Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE82477AC52411EFB24BACB7762E951A.roa
File: AE82477AC52411EFB24BACB7762E951A.roa (raw, json)
Hash identifier: 6rEGS+12kY7UKDHeC7e7ziCJTpE67IZ+cyrxa+ELa3o=
Subject key identifier: E7:57:A4:C3:2E:08:1F:C2:5B:1F:C3:5E:7E:BA:E7:70:78:BA:AF:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE82477AC52411EFB24BACB7762E951A.roa
Signing time: Sat 28 Dec 2024 14:04:41 +0000
ROA not before: Sat 28 Dec 2024 14:04:37 +0000
ROA not after: Sun 12 Dec 2027 14:04:37 +0000
asID: 17561
IP address blocks: 154.203.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76665 (0x12b79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:04:37 2024 GMT
Not After : Dec 12 14:04:37 2027 GMT
Subject: CN=67700579-a7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:87:78:97:fd:00:2d:c5:75:be:87:16:95:
e5:47:1c:4b:33:1f:50:32:38:0c:55:06:b2:b5:0e:
a4:47:31:16:12:1b:fd:11:48:69:3b:97:11:50:c7:
5f:89:68:2b:78:b9:94:a7:e0:81:e3:f1:28:82:65:
54:ee:1b:25:02:21:5d:7a:3d:0e:16:78:14:82:e2:
dc:94:5c:04:fc:7d:16:e7:b6:41:a4:69:9a:d0:cc:
39:f5:40:73:5f:6f:2f:cd:80:d2:33:c4:18:2b:1a:
b2:c4:0c:e5:e4:b6:8c:e8:eb:16:51:ad:2c:ab:d9:
02:b5:ea:4d:9d:c6:6f:87:30:0b:59:03:c4:3e:21:
39:f1:f9:5b:b0:f5:39:db:5b:0d:2f:9a:b9:23:55:
fe:2c:57:92:d7:2e:cf:95:ef:97:0c:7c:59:e9:aa:
b7:38:94:d8:35:f1:d8:ec:86:ca:60:a4:23:78:fa:
41:85:d2:1d:5f:6c:f5:4f:70:75:8c:74:bb:77:d5:
63:2c:5d:a8:d8:47:c8:ac:36:0a:d6:fc:3c:ec:62:
a8:ea:ef:09:52:eb:2f:e8:55:0f:36:bf:13:a6:3c:
1d:d7:de:e2:93:d6:52:08:b4:9e:39:e1:cd:c7:7a:
d9:64:82:41:71:53:0b:45:ef:19:2d:73:5a:0f:a7:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:57:A4:C3:2E:08:1F:C2:5B:1F:C3:5E:7E:BA:E7:70:78:BA:AF:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE82477AC52411EFB24BACB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:09:b9:86:ba:22:36:69:24:49:3a:1a:e7:b1:bb:4d:1e:b4:
fa:16:33:80:df:e1:b1:ef:33:38:10:eb:26:99:d5:8f:f3:d7:
fa:62:df:6c:8c:3e:1a:93:9d:31:fa:17:b0:25:87:5c:31:93:
f3:73:86:54:b1:db:10:4c:42:ee:3a:48:51:a0:b3:16:a3:ec:
da:b7:57:15:56:c4:65:ce:27:6f:31:88:f5:c1:6c:c7:4e:ac:
e9:17:67:15:52:15:1e:4c:3f:76:fb:49:51:b5:48:4f:67:8a:
1c:84:e7:12:d8:ff:6d:8b:25:79:4a:1a:28:63:e2:8b:83:6e:
20:f4:2b:57:49:9d:c0:ea:1b:e2:e7:a0:61:2a:2a:6b:79:f7:
99:4b:b7:ff:df:77:fb:4d:5b:7c:4a:05:65:58:a7:e4:de:cd:
42:8e:59:7c:1c:db:7b:6e:71:f4:38:45:f9:d4:0f:5c:14:b4:
79:3d:99:d0:0e:d0:90:3d:ce:70:d2:3f:19:c3:3d:7b:b0:c5:
f3:43:65:ff:39:56:73:64:1e:d5:87:a2:a3:f0:ab:de:1c:65:
aa:49:c3:a8:2d:95:41:46:b2:28:f7:9e:7d:9e:38:2e:3b:91:
a5:2d:c6:a4:dc:b1:9b:7c:60:f6:eb:51:95:c9:d5:65:3e:84:
e5:c7:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:11 2025 by rpki-client