Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D583170C51B11EF8183B480762E951A.roa
File: 9D583170C51B11EF8183B480762E951A.roa (raw, json)
Hash identifier: HuVIDFunTXBmnMc44oO8RJN5mcP4dXj2gjPfkTomKuM=
Subject key identifier: B1:25:24:DF:E1:B1:1F:6A:3B:56:4C:DF:D4:32:A4:53:5B:A0:84:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D583170C51B11EF8183B480762E951A.roa
Signing time: Sat 28 Dec 2024 12:59:47 +0000
ROA not before: Sat 28 Dec 2024 12:59:43 +0000
ROA not after: Sun 12 Dec 2027 12:59:43 +0000
asID: 17561
IP address blocks: 154.203.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76581 (0x12b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 12:59:43 2024 GMT
Not After : Dec 12 12:59:43 2027 GMT
Subject: CN=676ff643-e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:2b:13:40:e3:fc:d8:e2:4e:7b:f1:ca:7d:
7f:37:07:57:37:62:fa:f0:f1:06:bb:82:88:85:1f:
fe:96:da:11:63:9e:c7:4d:83:c5:f2:19:cd:f1:07:
2c:8f:8f:03:9f:61:1f:f3:0a:59:bb:3a:c1:0b:ef:
0c:01:7d:22:6e:05:dc:7b:e5:33:68:78:ef:cd:49:
cf:b2:0a:7d:83:17:e8:0f:d0:58:04:6f:f8:0e:4d:
78:2b:2d:84:4e:44:5e:68:91:b6:b3:3c:73:c3:08:
28:d3:0b:b3:51:e5:07:3d:c4:22:90:82:23:64:57:
b7:e2:37:7f:c1:3d:2c:2e:55:69:20:bc:dd:0e:84:
f3:42:af:a4:56:34:1b:b4:25:fe:09:58:93:1d:bd:
ed:db:dc:a5:bf:85:5e:85:d2:8f:52:4f:65:40:b0:
6e:2b:05:5c:1f:49:23:16:81:bd:92:5b:d5:37:a7:
ea:60:14:4d:1e:b4:dc:3a:8d:a6:7a:61:92:a0:b3:
18:5c:36:46:79:1d:f2:ac:c0:58:50:94:91:b8:ad:
3d:8d:96:57:09:39:ea:1d:63:c4:c0:a9:98:5e:e9:
0f:a6:03:ab:2a:7a:7d:9e:c5:53:c3:23:b9:d7:33:
ff:21:d9:37:43:1b:79:fd:67:94:1b:1f:5c:6c:de:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:24:DF:E1:B1:1F:6A:3B:56:4C:DF:D4:32:A4:53:5B:A0:84:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D583170C51B11EF8183B480762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:30:90:e2:da:c4:79:1e:ff:fd:e6:e8:29:37:f8:62:0d:4b:
c4:6e:fe:45:0a:41:fc:9c:d7:a8:d4:72:40:94:b5:d8:21:fd:
1d:bc:a3:c6:c2:0c:31:b7:b0:c2:22:aa:e8:71:ca:7c:47:a4:
12:2b:ed:fa:18:fe:7c:aa:e9:e4:d3:f5:13:73:df:67:6f:05:
cb:28:63:cd:f6:57:6d:76:23:db:53:11:d8:af:63:16:5f:c9:
c4:1e:db:c3:97:a4:4f:17:6f:57:f5:5a:b4:e4:b4:3d:eb:77:
3c:77:b5:e1:06:e8:4c:c6:a9:9c:12:9d:53:b5:67:04:2c:50:
98:64:6f:b3:0e:7a:ab:72:2e:e1:ee:4d:43:0f:ef:a2:f7:83:
e9:b9:ee:7d:60:17:25:d9:a1:23:ad:62:27:e5:3e:ee:0d:c2:
d9:33:22:20:4c:42:b1:75:f2:e3:fe:e6:d7:ff:1a:2a:91:5d:
7a:7d:36:13:33:00:2b:9c:1f:9b:cf:14:ff:9d:31:54:c6:97:
f3:30:f6:39:cb:76:a5:41:dc:e8:b5:f0:43:f7:50:63:d8:dd:
42:a1:b5:7a:bd:7d:5a:4e:a2:09:d4:28:aa:77:e0:3e:71:e6:
39:cc:6e:88:e2:04:ea:e5:3b:99:e4:1f:32:c1:04:7d:e0:fb:
db:08:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:39 2025 by rpki-client