Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD44CAC35311EFA6512BB1762E951A.roa
File: AEFD44CAC35311EFA6512BB1762E951A.roa (raw, json)
Hash identifier: LDEk2gM1eyRsEkFFuEyJFTxcFIX32NfSgObEtX4JDGw=
Subject key identifier: D5:79:31:C2:65:C3:85:E0:61:F7:96:B8:00:59:BB:FD:47:B9:55:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD44CAC35311EFA6512BB1762E951A.roa
Signing time: Thu 26 Dec 2024 06:36:06 +0000
ROA not before: Thu 26 Dec 2024 06:36:02 +0000
ROA not after: Sun 12 Dec 2027 06:36:02 +0000
asID: 17561
IP address blocks: 154.88.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75205 (0x125c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:36:02 2024 GMT
Not After : Dec 12 06:36:02 2027 GMT
Subject: CN=676cf956-54e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:62:5d:a2:8e:69:d8:57:22:2d:ca:34:64:
53:ba:9e:e3:8c:dd:1b:b2:46:81:68:91:c2:c3:32:
90:b6:c7:31:46:4e:41:c5:4c:8c:3a:17:2c:f8:3b:
34:d4:cb:7b:16:f2:28:3d:4a:f3:f8:9f:4f:32:52:
9c:24:0b:f5:93:5e:11:70:e3:9b:3b:df:d6:01:b5:
60:c1:fb:50:61:81:c8:8e:bf:77:70:b9:dc:64:a3:
7a:86:4b:99:d6:8a:76:87:3e:07:5f:a6:e9:d4:1c:
89:74:58:6c:42:4e:76:04:05:07:69:eb:c1:f8:99:
62:57:19:60:af:9a:7e:b5:4d:d1:e0:e8:0b:ff:b5:
24:61:2c:ec:8d:fe:3f:3f:36:87:86:46:31:aa:21:
85:53:1a:cf:cb:fb:3d:72:c4:ec:31:0e:af:67:fa:
37:f0:ea:cb:b3:31:e8:79:fe:f9:12:fa:c8:ee:1f:
28:d4:95:e0:ed:32:5f:48:1e:74:e5:7d:59:1a:b7:
1b:ef:86:0f:92:7d:11:27:9c:69:f5:88:dc:d9:1b:
08:4e:65:98:a7:0f:7e:c1:32:40:39:18:b7:f8:bf:
8c:90:22:73:ba:0b:3e:bc:98:81:e5:ee:47:87:c6:
6d:fb:5f:16:fd:bb:01:58:20:74:9f:29:57:8f:f6:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:31:C2:65:C3:85:E0:61:F7:96:B8:00:59:BB:FD:47:B9:55:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD44CAC35311EFA6512BB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:51:c3:73:d1:9b:9c:50:e3:95:a4:ee:b3:20:a1:e7:bd:3a:
49:f6:00:25:e4:50:d6:b2:bf:0d:28:62:42:64:4a:5c:b8:89:
eb:5e:7b:8f:7a:ed:84:e9:7e:e0:e0:97:af:56:e1:0e:4a:8e:
b2:cf:7f:57:fd:08:0a:ff:2d:a2:74:88:b6:56:f7:51:43:3e:
d3:83:fa:2e:0f:ad:91:4c:23:76:f5:25:70:84:63:f4:38:c1:
35:70:6f:3f:8d:93:e6:c9:83:4a:78:e8:2c:6b:ce:fd:5a:5f:
cf:c0:db:d1:5d:cd:58:70:98:d7:d4:c8:79:ba:45:0e:d7:2a:
7d:3f:4d:04:f0:e8:4b:3b:7e:6f:09:93:8d:d9:88:ad:e8:06:
f0:4a:a6:c4:c8:c2:4d:86:48:76:5b:f4:cf:fa:40:6c:f1:19:
8e:c6:ae:4e:17:12:4c:0b:b1:8b:2f:3a:49:11:82:7e:b6:08:
57:a4:fa:5c:c1:93:5a:19:58:13:bc:29:cf:06:ce:f7:69:91:
b6:7f:66:64:fa:f6:d7:26:dc:ec:e6:b3:9e:02:ec:e6:f2:54:
9a:24:e3:48:a2:c3:23:1a:ff:60:78:ef:26:9f:9f:cc:ba:91:
b1:e3:96:1f:50:89:c5:68:3b:88:7b:ff:c9:8f:c9:f4:fc:99:
79:2f:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:37 2025 by rpki-client