Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5E779F4C38611EF87A70372762E951A.roa
File: A5E779F4C38611EF87A70372762E951A.roa (raw, json)
Hash identifier: qUrp+5nBArU2MhhDDIexD1mcXclEPxEY94OWor7SE8k=
Subject key identifier: B8:0A:00:D0:B0:83:21:6E:08:62:7C:8F:42:8D:3E:7E:66:2B:CF:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012798
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5E779F4C38611EF87A70372762E951A.roa
Signing time: Thu 26 Dec 2024 12:40:55 +0000
ROA not before: Thu 26 Dec 2024 12:40:51 +0000
ROA not after: Sun 12 Dec 2027 12:40:51 +0000
asID: 17561
IP address blocks: 154.94.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75672 (0x12798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:40:51 2024 GMT
Not After : Dec 12 12:40:51 2027 GMT
Subject: CN=676d4ed7-1108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:04:b0:5c:31:e8:da:ae:48:4d:89:44:21:
a6:22:51:ce:8c:71:9d:ba:e3:7f:f3:ca:c6:33:0f:
4b:5e:19:d8:e0:74:5c:31:57:35:b7:f7:e2:b7:30:
b6:67:73:76:d6:25:86:ac:03:ca:02:10:c4:78:fb:
be:c1:67:0f:96:7f:c3:c1:74:1f:fd:8c:c5:1f:c9:
b4:ac:0d:ce:31:7f:fb:25:4b:03:99:84:b8:71:a0:
eb:10:44:ce:d1:81:57:30:f0:d6:ba:dc:2b:9f:e2:
4d:83:5d:ca:bd:d0:f9:f8:76:33:ba:79:20:cf:ee:
a7:87:3d:5e:cc:de:4b:95:7f:7a:ef:b9:8c:88:96:
54:80:39:06:98:51:d4:66:c2:4b:1a:eb:df:a3:2c:
c1:5f:7f:04:aa:a3:dc:54:f9:2c:78:ab:0c:ac:24:
ba:c0:dd:29:34:99:c0:60:19:19:46:3a:c9:48:74:
83:71:b6:cc:f3:dc:c5:25:a8:08:c8:98:f2:a2:22:
0c:04:c1:79:0d:c8:d8:8d:72:b5:98:af:5d:93:1c:
7d:85:53:9c:ec:c0:94:45:88:1d:73:be:a0:b7:43:
5d:0d:da:33:62:5b:d9:8e:49:80:f5:d5:56:96:47:
2a:a7:97:db:7c:a7:18:f1:3d:32:1e:05:89:b9:a0:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:00:D0:B0:83:21:6E:08:62:7C:8F:42:8D:3E:7E:66:2B:CF:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5E779F4C38611EF87A70372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.235.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4d:dd:00:f6:69:ca:48:57:1b:b7:ef:58:fe:6a:47:e0:5f:
5c:ed:ad:32:9b:31:e6:e0:be:0e:7b:b3:52:6e:1b:cc:c1:09:
d7:52:38:25:09:0e:44:fe:c7:2b:0d:f5:4f:c9:4f:aa:3f:df:
b5:c1:80:ea:7b:ab:96:d7:c2:8a:d1:f8:19:63:e4:07:9a:74:
66:27:c4:cf:42:de:88:0c:c7:77:0c:f8:8e:81:48:af:b1:fd:
ee:af:ae:61:b7:3e:30:91:76:1b:f5:f5:b9:34:cd:cf:44:e8:
e7:52:f4:8b:98:7f:99:1e:58:d9:d2:b0:d4:bc:a7:7c:f1:f9:
f1:68:99:ea:d4:ef:64:70:57:c7:7c:89:43:66:c8:bf:b5:0a:
26:a5:b2:9d:90:09:e4:15:07:64:be:32:45:74:e9:84:9c:11:
09:b2:92:cc:b8:95:15:43:9f:52:8e:8a:81:da:a5:16:28:7f:
7a:37:55:62:68:1b:e8:6c:60:94:93:00:af:6c:81:91:24:f6:
a1:81:e3:a5:bd:64:72:7e:52:11:9f:8c:6d:e2:7a:7c:e5:59:
fc:93:70:15:80:74:2f:95:53:09:e4:7c:d7:91:7b:1d:be:ba:
d0:a1:fe:cd:d1:3b:2e:66:cc:75:e7:9d:4c:9c:e1:a2:eb:b9:
5b:bf:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:14:21 2025 by rpki-client