Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E5DB6D8C36A11EFA61E6B44762E951A.roa
File: 9E5DB6D8C36A11EFA61E6B44762E951A.roa (raw, json)
Hash identifier: VGdjJHKF/SEha8z5ZhPe82gwKTvAEGKMWmOsQr+w7RI=
Subject key identifier: 00:A4:64:3B:C4:1D:48:26:70:84:B7:BA:91:1C:56:73:21:7D:5A:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E5DB6D8C36A11EFA61E6B44762E951A.roa
Signing time: Thu 26 Dec 2024 09:20:16 +0000
ROA not before: Thu 26 Dec 2024 09:20:13 +0000
ROA not after: Sun 12 Dec 2027 09:20:13 +0000
asID: 17561
IP address blocks: 154.94.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75494 (0x126e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:20:13 2024 GMT
Not After : Dec 12 09:20:13 2027 GMT
Subject: CN=676d1fd0-3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:15:88:c5:90:65:8d:3d:d5:7d:0b:f8:93:
22:e9:2f:18:0f:5e:d9:11:90:79:3d:9d:d0:a0:e1:
f8:a0:81:31:68:38:ac:b1:7e:89:2f:35:bd:35:e5:
40:55:a9:ac:ac:d4:49:d2:55:25:cd:f2:c7:67:2e:
0e:9b:13:ac:19:5b:d8:64:32:5d:39:0a:36:5c:cf:
53:08:08:d7:9a:3c:4c:3f:7d:74:e0:b7:53:f0:8b:
c4:f6:cd:72:62:61:ac:58:d3:4a:5d:f3:9b:ee:cf:
d2:fa:af:c1:16:3a:c9:b8:c3:51:63:1c:cf:a3:c8:
9c:e9:e0:b5:2f:e4:ae:70:30:79:11:66:33:4f:18:
24:12:db:d4:a0:c3:94:e1:19:94:e0:4e:e7:b7:b5:
a7:62:16:79:fd:23:17:f0:5a:18:2e:d0:21:f9:e9:
99:b0:9e:15:9b:2c:6b:68:5d:c0:91:da:77:0d:cf:
15:38:5e:f2:79:69:3f:1d:43:0e:15:74:fa:ec:ba:
bb:9a:6f:c6:2a:70:70:33:1f:ee:ea:66:f3:9b:82:
1e:23:a3:bb:1a:97:ee:c1:e9:05:42:8d:fc:26:71:
c4:87:03:5b:0a:4a:3e:c3:02:1e:74:a0:ea:eb:5f:
ab:fe:37:61:cf:a9:13:48:b6:cc:28:3d:53:54:b5:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:64:3B:C4:1D:48:26:70:84:B7:BA:91:1C:56:73:21:7D:5A:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E5DB6D8C36A11EFA61E6B44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.138.0/24
Signature Algorithm: sha256WithRSAEncryption
29:45:30:a5:23:02:c6:af:08:ad:10:ae:b5:0d:11:75:78:a1:
a9:30:34:17:b9:fc:ad:8a:78:00:d6:a6:89:9b:62:67:16:78:
77:f3:20:57:d9:00:de:db:57:14:58:c3:ea:b6:b3:01:49:f4:
8b:5c:5e:f1:41:06:87:94:49:81:7a:6d:83:f1:d2:16:12:ba:
68:90:f5:9b:48:81:c7:f3:bd:8f:51:b2:dc:57:54:56:fc:0c:
0d:0c:da:95:d2:58:50:0f:e7:7b:34:38:38:c0:1c:11:14:90:
82:24:d5:64:df:96:88:5d:2f:e5:f1:30:c9:57:03:f7:bc:fd:
90:58:47:b0:77:4c:66:9f:4e:5b:6b:28:3e:20:ff:50:9a:79:
ba:c8:f0:12:7a:32:67:63:8f:68:61:49:ce:34:1a:c0:98:94:
61:ee:a4:81:9e:04:4d:dc:d6:e6:3a:82:52:84:78:9a:da:e2:
cf:51:7d:50:70:1c:2e:24:cf:f5:00:f7:4e:12:47:9f:21:b3:
8c:f4:0c:3c:37:07:15:3a:24:c8:88:63:af:78:eb:96:7b:95:
c7:25:3d:35:96:3e:dc:ac:bb:75:38:1b:ce:bb:af:c6:a2:c8:
ca:f1:99:34:ec:a6:40:d8:21:8b:09:98:8b:5f:e7:2e:6e:78:
1f:03:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:09:59 2025 by rpki-client