Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA52AC4C52011EF9DE4E79E762E951A.roa
File: 9EA52AC4C52011EF9DE4E79E762E951A.roa (raw, json)
Hash identifier: 1a8YH3skB08EQmkkcARkzM4yhjjpt3ceTe6+Wi4nwRQ=
Subject key identifier: 25:54:BC:E5:CD:54:31:63:A4:28:05:D5:E6:2E:6D:B1:77:54:2C:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA52AC4C52011EF9DE4E79E762E951A.roa
Signing time: Sat 28 Dec 2024 13:35:36 +0000
ROA not before: Sat 28 Dec 2024 13:35:33 +0000
ROA not after: Sun 12 Dec 2027 13:35:33 +0000
asID: 17561
IP address blocks: 154.203.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76627 (0x12b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:35:33 2024 GMT
Not After : Dec 12 13:35:33 2027 GMT
Subject: CN=676ffea8-a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:96:f7:84:42:49:41:14:f0:00:6d:aa:21:
92:25:1e:9f:9e:4f:26:23:50:50:ea:68:d3:8d:38:
2c:da:18:99:f7:eb:7d:e3:be:71:1c:0d:7c:44:01:
44:c9:fe:a6:10:cc:fc:3e:86:ff:c0:b3:43:b0:ea:
84:96:34:e0:9f:da:43:35:2c:4a:03:23:3a:6c:83:
8d:6a:6c:2f:c6:63:1d:fa:22:fb:e4:cf:49:9f:4f:
d5:5a:e9:8c:24:fc:01:cb:c6:a6:45:dc:b9:e0:d2:
04:2e:7c:bf:69:c0:94:80:68:f9:b5:93:63:2f:0e:
2b:29:62:78:94:d8:5e:70:b2:c5:f6:32:14:48:2a:
db:4f:d9:e2:74:a5:c2:44:7a:74:23:33:c4:0a:53:
86:cf:ad:bc:32:4b:b8:5d:c5:3b:a9:24:86:e9:f4:
f5:c4:34:7d:db:22:e2:f2:19:74:09:44:a3:6a:63:
82:fd:b6:df:ed:4d:ef:12:4c:65:12:a0:5c:06:77:
78:47:00:0e:62:81:cc:e7:6d:a7:1b:92:2c:b7:1e:
e4:a1:45:2d:0c:7c:a8:24:0b:a0:3f:e5:a0:64:ab:
79:87:cd:81:b0:e9:fc:19:9e:d0:b4:f1:9d:00:6d:
78:90:3d:a8:79:9b:38:a1:80:8b:d3:61:de:56:90:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:BC:E5:CD:54:31:63:A4:28:05:D5:E6:2E:6D:B1:77:54:2C:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EA52AC4C52011EF9DE4E79E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:51:c4:2b:74:13:51:8e:4d:5e:a3:c5:9b:18:2f:5f:73:c3:
52:17:85:2b:7b:58:64:6e:8a:f8:53:a1:9a:87:52:1c:d1:03:
74:35:55:bf:e4:c7:5a:c2:c7:fd:dd:b2:ea:bf:3e:83:8b:a7:
ba:f6:11:5e:77:a4:2d:e9:66:d6:5f:81:db:c0:c0:e9:6a:7b:
17:e4:c3:a8:79:42:a7:24:96:77:47:3c:38:23:da:3a:b0:a1:
20:73:53:21:91:3c:33:e9:b1:6f:63:8a:dd:76:30:5b:73:8f:
2c:d5:4e:b7:98:df:1c:d0:9e:55:12:b7:e4:33:b9:0f:a4:3b:
82:5c:50:95:46:7e:3d:ad:4e:dd:6d:67:57:f1:ab:7e:68:74:
5b:26:e1:e1:9f:43:58:17:91:d0:dd:7d:d7:4f:d6:b0:44:60:
16:a7:8f:e9:67:5e:67:79:97:25:c8:42:19:e3:19:8e:68:b8:
ef:c6:c2:13:e9:c6:61:2a:c5:89:9f:3e:0c:ac:bb:c3:e6:4c:
bc:5f:e8:13:d4:93:69:5d:fd:9d:d4:1c:68:12:41:ba:93:0a:
81:c0:e2:8e:4d:9c:12:d2:dc:3f:67:3d:27:e0:59:d3:fa:52:
e8:9f:26:d5:7d:de:e4:51:a0:e3:4a:76:1d:ed:75:cf:b3:09:
c9:40:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:03 2025 by rpki-client