Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B5BE9AC36111EF94E88589762E951A.roa
File: A8B5BE9AC36111EF94E88589762E951A.roa (raw, json)
Hash identifier: +cBcDgwNWxRAqlwCDtsrmACaqmDsTVjZsw9y4SIKlrU=
Subject key identifier: DF:52:C1:CF:27:DA:80:C4:C9:3E:FF:D2:6C:29:1B:7F:16:38:60:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012660
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B5BE9AC36111EF94E88589762E951A.roa
Signing time: Thu 26 Dec 2024 08:16:08 +0000
ROA not before: Thu 26 Dec 2024 08:16:04 +0000
ROA not after: Sun 12 Dec 2027 08:16:04 +0000
asID: 17561
IP address blocks: 154.91.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75360 (0x12660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:16:04 2024 GMT
Not After : Dec 12 08:16:04 2027 GMT
Subject: CN=676d10c8-3e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:29:74:61:dd:f7:7a:0d:a4:15:20:bd:04:
70:4d:4e:be:46:e6:96:de:b6:ce:ed:1e:8e:e8:2d:
43:87:92:c5:0a:8f:ce:c1:d9:c9:a8:94:69:4b:6a:
83:d6:fb:5e:98:40:a6:6a:a6:eb:0d:37:69:ab:9b:
e7:75:62:ec:5e:4b:cc:6f:da:68:da:78:09:b0:20:
19:ac:95:b1:3a:7d:82:61:43:da:28:59:97:22:9f:
2f:68:37:d1:5b:1e:e1:11:1b:68:ce:e6:dd:cb:1f:
c6:bc:e0:45:1b:dd:05:97:a5:b0:62:d5:cd:c9:51:
55:7a:09:eb:25:7b:e7:6b:cd:aa:37:e9:32:3a:0c:
99:2b:49:f2:4c:c6:7c:96:f5:2d:f4:fc:7e:a3:ee:
80:0f:56:d1:4e:bf:50:30:bf:f6:cc:1a:79:44:01:
21:89:45:68:a2:d6:87:d0:47:58:cb:66:26:2a:2b:
e7:20:d2:81:47:2f:b8:03:77:5b:c3:39:87:c1:29:
90:e0:04:ac:27:f9:b2:ee:8a:a3:35:af:8f:f1:90:
17:cb:ce:1c:4d:98:e1:d1:a0:06:73:93:ea:3a:39:
c1:c3:41:40:ed:76:26:fd:cb:ff:79:10:27:c3:5d:
3b:cd:97:28:97:a3:d8:9a:b8:e9:c4:b2:67:7e:f1:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:C1:CF:27:DA:80:C4:C9:3E:FF:D2:6C:29:1B:7F:16:38:60:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8B5BE9AC36111EF94E88589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:36:03:84:e4:ab:05:f7:5a:d7:6c:39:9b:22:50:c0:ff:36:
f5:fe:3e:4b:17:aa:d7:be:3f:96:0f:59:0b:aa:9d:6c:83:79:
48:01:9a:50:5c:ef:de:51:3e:9a:11:39:86:0f:d3:e4:84:6e:
b4:ce:17:8f:55:34:a5:a1:e8:55:60:6d:5c:2b:97:92:c6:e2:
e1:ef:db:06:33:45:bc:ec:c4:59:da:59:69:93:7d:76:69:18:
b4:5d:de:f7:2f:73:5d:c3:8c:1b:ea:a6:50:78:68:ad:36:0c:
5c:bd:b7:60:ff:5f:69:7e:78:69:d2:2b:e0:30:41:4d:57:f4:
24:f3:3f:96:28:04:c0:4d:f6:97:68:f7:87:4b:f0:56:7c:9b:
e2:ba:7c:9a:aa:ad:ec:21:4b:b9:6d:0a:ca:84:f7:f9:53:19:
4a:d7:25:fc:9b:6f:84:8b:bf:8f:3c:97:e8:84:7e:69:2d:9b:
04:ce:e8:5c:37:83:0e:51:5b:a4:ad:7e:a3:24:7b:fb:1c:b6:
1a:64:8c:18:18:58:f5:f4:86:2f:77:28:66:f9:f3:5a:c3:fb:
22:c2:82:77:03:9a:9e:3c:ab:33:32:b6:a0:3f:cc:38:cd:87:
31:5f:b0:03:80:d8:d5:c4:bd:dc:37:d1:c8:bb:70:38:0a:63:
e1:79:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:48 2025 by rpki-client