Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA7F9F0C42511EF9093476F762E951A.roa
File: 9CA7F9F0C42511EF9093476F762E951A.roa (raw, json)
Hash identifier: f/fyVrh05chG+Sbjsge1i8BwIxquWCc9Qn1pL2psHOk=
Subject key identifier: 0D:01:F6:66:4A:41:1A:6B:9B:79:09:FD:CE:06:28:98:6A:60:6B:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA7F9F0C42511EF9093476F762E951A.roa
Signing time: Fri 27 Dec 2024 07:38:49 +0000
ROA not before: Fri 27 Dec 2024 07:38:46 +0000
ROA not after: Sun 12 Dec 2027 07:38:46 +0000
asID: 17561
IP address blocks: 154.202.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76275 (0x129f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:38:46 2024 GMT
Not After : Dec 12 07:38:46 2027 GMT
Subject: CN=676e5989-62dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:c6:59:bf:d2:d4:a4:78:58:ed:85:1c:97:
01:94:8a:3e:96:78:cc:33:f6:0c:1b:91:01:ad:8d:
77:84:74:2f:c0:fa:0d:28:4f:1f:bd:3b:da:d9:61:
d8:8b:a3:d0:e5:8b:ac:fc:5c:57:c4:12:84:3d:1b:
7e:8b:8a:1e:72:0c:88:20:ac:1a:d3:b9:9b:99:21:
8a:ea:a6:fb:9a:f6:78:f7:59:3b:1d:4a:c4:a4:fb:
2f:c6:50:88:22:aa:85:1e:d7:7d:dc:f4:e5:15:42:
08:b0:83:67:38:a5:f6:24:66:5e:08:5a:fd:74:c0:
e9:f2:db:83:35:eb:6b:82:96:37:46:41:d7:fc:39:
72:fe:1c:13:40:e9:24:12:18:76:22:5f:64:b8:bd:
78:ea:98:ab:c4:85:84:91:6a:27:f2:c1:ae:36:c7:
3a:68:e9:64:ae:53:88:32:21:56:a7:37:93:9a:07:
ec:05:86:0f:60:12:1b:40:17:71:c0:61:ad:75:ed:
57:71:df:0e:a8:75:97:52:4b:df:aa:0a:3e:38:34:
f8:80:33:cc:37:95:a1:58:fb:a6:f4:00:a4:c3:b9:
0d:0b:8f:f6:c3:5d:8b:84:9d:d4:5a:47:09:61:9b:
31:96:42:9d:72:ee:31:ba:78:39:75:f9:47:74:48:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:F6:66:4A:41:1A:6B:9B:79:09:FD:CE:06:28:98:6A:60:6B:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CA7F9F0C42511EF9093476F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:a5:ed:e8:e0:a4:a7:4c:23:d3:3d:e9:70:7f:c6:a6:43:1a:
e7:60:e9:e8:43:75:e5:a9:eb:f2:0f:44:d1:26:ff:02:34:e3:
10:0d:97:04:3b:0a:d2:7e:ed:0b:f4:cb:94:49:6e:87:ed:f6:
09:3c:64:19:6a:a1:67:61:0e:d0:58:5b:22:b5:c8:41:4b:49:
eb:41:28:5d:57:9f:45:e8:a9:92:ab:5f:b4:03:9c:c6:c7:17:
9d:fa:a1:d1:08:ef:dd:53:a7:0e:7c:29:c9:95:a9:6f:f3:80:
2d:b6:d4:5f:83:da:0a:c6:c2:cf:33:7f:70:4f:c8:4d:08:f3:
3e:14:d9:26:40:e6:8b:6d:23:80:c1:5d:72:f6:d5:d6:a1:ed:
80:54:56:fd:4a:86:0f:ab:98:03:c6:50:66:d9:e2:07:4f:7b:
5e:99:6e:d1:53:92:42:20:bc:a2:75:e0:15:3e:48:c8:f1:d4:
a2:b9:cb:2a:a4:15:8d:ae:81:76:38:57:68:de:c0:7e:d6:0a:
11:7d:1d:43:27:5f:48:81:9b:ab:f5:8c:0c:66:50:27:4e:31:
14:e9:42:db:1f:a3:19:17:3e:b5:93:8b:8a:c3:a7:e1:64:1f:
a0:b5:50:ea:bc:d5:33:ed:48:d8:b8:57:9d:bf:ec:62:57:f6:
af:d7:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:02 2025 by rpki-client