Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC1282AC54511EF89ACF687762E951A.roa
File: 9AC1282AC54511EF89ACF687762E951A.roa (raw, json)
Hash identifier: S/MC2ETT7qRyh1yiWuJrDuKfktWhpZz/hnTzDF4hw3I=
Subject key identifier: 5A:F0:AB:AF:68:F3:B6:35:CD:C4:0D:41:D3:69:7A:03:39:19:05:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC1282AC54511EF89ACF687762E951A.roa
Signing time: Sat 28 Dec 2024 18:00:21 +0000
ROA not before: Sat 28 Dec 2024 18:00:18 +0000
ROA not after: Sun 12 Dec 2027 18:00:18 +0000
asID: 17561
IP address blocks: 154.208.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76967 (0x12ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:00:18 2024 GMT
Not After : Dec 12 18:00:18 2027 GMT
Subject: CN=67703cb5-9d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:63:86:c1:2d:17:75:aa:19:60:31:91:6e:
6c:b5:d6:de:5d:f5:f3:ca:7c:bb:0f:f9:7f:68:f1:
ed:80:5a:2e:84:78:1a:51:21:5c:24:c0:b1:5d:4f:
c2:24:96:00:9e:e2:96:b4:f4:20:d2:4c:07:66:cc:
13:1f:ab:46:b2:0c:0c:69:78:3d:ba:a1:ab:a2:f2:
ab:92:36:b2:67:1b:a0:43:a1:bf:2a:9e:50:dd:b4:
21:29:e8:74:ff:bb:b4:55:ce:2e:35:bd:a2:1a:2b:
90:6d:37:7b:68:ba:17:f8:c0:b3:14:2b:80:2f:5c:
7b:a9:d9:fd:0a:77:7e:8e:e5:5f:79:bd:b8:18:99:
4d:35:c9:53:53:72:18:c4:4d:48:5b:58:db:98:01:
b3:b1:70:4d:d6:04:82:3e:a0:e4:4a:ce:1f:91:51:
1b:5d:36:7c:18:5f:6e:f6:3a:9e:40:67:33:85:61:
71:e2:d6:9d:81:29:5f:80:c0:36:52:ce:d5:42:15:
72:d5:9f:51:6f:f1:d7:cd:51:50:0a:5d:cd:54:3d:
c0:61:d8:53:8c:7b:ec:4c:4b:22:b8:2d:57:41:87:
61:90:07:f0:f8:cb:72:92:46:81:9b:5f:0c:2d:ba:
86:40:22:74:1b:92:82:a0:0b:65:85:00:20:d1:d8:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:AB:AF:68:F3:B6:35:CD:C4:0D:41:D3:69:7A:03:39:19:05:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC1282AC54511EF89ACF687762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
99:66:7a:bd:33:d5:d3:5f:d9:6f:1d:07:c3:cc:e6:2f:d9:96:
04:5f:26:d1:37:24:3e:2d:c3:a3:5b:e7:c3:42:57:48:77:41:
64:6a:1c:02:8d:23:92:b6:2c:88:d0:38:d0:08:21:02:b8:df:
61:2c:69:af:36:c8:14:e3:0f:de:04:f3:68:d2:21:1d:c0:9d:
4b:88:38:c9:50:20:8e:bc:d4:9f:3d:47:51:17:e0:61:f0:42:
4d:cd:2a:a7:05:15:31:e6:26:d0:70:be:2a:04:5e:e3:3c:9f:
1f:1b:fa:ea:f2:b7:87:2d:51:3b:93:c5:74:e1:b5:21:1d:95:
af:a6:f7:08:bc:f6:6c:e3:ca:11:4b:b4:ac:d6:a7:79:65:50:
25:26:a3:57:f8:04:d1:6f:f7:3f:ab:dd:67:88:4b:36:27:87:
d9:4e:0a:53:6b:6c:9d:98:f8:77:1d:b6:2b:21:b1:a2:54:f3:
0c:4d:3e:ec:2d:56:2e:05:de:c8:54:69:9c:dd:5b:86:f4:38:
c1:b1:97:fb:85:17:a8:1b:3b:86:df:aa:9d:2c:0d:ae:25:6c:
03:ac:28:aa:34:10:45:c9:8b:5b:e6:b1:80:fc:9a:8b:39:68:
66:a3:33:11:b5:5d:7f:74:9c:4b:76:ba:3c:ee:63:ff:08:a4:
41:71:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:24 2025 by rpki-client