Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC85863CC36F11EF92D30563762E951A.roa
File: AC85863CC36F11EF92D30563762E951A.roa (raw, json)
Hash identifier: HZAtUmCLr0m7T9LZJtSKgzC9StboKivsrZfivkKAsa0=
Subject key identifier: 4A:6A:13:F4:97:7E:AD:A7:F0:46:04:0B:FA:98:6F:7A:D6:83:1D:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01271C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC85863CC36F11EF92D30563762E951A.roa
Signing time: Thu 26 Dec 2024 09:56:27 +0000
ROA not before: Thu 26 Dec 2024 09:56:24 +0000
ROA not after: Fri 12 Dec 2025 09:56:24 +0000
asID: 984
IP address blocks: 154.94.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75548 (0x1271c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:56:24 2024 GMT
Not After : Dec 12 09:56:24 2025 GMT
Subject: CN=676d284b-08be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:e3:f9:4d:6a:fd:0f:90:84:f6:be:9d:0c:
b4:db:ac:6b:b9:4b:fb:62:16:0c:e5:e6:5a:41:98:
83:1a:44:c0:2f:86:8b:11:77:72:1d:60:1a:d4:4d:
c7:92:03:65:54:a4:4c:5c:59:a1:65:67:07:f1:22:
6b:42:a3:99:69:69:8e:b5:d8:26:02:25:67:e3:e9:
d1:55:2a:97:3f:13:5b:65:ec:16:b4:24:c3:3d:f9:
08:30:b4:36:95:1d:4a:76:a3:36:eb:67:a9:5f:93:
d6:3e:73:de:86:f7:eb:39:ae:7b:f1:34:6e:77:27:
d7:bd:be:86:54:6e:7e:3d:e8:98:e8:56:3d:59:bb:
a1:9b:7e:28:e6:57:e0:2a:e1:6a:de:37:80:b5:d2:
e9:13:83:e8:ae:45:bf:b8:76:36:6e:9a:51:ef:21:
bd:d2:25:23:bb:5c:f7:8e:4b:68:ac:f8:71:9a:81:
d0:0b:22:b3:cb:61:9a:d3:5e:75:83:79:a0:88:fa:
d5:53:b5:4f:cc:ad:93:77:84:54:b1:f9:83:8e:e7:
17:d7:0a:0e:a9:af:7c:0d:dd:92:50:74:0e:62:cb:
3f:f4:46:70:e4:b1:51:c3:7e:61:e8:f8:d8:ee:b0:
54:f8:50:8f:87:3e:19:be:87:9d:9e:ec:90:1b:63:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:13:F4:97:7E:AD:A7:F0:46:04:0B:FA:98:6F:7A:D6:83:1D:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC85863CC36F11EF92D30563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.165.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b2:56:86:94:5b:05:e1:87:de:76:b3:7c:c4:c9:4f:fe:65:
53:c6:fb:55:82:3c:4c:15:5b:05:b0:a0:11:a3:13:a7:67:95:
79:f8:b4:cf:15:2b:63:26:b3:e2:13:17:fd:d3:bb:d3:8b:37:
f6:2b:ef:b5:01:c6:2c:e9:cf:83:4c:6d:f1:c5:c0:b7:a2:6e:
4e:9c:c7:b2:86:8d:1a:92:21:f1:c2:75:f8:6c:d2:ec:c6:26:
3d:12:26:27:a6:a9:c5:e3:2e:e7:d3:1e:07:f8:c7:00:57:d9:
13:c5:e3:d1:80:f1:1c:28:0d:ac:2a:a6:1b:b7:f6:d2:e2:21:
1f:f2:ea:b3:81:c4:33:c3:c7:d1:61:2e:c4:93:d6:d7:57:b2:
3d:f2:d5:54:a5:f3:e5:3c:18:09:d9:c8:e7:9d:76:ed:5e:ce:
d1:89:5a:ff:53:5c:e3:77:40:7c:b7:b6:da:0d:13:38:b6:3f:
5c:0a:8b:f7:35:b0:e1:97:37:81:ec:20:f1:5d:60:65:81:0e:
c3:78:d6:64:1d:15:33:97:f8:b5:75:09:89:e2:86:c9:af:a7:
b0:f3:d1:77:85:10:bd:fb:4d:a9:ea:48:aa:07:bd:ff:84:4c:
15:d6:ab:8b:67:9f:82:c9:3b:2e:c7:8c:12:4b:9f:3a:88:fc:
ab:d4:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:35:17 2025 by rpki-client