Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0D5FCAC52311EFAE7A6EB1762E951A.roa
File: 9E0D5FCAC52311EFAE7A6EB1762E951A.roa (raw, json)
Hash identifier: 5rG5dV8beRX+Pjn2vF+BYALBDIKR69mF7WBbhlXyE3c=
Subject key identifier: 00:C1:F5:A5:D7:19:2A:A0:23:B9:8F:72:98:95:7D:E9:EF:36:D5:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0D5FCAC52311EFAE7A6EB1762E951A.roa
Signing time: Sat 28 Dec 2024 13:57:04 +0000
ROA not before: Sat 28 Dec 2024 13:57:00 +0000
ROA not after: Sun 12 Dec 2027 13:57:00 +0000
asID: 17561
IP address blocks: 154.203.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76655 (0x12b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:57:00 2024 GMT
Not After : Dec 12 13:57:00 2027 GMT
Subject: CN=677003b0-51de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:bf:b2:64:f4:22:c6:2d:37:78:ed:7e:14:
86:54:b3:79:fd:2e:8d:3a:c8:6b:f8:18:ba:c3:c2:
16:34:95:a5:1c:7c:cd:e1:99:09:37:10:5a:f4:59:
85:38:87:92:13:5f:9c:0b:34:4a:1b:ff:d5:70:7e:
a5:cc:3c:e1:ea:d9:82:de:58:4e:9c:b0:e4:2f:76:
d4:31:02:d3:e1:fc:4d:d8:2e:cb:29:18:d8:e5:98:
ca:37:59:27:65:92:99:0f:f2:91:f0:d5:13:22:52:
2a:8f:07:8b:90:a1:34:6b:62:cf:79:53:bf:5d:bc:
de:7d:06:ba:8d:e1:67:e1:d2:fb:9f:83:7f:37:3b:
02:ba:17:43:27:31:e7:f3:e7:fd:e2:df:36:ee:5d:
51:55:28:7c:91:64:fd:78:0f:9d:c7:e2:ee:87:8f:
0c:00:ac:31:0e:48:4b:ea:f7:81:b2:98:0f:d9:39:
f5:af:1f:14:1b:bd:a2:68:d3:04:16:68:2a:a1:57:
60:29:7a:4c:2b:fe:03:8a:bf:e1:cc:c9:f7:d3:bb:
0e:ab:1d:e1:f8:25:16:58:f0:d0:4a:a5:e8:5e:55:
78:07:7e:c4:b6:83:dd:f4:f4:45:6d:2b:54:99:07:
2b:f4:92:71:0f:92:0e:c9:a8:eb:56:4b:28:68:6b:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:F5:A5:D7:19:2A:A0:23:B9:8F:72:98:95:7D:E9:EF:36:D5:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E0D5FCAC52311EFAE7A6EB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:99:7b:84:3a:1b:10:f2:70:5a:84:3e:00:9d:52:a1:64:e1:
7d:e6:82:82:58:62:88:7a:2f:11:6f:08:f9:f0:d4:7b:53:db:
76:28:5c:0e:72:76:80:70:6c:04:bf:d8:3e:1f:b0:94:80:2b:
05:81:99:e0:d2:7b:4a:92:c6:5f:c0:88:5f:97:d6:27:33:a0:
8c:a6:80:98:6c:a7:af:d2:b0:9c:2f:ad:35:53:e4:8b:cc:21:
7b:c3:03:64:46:5f:8d:5c:cf:0c:ab:80:2f:23:77:6e:c3:d9:
0a:06:2b:28:90:59:b8:68:23:2c:30:22:d4:e7:78:75:6a:e6:
8a:ea:ae:a6:ba:da:ca:3e:38:31:e2:37:0a:20:03:3e:ac:8f:
ae:03:b5:30:4f:f1:d1:ae:88:3e:32:b2:03:fd:06:c8:57:91:
e5:28:74:66:86:cd:fb:0a:a6:fb:aa:9c:e3:72:20:b5:27:c7:
0c:e9:75:49:df:e7:7e:ec:a2:bc:a3:6b:09:e1:1c:c0:5e:d1:
9c:19:62:73:c2:11:c4:1b:d0:7b:41:aa:00:14:51:ef:1d:01:
7a:c5:00:c7:d1:0a:13:09:65:64:23:f4:02:62:be:97:68:32:
cc:bf:23:8d:5a:bd:0d:8b:76:79:bb:de:e6:ce:bd:28:71:80:
7f:bf:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:32:03 2025 by rpki-client