Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B927787CC51E11EF9C306E92762E951A.roa
File: B927787CC51E11EF9C306E92762E951A.roa (raw, json)
Hash identifier: cqfaeeJiKusk13L9Gy0r5hB1ZSXm1QgFHU0tikQCqEE=
Subject key identifier: C0:56:35:85:5B:7F:62:B5:C6:FD:1A:3A:F3:BD:B4:B3:04:69:2A:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B927787CC51E11EF9C306E92762E951A.roa
Signing time: Sat 28 Dec 2024 13:22:02 +0000
ROA not before: Sat 28 Dec 2024 13:21:58 +0000
ROA not after: Sun 12 Dec 2027 13:21:58 +0000
asID: 17561
IP address blocks: 154.203.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76609 (0x12b41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:21:58 2024 GMT
Not After : Dec 12 13:21:58 2027 GMT
Subject: CN=676ffb7a-7ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:f9:24:c4:2e:b9:f8:08:7d:08:67:79:ae:
0b:89:b4:88:ba:82:9d:9c:ab:31:52:00:6c:83:ed:
50:9a:e6:f6:4f:0e:f5:3f:fd:c0:83:ed:d2:0c:2c:
76:98:b4:b7:ae:25:87:ff:47:57:e7:74:77:79:a5:
48:0f:5d:61:7d:38:40:46:a7:3e:10:58:d7:c7:13:
14:a0:22:73:61:b8:11:59:0a:c7:cd:5b:f3:6e:7e:
ca:5d:a1:db:3b:34:7b:ee:a1:f5:e1:3b:3b:24:de:
8d:bf:f4:ca:55:08:6f:a4:de:d0:0c:73:50:60:5c:
9b:57:4f:b0:13:64:9d:44:1c:e8:7e:5c:13:83:ed:
13:12:37:c3:b9:b6:91:98:fa:74:4c:79:24:a8:c4:
39:c1:4d:23:d9:8f:07:f8:48:fa:71:67:29:56:5f:
00:f5:1b:a5:2e:b3:9b:4a:76:bd:55:08:5e:41:7a:
25:28:32:93:59:40:c6:f4:e9:87:c0:3f:25:8e:18:
0e:30:79:c8:53:fe:3f:71:8c:d5:c2:d0:8f:18:17:
3a:f8:77:30:26:26:4e:ca:ff:c8:e8:87:c9:71:47:
eb:cd:a6:da:d7:6b:24:68:ef:71:53:5f:de:31:33:
69:f5:ad:dd:54:cd:30:84:93:d9:ad:08:7e:cb:a8:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:35:85:5B:7F:62:B5:C6:FD:1A:3A:F3:BD:B4:B3:04:69:2A:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B927787CC51E11EF9C306E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.45.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b7:3a:3d:12:2f:e4:b2:3a:fa:93:37:7d:76:6c:6a:1b:65:
f2:00:5f:dd:f9:5f:45:c0:ad:f4:aa:c3:fb:7b:11:78:9a:6d:
1e:a8:cf:9a:09:dd:ff:1a:71:71:4a:bc:a9:81:6e:ca:50:49:
bf:69:8d:2a:4e:9b:37:b4:3d:6b:bc:d5:f9:31:96:c3:74:56:
1c:c5:49:8d:9e:f4:93:4c:e9:a1:61:5d:44:79:1a:4b:fc:29:
18:fb:e9:37:33:97:13:b6:e5:90:ff:d4:ac:51:f9:8f:c3:8d:
7e:74:a7:b9:84:e1:01:f3:ad:7d:8b:15:6a:83:57:0a:6d:b9:
4e:8b:43:c9:e9:b7:df:80:ed:98:22:2d:1a:ff:cf:33:2a:88:
c3:a1:9e:76:f4:62:a8:39:dc:4d:dc:86:2c:26:d3:b3:1c:ee:
9a:76:de:cd:fa:8e:fa:ba:ac:bb:e7:27:7b:24:69:d7:12:46:
59:12:54:c2:c3:c3:7a:cf:0d:2d:1f:0a:22:bb:e3:d5:91:e3:
cd:10:15:7f:bd:40:a9:3f:34:e3:81:7b:b7:f8:7c:3a:f3:b4:
1b:4c:ab:22:93:0f:6d:60:80:1c:03:86:24:47:d5:32:f5:08:
59:c1:7b:61:cb:f3:86:39:84:33:1a:96:fa:1a:89:60:da:1b:
4b:df:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:07 2025 by rpki-client