Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96354758C93411EFB4D1FE86762E951A.roa
File: 96354758C93411EFB4D1FE86762E951A.roa (raw, json)
Hash identifier: GoEzG5C9KeTs7eeAL7pfbhQdTXLROTUU90R+UECfsuY=
Subject key identifier: EF:B9:A4:56:68:5A:4B:0A:D9:0A:62:45:4C:EA:2A:8C:A2:DB:78:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96354758C93411EFB4D1FE86762E951A.roa
Signing time: Thu 02 Jan 2025 18:08:37 +0000
ROA not before: Thu 02 Jan 2025 18:08:33 +0000
ROA not after: Mon 13 Dec 2027 18:08:33 +0000
asID: 17561
IP address blocks: 154.222.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78791 (0x133c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:08:33 2025 GMT
Not After : Dec 13 18:08:33 2027 GMT
Subject: CN=6776d625-fd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:07:8e:ed:04:f8:20:d4:97:d9:a4:bd:1c:29:
b4:ec:8a:12:36:1e:0f:82:6a:f4:a6:13:8d:72:e6:
0d:3e:c8:e3:b4:9a:cd:90:66:dd:5a:5a:66:b6:f1:
7b:74:4e:9d:e2:75:37:50:77:0a:0f:d8:79:cb:2d:
29:1f:1e:7c:18:47:e1:84:23:f9:94:0f:5b:a3:81:
83:7a:12:00:87:41:8c:3c:81:96:c8:59:6d:f0:17:
1a:14:63:5c:4a:e6:e9:2c:e5:83:7e:78:b2:f5:34:
6c:e6:22:4d:8d:4e:56:6b:80:89:e8:a3:71:f3:83:
aa:d4:14:6a:58:e1:f5:38:2b:10:dd:21:ef:c1:f7:
60:61:d0:8d:67:09:fd:f0:63:18:2b:f2:37:48:79:
84:99:38:2a:8d:52:16:7e:5d:e2:df:a9:f9:74:ee:
2a:4e:7b:91:2b:cc:ac:d2:a6:54:49:4a:fe:e2:4b:
7f:43:84:40:a5:d7:b8:ba:10:02:aa:72:5b:c1:7f:
45:1c:22:be:aa:ad:8f:fe:fc:81:f3:9d:64:5e:44:
b3:22:b1:d7:f9:55:2a:16:1d:28:92:ac:e5:cb:a5:
a9:75:18:59:b6:99:37:b9:d9:cb:eb:78:2a:3d:d8:
53:a8:05:e3:13:09:92:5d:35:c3:9d:40:09:54:50:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:A4:56:68:5A:4B:0A:D9:0A:62:45:4C:EA:2A:8C:A2:DB:78:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96354758C93411EFB4D1FE86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.178.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4c:b9:30:16:37:cd:5e:20:66:15:1c:83:98:fb:61:cd:3f:
75:7d:dc:fd:4a:14:16:91:4e:98:e1:4d:fd:5f:ac:a8:b5:45:
03:50:e2:bf:b4:e6:0f:b2:46:4e:ad:ac:77:1b:0a:01:c7:1a:
93:ba:ea:7e:52:a5:0b:75:fb:32:af:25:65:5b:08:94:4b:33:
e7:b6:4c:9c:ea:7f:12:88:36:22:0d:84:64:dd:44:ad:73:dc:
f0:ad:8f:2d:2d:8e:54:f3:73:ab:b4:24:3a:d1:7d:d2:c1:af:
3e:d7:a0:25:a2:80:7b:8e:2b:2b:5f:64:23:cf:7d:a8:6e:40:
dd:22:97:6c:b0:0e:3f:6d:5f:8b:15:d2:5e:ba:1d:0b:be:dc:
f2:37:e0:d0:78:a6:3b:f1:6e:83:15:2c:11:80:c1:d6:df:db:
85:6f:cd:9d:74:72:f8:48:71:f9:63:38:56:62:a0:c4:9d:49:
0f:be:0f:bc:8e:f3:3b:cf:bf:8d:f1:bb:36:9d:fc:60:e6:9e:
fd:d1:e5:c6:34:16:86:12:8b:a2:94:49:bc:94:e4:43:dd:7a:
f5:d4:5a:99:bc:6f:cf:cf:b4:39:f4:ce:78:da:c5:20:29:09:
3b:b4:0b:4e:05:b5:f9:93:11:60:cf:67:83:b6:a1:48:1f:9b:
fc:b8:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client