea:bc:7b:c5:4c:e8:a2:57:d3:48:94:54:48:23:
ef:2f:eb:0f:a2:d2:39:65:41:02:0a:56:e4:ee:02:2a:94:f3:
d9:7f:26:c5:aa:28:6e:56:57:80:51:b2:38:9a:ff:17:67:95:
7d:5b:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:39 2025 by rpki-client