Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B31489AC53011EF968D2D84762E951A.roa
File: 9B31489AC53011EF968D2D84762E951A.roa (raw, json)
Hash identifier: XuzmDm9vNvcW7CX0Lc4XwZ2bqtX4/RWrcFMPiVQvECU=
Subject key identifier: 1B:D6:39:B7:72:FE:7E:7C:45:C2:38:ED:70:19:52:E3:BB:B4:9C:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B31489AC53011EF968D2D84762E951A.roa
Signing time: Sat 28 Dec 2024 15:30:02 +0000
ROA not before: Sat 28 Dec 2024 15:29:59 +0000
ROA not after: Sun 12 Dec 2027 15:29:59 +0000
asID: 17561
IP address blocks: 154.204.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76777 (0x12be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:29:59 2024 GMT
Not After : Dec 12 15:29:59 2027 GMT
Subject: CN=6770197a-5a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:03:d9:31:b4:fb:4d:5b:6d:69:8d:db:05:
9e:93:54:3e:b9:df:8b:94:39:12:a0:cf:2d:11:46:
61:65:e6:37:a9:e6:82:55:04:bf:a6:ef:82:fd:5f:
88:3e:86:93:40:af:9e:68:f0:fc:f5:5f:cb:32:95:
d6:65:28:c0:3e:c3:65:c4:c7:fc:6f:5e:40:f2:21:
89:2c:9c:de:e7:e8:c5:fc:3f:aa:d2:8a:17:b1:3f:
7c:7c:62:98:28:eb:15:41:3f:51:99:62:e5:a2:3d:
97:53:f5:41:83:f4:11:33:91:02:2d:cc:89:21:7a:
86:f2:e2:e1:b5:77:4e:b5:79:88:1e:32:1f:6d:7d:
e9:78:e0:01:af:fb:71:2c:31:a2:f7:d8:64:10:2a:
6e:ba:8d:db:f8:44:d8:3a:5b:00:e9:5b:dd:fa:5f:
1b:fd:56:2c:8b:bd:c7:96:ed:8c:39:f7:67:63:87:
e9:2e:41:38:1e:14:2d:1a:d4:82:2d:b7:92:f3:ff:
f0:ec:22:a5:8b:ee:6a:ee:64:27:65:c2:ab:c1:0e:
63:f8:e8:0a:ab:0d:27:13:47:e7:f3:3b:1d:3f:34:
19:e7:76:ba:49:f7:b4:fb:5a:66:d0:e9:35:56:b9:
af:cd:c4:57:35:c0:fb:95:e5:86:20:8f:35:a7:cc:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:39:B7:72:FE:7E:7C:45:C2:38:ED:70:19:52:E3:BB:B4:9C:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B31489AC53011EF968D2D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:68:8b:1c:93:bf:63:97:b1:ca:22:26:ca:27:3f:44:e3:33:
d6:69:02:c3:4e:1a:99:4a:74:17:dc:13:08:45:2f:44:a8:6c:
69:80:af:e5:7c:50:81:0a:8f:df:9e:55:6e:f5:24:53:db:ec:
f3:02:86:1c:d6:f3:56:fb:89:5e:44:a9:21:aa:dc:08:71:cc:
43:f7:e1:6b:eb:c8:4e:9d:f7:7f:e1:04:a1:b7:f2:58:3e:04:
d6:49:b1:50:ee:7c:8e:d0:20:d8:20:1d:49:1e:a8:b6:48:7b:
7f:2d:7d:f1:b8:a0:d4:c8:a9:71:f9:6d:bf:6e:30:b4:69:cd:
76:4d:91:62:59:c2:bc:61:38:b3:dc:a5:1f:b3:b6:73:f1:5e:
6c:49:e5:24:cf:bf:d9:d1:44:fb:f1:04:e6:8a:47:cd:b1:40:
33:f7:3e:a2:d3:b0:cb:5a:d6:61:21:85:8f:86:3a:81:05:1b:
39:14:e8:cc:31:81:b9:51:18:5e:ef:d1:37:7d:3a:28:56:44:
35:8b:8b:a8:ba:b1:f1:90:56:28:88:9e:d4:fb:d0:c6:42:44:
92:c5:7e:36:9a:6f:e9:db:28:ac:f2:e0:8a:01:df:7b:5a:8f:
32:73:b7:37:84:4e:29:81:a9:32:f0:42:ce:7b:b1:28:d6:a6:
d5:e4:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:40:18 2025 by rpki-client