Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF15711EC35111EF858464A3762E951A.roa
File: AF15711EC35111EF858464A3762E951A.roa (raw, json)
Hash identifier: /aKBFgZqH0s1RTM5smzf6kTaGR1Em3Nuk/lf5gGP62U=
Subject key identifier: 4D:A9:C0:95:CE:76:E6:7F:E8:27:BE:A5:A6:7A:F2:A1:9B:12:C5:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF15711EC35111EF858464A3762E951A.roa
Signing time: Thu 26 Dec 2024 06:21:47 +0000
ROA not before: Thu 26 Dec 2024 06:21:43 +0000
ROA not after: Sun 12 Dec 2027 06:21:43 +0000
asID: 17561
IP address blocks: 154.95.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75183 (0x125af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:21:43 2024 GMT
Not After : Dec 12 06:21:43 2027 GMT
Subject: CN=676cf5fb-21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:c2:6b:0c:b1:06:db:28:c8:d7:e0:25:bf:
b4:9f:2e:8e:0f:e7:56:bb:35:c0:4b:df:82:00:07:
c4:9b:3e:bf:6d:41:23:32:cd:8e:a0:bc:e7:03:37:
4a:ff:2e:e3:14:25:d0:e3:68:fd:d8:ea:56:47:75:
74:da:1a:bc:0a:2c:cf:4a:c7:28:7d:ad:71:e5:d2:
ad:16:60:ba:0d:f3:6f:d9:f8:27:99:c4:90:c2:50:
70:85:45:95:2c:f9:b9:33:de:a8:19:d9:46:a2:24:
cf:19:64:75:55:60:23:6e:58:0a:c3:a8:9f:84:ca:
5a:12:b4:5d:84:84:35:00:40:92:87:3b:a8:84:a3:
be:13:0b:b4:85:0b:7f:37:e6:2b:6e:44:20:46:5d:
be:05:61:d2:9f:3b:40:50:cc:42:9a:07:7c:36:d0:
f5:e5:af:2f:df:de:2a:8f:3e:df:6c:b9:23:97:f7:
c3:50:4f:82:07:e9:3b:43:b7:5f:8a:f0:85:8e:d7:
be:26:67:4e:a5:94:dc:dc:f8:15:69:59:e6:24:ac:
82:86:7f:e6:14:38:47:96:88:3c:a2:17:8d:7b:36:
54:0c:f6:36:63:16:0e:ac:17:55:d5:84:c7:10:ad:
80:45:b2:08:f8:25:df:1a:3f:c0:17:f8:dd:2f:ac:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:C0:95:CE:76:E6:7F:E8:27:BE:A5:A6:7A:F2:A1:9B:12:C5:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF15711EC35111EF858464A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:65:ae:8d:65:57:58:df:b3:cb:bc:f0:c6:b3:c2:af:97:66:
0e:4e:c8:f2:94:3c:33:42:4a:4d:68:18:24:63:11:30:c9:69:
77:44:4d:fd:d8:ae:d2:e7:d2:99:83:f0:42:04:b5:30:3e:ac:
79:fc:bf:d9:43:05:38:1a:31:82:31:68:55:74:20:04:91:0e:
c7:e6:2b:05:a9:1b:0f:a4:3d:ce:8e:5f:47:03:2b:32:20:e3:
cd:76:02:29:11:ca:43:56:2f:22:4e:45:83:27:e1:51:26:74:
31:8a:96:61:50:47:05:06:dc:19:fb:51:c5:04:77:71:bb:44:
ab:a8:99:91:f9:e8:39:82:8c:6b:53:ce:de:b4:29:ff:7d:69:
c6:03:5c:d7:c8:85:3f:9b:2b:a6:7e:00:04:51:38:bb:aa:ba:
01:d2:8a:32:b6:6e:ed:5d:8e:c9:6d:00:9a:9d:7c:9a:63:c4:
b0:a9:65:04:41:57:2d:25:1e:4f:af:6d:f2:5d:df:d2:9a:61:
23:5e:98:2c:34:3b:ef:7e:e8:a2:d4:81:84:7b:dc:f8:f2:ee:
d8:1b:16:7f:f6:43:fe:9e:62:23:51:e2:95:c0:9f:44:2d:53:
ee:75:99:88:6e:d1:c4:d3:b3:9c:25:92:f4:f7:db:1c:bc:3b:
bf:fe:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:42:58 2025 by rpki-client