Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3C0629EC53711EF82E96FB0762E951A.roa
File: C3C0629EC53711EF82E96FB0762E951A.roa (raw, json)
Hash identifier: oqdeHwLXz0qcVnm5ntfV4iWcRMtX3jW+IP7A/z5Ec3Y=
Subject key identifier: 02:57:41:E2:74:F5:40:2A:43:FD:18:77:82:1D:DE:09:8F:47:B7:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3C0629EC53711EF82E96FB0762E951A.roa
Signing time: Sat 28 Dec 2024 16:21:17 +0000
ROA not before: Sat 28 Dec 2024 16:21:13 +0000
ROA not after: Sun 12 Dec 2027 16:21:13 +0000
asID: 17561
IP address blocks: 154.204.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76839 (0x12c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:21:13 2024 GMT
Not After : Dec 12 16:21:13 2027 GMT
Subject: CN=6770257d-38b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:03:07:df:24:15:3b:f4:2d:10:9b:2f:36:
ee:41:64:6a:a1:08:4f:37:55:15:6f:ef:4a:5c:22:
68:2c:8c:a9:40:43:c2:14:1e:d4:3e:50:84:93:0c:
dc:39:3a:b4:ed:b1:a4:cf:2e:a6:34:20:34:b0:21:
bd:a6:03:ee:03:80:dd:b0:fd:96:6b:a5:a4:44:75:
b2:69:50:87:85:23:63:f2:af:1b:31:e6:26:28:2a:
ce:e8:3a:de:42:d2:58:e1:52:14:96:e7:c7:3a:05:
00:8d:f2:b5:81:14:2b:09:00:f6:35:f1:91:a4:1c:
ea:af:8e:94:a5:fd:40:04:56:26:0a:52:02:5e:3f:
ba:b9:ad:a2:7f:8d:a6:3f:38:43:ba:64:0e:20:d1:
1e:c2:0f:94:c9:d7:a9:ca:38:83:52:23:ba:47:0d:
2e:de:cd:ca:f5:08:a5:ac:39:3f:b6:a8:79:1b:22:
db:30:1e:b6:48:53:63:15:31:2d:f4:45:da:9f:68:
59:d0:f0:00:61:a5:19:12:c0:a6:40:95:79:a1:c3:
85:49:ba:a3:77:d3:eb:d9:3e:43:57:da:f4:03:20:
d7:6c:c5:25:58:b1:f4:d5:f0:f1:30:cb:45:46:ef:
71:a5:c0:02:f9:62:f0:62:91:99:bc:ed:c0:79:40:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:41:E2:74:F5:40:2A:43:FD:18:77:82:1D:DE:09:8F:47:B7:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3C0629EC53711EF82E96FB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0a:24:f6:e7:58:e2:b0:2a:91:cd:3f:05:3e:56:c3:6b:63:
27:e2:6c:95:2f:4b:8a:45:62:a9:57:6a:8a:95:15:c3:4f:5f:
a9:56:14:06:73:e0:8d:5d:57:79:67:45:7a:a3:e7:01:76:71:
61:38:02:88:ca:4b:dd:6f:17:0d:ba:fb:c9:b8:96:8a:a9:29:
6a:81:50:8d:bf:70:6a:de:e3:09:f5:50:28:c6:d2:e7:65:35:
3a:a5:56:70:98:1a:38:82:ff:d1:4a:e1:ec:cc:64:93:39:0d:
de:0b:3f:a7:8d:45:c4:6d:ca:95:6d:12:a0:f2:15:53:18:6b:
7d:c6:2d:a4:06:5b:3d:c6:30:2c:56:68:fd:aa:c4:c8:86:ed:
3a:6a:73:4d:2e:5e:08:ac:b4:4e:96:89:5d:4f:59:0e:30:05:
84:d2:94:8a:78:57:05:1b:50:c1:6e:2a:51:e7:dd:bd:47:6a:
78:cc:9e:5d:1a:51:26:fd:42:cd:57:99:f4:7e:f9:8c:98:c7:
8c:1e:60:7c:13:e7:6d:84:68:0d:58:15:92:0c:06:75:35:ee:
6f:59:28:52:da:45:a5:38:9c:fb:72:c1:55:cf:7b:4b:5a:ce:
1c:42:18:2a:34:eb:b8:20:fc:ef:ce:81:3d:c8:88:dc:46:6a:
15:3f:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:00 2025 by rpki-client