Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B6CF12C41711EFA3A56596762E951A.roa
File: 95B6CF12C41711EFA3A56596762E951A.roa (raw, json)
Hash identifier: jGCyiMnzymbkqHs+zaNMNOFlSs99Hq7rm323BmrV1Ig=
Subject key identifier: 8A:8F:BB:FF:33:EB:B3:61:C7:47:D1:D7:6C:29:3A:17:67:00:20:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01296B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B6CF12C41711EFA3A56596762E951A.roa
Signing time: Fri 27 Dec 2024 05:58:25 +0000
ROA not before: Fri 27 Dec 2024 05:58:21 +0000
ROA not after: Sun 12 Dec 2027 05:58:21 +0000
asID: 17561
IP address blocks: 154.197.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76139 (0x1296b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:58:21 2024 GMT
Not After : Dec 12 05:58:21 2027 GMT
Subject: CN=676e4201-732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:15:84:92:ab:e9:aa:8c:f6:49:26:50:f2:
8f:68:e3:98:3c:d8:17:6e:09:c2:08:db:23:31:74:
4e:29:4c:3b:2e:03:2c:26:9b:b4:32:dd:04:5e:d8:
50:24:00:19:2b:69:01:7c:20:84:7a:83:2d:d3:f8:
f6:4f:17:ac:3a:cf:58:b0:d3:9a:15:ab:4f:3d:8a:
d3:c5:9d:05:de:32:64:ce:0d:23:4c:c7:43:86:67:
01:15:b0:ab:9f:5b:32:6a:f1:47:ba:61:78:0f:68:
57:62:86:b6:43:ac:a0:bc:44:e9:cc:7d:e1:fe:b8:
24:7a:5d:47:1c:5c:6b:50:34:1a:5a:ff:d5:76:55:
01:93:d1:2d:05:9e:e6:80:05:da:55:01:f5:67:30:
a8:89:4f:44:ac:64:6d:89:15:df:84:39:d4:b9:df:
52:05:4f:cb:6b:42:39:9b:2a:51:6d:4a:4d:d3:55:
01:6b:0b:8f:3c:6a:f2:b2:35:74:e6:7e:e5:c0:34:
15:f0:d1:52:7e:42:28:de:82:44:0e:4a:60:e0:41:
02:c0:49:3b:fe:1e:a0:31:bd:80:13:3f:1e:6f:04:
38:db:c0:89:54:55:96:e4:a9:b9:86:ff:95:bb:eb:
2a:c0:34:82:6b:12:a8:e0:3f:31:b2:69:f3:c2:e4:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8F:BB:FF:33:EB:B3:61:C7:47:D1:D7:6C:29:3A:17:67:00:20:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95B6CF12C41711EFA3A56596762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.98.0/24
Signature Algorithm: sha256WithRSAEncryption
34:83:e4:25:48:4d:bf:59:5c:28:85:97:f9:b5:85:06:5e:47:
d9:b9:33:4e:09:d5:7d:36:9b:5f:69:78:69:69:93:1e:f0:78:
22:f4:88:c6:20:6f:5f:ef:e2:4c:3d:f5:87:11:8c:c3:c0:5d:
ea:f3:32:02:97:70:6e:17:f0:3d:36:85:ad:f1:e9:41:31:75:
19:28:72:f1:2d:08:f3:cb:30:bc:2f:e1:b4:17:b9:6c:83:12:
8b:3a:91:ef:91:d1:1f:c3:5b:5d:77:af:f8:f1:b4:fb:79:08:
4c:1d:57:f2:5b:1a:f5:5e:3d:eb:13:b4:dd:1a:54:16:b2:ec:
1a:52:57:f7:6d:5c:b8:20:1c:be:7e:15:6f:a7:7a:9f:70:e6:
9e:8d:be:62:15:79:f6:40:4d:aa:3e:e8:2d:ca:7f:fe:b5:3e:
7d:b4:8e:ed:8f:0e:47:2c:e4:55:94:7e:a2:11:ba:fe:b5:9d:
4b:51:1f:ac:99:e2:d4:e0:cd:66:55:2e:58:f9:e5:e7:74:86:
a2:5f:4f:ec:2c:1b:1b:c6:22:f4:d9:44:8c:36:1c:90:a1:a3:
6b:ae:c3:53:61:71:b7:dc:ba:b0:0e:de:76:f3:d8:f1:aa:f8:
03:65:09:31:89:01:69:ab:73:d7:ff:04:81:8b:ea:06:31:9b:
af:44:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:51 2025 by rpki-client