Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFD74CEC1A511EFA8676977762E951A.roa
File: ACFD74CEC1A511EFA8676977762E951A.roa (raw, json)
Hash identifier: b0tpOCRL2cy9frAsTurGNDhMqy/4Bt+nBRhmntc5rA0=
Subject key identifier: C2:3B:F4:A3:6C:A2:1C:80:B0:A2:B9:57:EE:E1:4A:B0:2D:BF:B9:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFD74CEC1A511EFA8676977762E951A.roa
Signing time: Tue 24 Dec 2024 03:17:59 +0000
ROA not before: Tue 24 Dec 2024 03:17:55 +0000
ROA not after: Wed 10 Dec 2025 03:17:55 +0000
asID: 984
IP address blocks: 154.92.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73963 (0x120eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:17:55 2024 GMT
Not After : Dec 10 03:17:55 2025 GMT
Subject: CN=676a27e7-7fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:1b:77:16:de:02:c7:ad:ce:f8:53:e6:b7:
ad:8c:e5:7f:fa:1c:8e:5d:fb:bc:df:d9:eb:7d:1d:
a5:70:bc:c0:82:3f:36:8b:47:a2:67:a7:71:54:6e:
25:90:23:4d:c5:3d:86:d6:72:f2:8f:3d:8e:7c:4e:
fb:b6:de:76:c3:c5:30:31:fc:6e:dc:24:08:b1:45:
02:ca:55:6f:a2:f9:63:8e:e8:ee:8a:1f:b5:26:ec:
c3:7b:c4:3f:61:0a:72:7c:7c:61:2f:e2:10:27:a4:
67:4b:7b:af:70:17:f1:63:da:01:aa:f8:cd:fb:86:
71:61:53:0e:0f:c7:6f:d0:4d:e8:e2:ec:54:d0:00:
99:34:37:86:bf:96:6f:b9:53:7e:5c:d3:ee:ca:72:
29:ab:30:11:00:22:cf:df:fd:33:36:28:a1:05:80:
92:8d:52:16:22:22:fc:46:fb:0d:26:f9:a3:bb:30:
01:72:36:6e:28:86:1f:8c:48:5d:57:d6:95:52:05:
15:38:be:25:a5:e9:88:eb:02:8d:f9:6c:cd:8e:e5:
42:97:fc:ce:b2:15:c0:57:22:fe:71:aa:f2:55:7b:
61:ee:1b:10:be:7d:38:a4:93:7d:c1:4c:b0:da:0e:
5d:d1:12:bc:e5:04:25:98:18:18:cf:4f:cd:e0:aa:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:F4:A3:6C:A2:1C:80:B0:A2:B9:57:EE:E1:4A:B0:2D:BF:B9:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFD74CEC1A511EFA8676977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e3:5e:a5:4d:0f:d9:0d:bc:1e:1f:be:3e:39:a5:22:36:f7:
27:e2:67:13:23:bf:d3:70:89:e5:e2:cf:bd:40:c9:52:8c:60:
f3:23:0b:57:f1:98:68:b8:d3:48:9c:54:c0:84:64:e7:83:79:
03:30:f9:1f:08:ff:70:65:e1:ee:f5:f3:28:fc:8a:ca:6d:40:
49:e7:a9:2f:8b:47:63:92:f6:d4:45:3b:79:90:e4:c8:fb:56:
49:ef:36:f0:f9:90:44:e2:1d:1a:aa:83:2f:09:5a:9b:18:23:
ee:6b:44:89:2d:dc:20:4f:e7:02:27:bd:cf:1e:a0:cd:c5:79:
56:6a:56:e8:83:ab:13:e5:f9:4c:af:4e:63:b4:3f:2b:67:6d:
ed:58:34:7a:87:bb:1e:da:1a:c4:44:ba:54:6a:af:da:d7:35:
6f:81:e4:1d:51:00:ef:66:1e:ef:35:9a:43:f5:c9:56:97:7c:
84:6f:a7:ef:d1:55:62:4d:b8:62:92:37:d3:d3:d4:a6:c5:c1:
86:83:ae:e9:53:86:25:07:28:02:ea:50:9a:46:ed:5a:36:ba:
22:f5:2c:56:6d:fe:e8:40:47:7b:3a:da:36:56:da:89:71:30:
37:ac:2d:63:b0:c0:db:77:2d:85:02:13:b3:eb:88:1f:94:23:
b7:d7:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:43:28 2025 by rpki-client