Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB8F2F4C42411EF818FEB68762E951A.roa
File: 9EB8F2F4C42411EF818FEB68762E951A.roa (raw, json)
Hash identifier: kbubKihbbSZBcjVdZ8jBmdG0LmcGjmN+ZfFmrieLSKM=
Subject key identifier: CC:EB:FF:FD:FB:06:0E:00:76:6D:BA:12:07:A4:78:67:EC:E2:04:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB8F2F4C42411EF818FEB68762E951A.roa
Signing time: Fri 27 Dec 2024 07:31:43 +0000
ROA not before: Fri 27 Dec 2024 07:31:39 +0000
ROA not after: Sun 12 Dec 2027 07:31:39 +0000
asID: 17561
IP address blocks: 154.202.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76265 (0x129e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:31:39 2024 GMT
Not After : Dec 12 07:31:39 2027 GMT
Subject: CN=676e57df-e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:79:4b:95:b3:ab:92:dc:3c:f2:ac:fe:30:
76:e6:ac:20:22:95:33:83:9b:dd:8b:c1:86:24:65:
14:e5:46:3b:26:d7:8e:12:ec:c1:9f:4f:66:7a:b2:
51:43:f7:b2:99:38:a4:55:b9:bd:57:c8:e2:76:d6:
17:52:68:22:12:4c:0d:28:5e:ec:b9:2f:b0:7d:82:
b4:c7:d8:c9:68:4e:59:b5:37:bd:11:69:e9:97:9a:
22:b0:67:36:46:05:96:a6:72:47:ad:50:ec:f5:fe:
ee:56:38:66:01:29:06:a3:6c:15:14:ae:8a:19:95:
90:b3:31:58:b4:37:67:13:2a:e8:76:da:eb:ea:fe:
89:3b:02:a5:92:79:dd:a0:a0:e0:e9:b4:36:d7:58:
34:6e:b1:78:b2:78:c8:24:3b:e3:84:77:e5:51:51:
45:7c:96:7b:c9:a3:81:ff:ae:88:25:0b:90:ad:fb:
bb:80:08:cd:b0:75:8e:b4:9a:c3:b2:f9:25:fb:51:
e6:ec:ac:0f:76:ec:80:db:28:8a:44:e3:24:14:aa:
65:03:5c:21:cb:e5:59:c1:57:58:4c:dc:7c:d3:d8:
50:e2:c3:eb:27:79:43:16:ab:33:e4:25:b7:dd:f0:
d7:29:b7:93:21:55:f7:1c:87:f7:ad:ff:52:7a:7b:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:FF:FD:FB:06:0E:00:76:6D:BA:12:07:A4:78:67:EC:E2:04:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EB8F2F4C42411EF818FEB68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b2:00:d0:b9:62:2c:25:f0:4e:47:53:05:3e:a7:6c:f5:8f:
62:80:dd:56:a8:ba:9d:52:ca:3e:92:ad:fb:ae:a0:6f:ff:af:
d1:1b:50:56:4e:75:af:aa:5c:fb:40:b2:6a:c8:4f:1c:da:4a:
22:04:94:a7:66:60:8e:3a:ae:f6:7b:e5:28:e8:69:7b:13:6e:
d0:79:49:3a:69:a9:af:40:13:1b:e6:5e:93:ef:96:fd:a0:87:
a8:1d:60:97:bc:e7:d1:5a:07:fe:7f:2f:ac:72:26:ac:7c:29:
c8:f8:4d:40:2f:e3:a3:a0:82:79:77:36:44:8d:b1:38:ed:a2:
37:3a:af:97:d0:02:f7:13:26:e9:8e:17:7f:dc:b8:5b:c9:b6:
36:0d:7f:8f:c7:48:ad:08:1b:5f:64:bb:51:76:0f:c3:0c:73:
af:a6:a3:c3:9a:1e:6e:4d:b1:42:97:31:15:c6:32:35:98:5b:
a0:ea:84:47:4e:9f:99:0e:80:d8:d7:77:de:c4:3d:39:44:c8:
7e:30:2b:61:4f:31:d4:87:84:c4:c1:03:8d:4d:35:0d:4f:3a:
90:04:0a:81:49:80:1f:76:16:8c:9f:95:e3:3d:cb:f5:3e:8d:
ac:97:66:93:ca:29:b0:3b:c0:01:a5:e0:84:04:44:a0:18:34:
c6:29:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:31 2025 by rpki-client