Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA54A19AC1B711EFADEE4B6A762E951A.roa
File: AA54A19AC1B711EFADEE4B6A762E951A.roa (raw, json)
Hash identifier: pSjS1m9ygKrqGBemrl9z7CO6I0A2+JiYdVMjevhmDt4=
Subject key identifier: F8:17:B6:D6:B8:0D:69:F1:7B:C0:ED:62:0E:1A:17:D2:C1:02:26:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA54A19AC1B711EFADEE4B6A762E951A.roa
Signing time: Tue 24 Dec 2024 05:26:45 +0000
ROA not before: Tue 24 Dec 2024 05:26:42 +0000
ROA not after: Wed 10 Dec 2025 05:26:42 +0000
asID: 984
IP address blocks: 154.193.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74179 (0x121c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:26:42 2024 GMT
Not After : Dec 10 05:26:42 2025 GMT
Subject: CN=676a4615-ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:ae:c8:ef:d7:59:19:31:19:5e:06:65:10:
66:a7:ff:9f:13:6e:3b:0b:39:ec:42:13:86:ae:62:
b1:f4:0c:3b:21:32:4b:c5:fa:8a:ba:db:7f:e6:b2:
e0:bb:a7:ca:d6:8b:bf:ce:bf:9e:2b:ca:a9:d4:28:
90:bd:de:01:67:e4:4e:b9:82:16:56:30:86:87:b6:
13:0d:2c:a2:ac:8e:c1:e5:d7:61:72:af:49:65:4e:
86:b9:b0:67:29:9c:c0:e0:cd:94:f0:e9:04:16:04:
e1:fa:f9:db:5c:c3:4c:8b:20:1d:27:86:d4:8d:cd:
bc:43:77:b4:30:6c:3d:0d:bc:c7:6b:42:d1:83:f8:
93:46:ad:77:3b:fd:10:d9:0e:ea:0f:0b:45:a2:3e:
e5:bb:a3:52:fd:7f:df:a3:c0:8f:ab:ed:d6:23:77:
b1:da:1b:b8:5f:a4:e7:9c:31:23:08:00:a6:19:26:
0d:25:e1:03:36:31:0d:6a:89:e6:37:7a:35:f8:0b:
f7:2f:00:76:14:1a:ed:3a:2b:56:e5:f0:1a:05:3c:
4c:7b:e2:29:69:4d:97:f0:8f:1f:81:03:7c:eb:67:
ef:a4:86:72:86:e7:93:6a:f0:f8:89:0b:91:ec:dd:
7b:cf:c8:a7:e1:17:56:b2:de:e3:bf:c5:08:94:24:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:B6:D6:B8:0D:69:F1:7B:C0:ED:62:0E:1A:17:D2:C1:02:26:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA54A19AC1B711EFADEE4B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1f:d4:49:c8:ec:6e:2b:68:03:38:de:2c:97:25:f2:09:ce:
e9:ff:4b:cd:58:b2:ae:c9:6d:be:d6:99:3f:aa:27:9b:49:40:
eb:c8:3b:d7:a9:d1:4d:a6:12:15:cb:6a:03:87:3e:fa:c5:ab:
2d:8c:32:f1:b9:f4:6d:20:c5:52:ff:9f:59:77:9f:2c:72:ee:
58:74:bb:5b:47:38:40:3d:6b:0d:34:25:f8:a8:3e:b5:10:99:
9c:49:e8:4b:2f:ab:80:8d:21:79:32:52:66:66:e7:38:20:7b:
ea:1e:8f:a2:ef:80:31:e7:36:da:b3:33:a7:8a:7a:a3:58:63:
13:eb:bb:57:b4:a2:23:a6:7a:a2:78:53:ac:94:85:f7:2d:1e:
81:fb:16:d4:d2:53:54:8f:56:8d:93:b1:d5:34:fa:4c:d4:63:
fa:40:cc:d7:d0:7a:33:18:98:2e:24:42:4a:f8:a5:32:a9:9f:
fb:cb:5b:69:ab:7f:9f:8c:98:48:72:04:ab:ce:c7:f7:17:12:
71:bc:06:26:48:a2:b3:de:24:ac:ca:78:7e:83:05:38:91:07:
f4:e1:4e:a7:5c:8e:b3:e9:13:6d:6a:33:78:84:76:29:25:94:
98:a0:d9:99:51:95:28:e9:f7:08:55:83:62:f2:32:5c:28:88:
81:7a:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:58 2025 by rpki-client