Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC78CB44C3CF11EFAB15C8BB762E951A.roa
File: AC78CB44C3CF11EFAB15C8BB762E951A.roa (raw, json)
Hash identifier: +7iZf36ZA8TL5j4jAh1+TO6awtqM8LUu8r/n51gtHz0=
Subject key identifier: C4:45:66:EF:C4:FB:23:23:00:8D:F8:A6:22:FA:39:21:BF:83:05:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012832
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC78CB44C3CF11EFAB15C8BB762E951A.roa
Signing time: Thu 26 Dec 2024 21:23:39 +0000
ROA not before: Thu 26 Dec 2024 21:23:35 +0000
ROA not after: Fri 12 Dec 2025 21:23:35 +0000
asID: 984
IP address blocks: 154.83.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75826 (0x12832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:23:35 2024 GMT
Not After : Dec 12 21:23:35 2025 GMT
Subject: CN=676dc95b-7032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:e5:1b:88:70:2c:b6:2b:0c:60:ad:65:8f:
8a:05:65:77:20:9e:5a:2d:7c:df:ba:b7:d9:21:84:
e3:ac:a5:b5:8a:49:19:f7:65:df:03:de:00:c9:a5:
97:c1:a4:02:e8:96:13:5c:c0:fe:83:6c:81:c8:93:
9a:64:39:b0:49:82:45:36:b7:16:c0:a0:58:3a:d1:
26:24:60:ba:53:5d:18:a6:ec:26:6e:b7:d5:0e:f2:
2f:c0:e6:e4:4c:18:71:dd:5e:a4:70:62:4a:a0:62:
44:f3:fd:d2:49:2c:e2:61:4e:19:14:29:a5:96:09:
af:11:99:3c:98:53:70:b0:f0:b7:e9:e2:68:b0:e9:
6d:47:d8:31:f8:dd:0c:99:49:cf:de:78:e5:31:d6:
7d:7a:26:09:78:0b:5b:79:ad:9f:df:8f:f2:a2:53:
75:03:13:58:b7:28:8e:c2:cb:d2:f5:29:99:2e:50:
77:dd:c3:5e:f2:01:81:6f:db:4b:30:a9:51:ee:ab:
ef:00:b1:90:20:1d:d5:08:39:53:7e:82:c9:5b:6e:
30:8a:84:26:98:bc:2d:6c:eb:95:d4:0e:7a:c1:50:
9b:0a:3a:eb:e9:52:a2:9c:5d:fd:71:a4:49:c7:a4:
f6:82:a8:27:72:07:ab:7d:42:73:ca:5b:9b:8e:f9:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:66:EF:C4:FB:23:23:00:8D:F8:A6:22:FA:39:21:BF:83:05:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC78CB44C3CF11EFAB15C8BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:29:6f:d7:39:22:30:1d:0c:10:c2:33:31:bb:28:bb:97:e2:
ff:92:ad:78:c9:e9:d2:b5:d8:29:26:fb:ba:22:3f:55:ea:81:
4c:0b:75:e0:8b:53:e6:ec:d6:12:5e:9f:2d:6e:f1:31:a6:7a:
37:eb:a2:6a:74:45:64:73:12:57:b0:17:2c:0a:7f:76:4e:cc:
a2:c3:7a:5f:be:9c:dd:c7:07:bd:db:65:7a:57:74:b9:1b:b4:
ce:25:91:5e:fb:83:61:82:68:43:e3:d1:2b:95:70:d1:70:4f:
a3:04:c3:d8:ff:24:b2:94:d4:1d:dd:0a:b0:14:f7:c3:c1:f0:
15:ed:eb:a9:64:ef:2a:3e:09:30:f9:5c:cc:28:fd:fd:f2:76:
2f:18:6f:a3:f6:30:8f:3e:1f:25:09:85:ed:46:07:21:bd:8d:
3f:5b:93:bd:00:55:d1:e0:d1:a2:10:99:1e:3e:95:25:de:cb:
d2:6d:f7:6c:b8:62:dc:5a:b6:3b:b7:f6:bd:73:6c:91:79:79:
6a:c9:80:8c:29:56:1a:77:69:3d:9b:b3:b5:91:ba:5b:c5:43:
f0:60:0b:c6:86:ab:b2:d9:6e:6e:37:2c:ea:17:a1:5b:89:7b:
95:64:c4:e9:01:bc:47:89:26:86:ad:a4:7f:ce:4d:b8:06:d0:
fa:89:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:33 2025 by rpki-client