Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00A5B62C36911EFA62D63BC762E951A.roa
File: B00A5B62C36911EFA62D63BC762E951A.roa (raw, json)
Hash identifier: zpXnC+HmkBNv+AhELIVtiyQTOsUb/ghIsM+sywi7LTc=
Subject key identifier: 2D:71:4A:6C:9A:6F:36:A9:1F:55:9F:1B:36:A4:37:03:AA:6E:5A:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00A5B62C36911EFA62D63BC762E951A.roa
Signing time: Thu 26 Dec 2024 09:13:36 +0000
ROA not before: Thu 26 Dec 2024 09:13:33 +0000
ROA not after: Sun 12 Dec 2027 09:13:33 +0000
asID: 17561
IP address blocks: 154.94.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75484 (0x126dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:13:33 2024 GMT
Not After : Dec 12 09:13:33 2027 GMT
Subject: CN=676d1e40-1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:87:1b:d8:99:05:d1:16:69:83:1c:99:35:
ed:7b:77:4e:e1:de:e4:08:e4:d5:b8:04:f3:0b:15:
19:e8:08:3a:e8:60:45:83:38:23:49:65:f7:42:ba:
3b:b2:e0:35:06:ca:fd:58:1f:03:2c:aa:95:d7:d3:
13:b1:5a:33:57:6c:a8:da:e9:af:b3:9a:5b:ad:71:
bd:61:fd:7f:66:cf:d2:bd:6f:a3:9b:98:cb:62:de:
72:ea:eb:b9:48:b7:55:98:53:62:4f:57:61:27:2b:
2f:f8:ea:85:b0:96:7e:49:a2:07:8f:08:8b:89:42:
ba:60:87:67:b0:0e:38:c7:9d:17:fd:37:97:75:a1:
ca:5d:3e:ad:dd:9e:8d:29:e7:45:c4:ea:ef:ae:30:
e6:43:50:78:15:20:e8:29:28:8f:49:bb:03:b6:dd:
2e:0d:d7:e4:8c:f6:e1:25:10:85:41:87:0c:82:a4:
99:cb:a4:99:72:9e:f1:ae:43:53:79:94:c6:d9:11:
03:dd:0d:62:6c:a5:19:04:f5:e7:ad:18:c5:c4:25:
98:9a:f1:10:66:62:7f:cd:28:dd:d7:a0:f4:67:f9:
6b:6a:fc:f9:9d:68:59:17:f2:b5:53:b2:b0:33:f6:
6c:bd:db:9b:01:20:f5:96:c0:c3:7a:dd:6d:12:a5:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:4A:6C:9A:6F:36:A9:1F:55:9F:1B:36:A4:37:03:AA:6E:5A:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B00A5B62C36911EFA62D63BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:aa:81:71:b8:40:4a:4c:0f:31:09:19:b1:74:bc:dd:50:8d:
90:fc:4e:3a:f0:5e:b5:c8:1e:bc:b3:84:48:96:2a:f3:ef:80:
90:61:be:ed:63:a7:b9:34:48:3c:04:1b:18:ab:04:f5:04:0d:
ca:08:86:69:2d:36:30:fa:37:c2:24:08:0c:aa:3f:c4:7c:42:
29:3e:6f:9b:5a:50:55:fc:1b:89:54:f0:9a:63:5f:49:fd:f8:
aa:ce:cf:28:39:f9:07:a3:07:4d:5a:fb:23:a2:c4:2f:8d:64:
96:05:a6:47:68:5b:b8:e3:8e:b7:71:d1:6e:59:a8:a3:ec:1d:
99:09:42:5f:d1:7b:24:38:3c:ba:9b:f3:4e:60:69:22:a1:bb:
bd:90:f5:fb:e3:eb:08:e7:ab:67:c1:ad:59:13:34:76:7c:f6:
0f:15:6f:31:db:17:72:9b:0c:35:f2:53:ff:35:ab:7c:b4:9f:
83:48:65:3c:6d:0c:79:33:ef:4e:ad:6a:49:a7:5f:7a:43:0b:
d0:ea:e5:16:d4:84:d4:4f:5b:03:cf:73:cb:f0:bc:91:e0:84:
2f:9d:ad:a1:31:7a:58:ca:79:2e:4e:86:e5:29:03:44:81:11:
89:44:1e:04:f1:f4:d8:c9:a8:f8:cb:90:6b:f2:58:89:8e:10:
7c:49:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:02 2025 by rpki-client