Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EEA6B8C40811EF8A303CB9762E951A.roa
File: C6EEA6B8C40811EF8A303CB9762E951A.roa (raw, json)
Hash identifier: 0b92+A9OPuw2i2KbuSY6wqEChQjAtAETKjhb2HihXB8=
Subject key identifier: 91:4B:41:12:15:57:76:82:91:3B:04:7A:CA:9F:97:D0:4C:62:99:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EEA6B8C40811EF8A303CB9762E951A.roa
Signing time: Fri 27 Dec 2024 04:12:25 +0000
ROA not before: Fri 27 Dec 2024 04:12:21 +0000
ROA not after: Sun 12 Dec 2027 04:12:21 +0000
asID: 17561
IP address blocks: 154.195.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76029 (0x128fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:12:21 2024 GMT
Not After : Dec 12 04:12:21 2027 GMT
Subject: CN=676e2929-756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:a8:9e:3d:1d:d1:f7:46:a2:82:0b:b1:eb:
f0:62:bb:1a:73:0f:2a:29:40:52:54:2f:eb:ef:b4:
09:b6:5f:d1:94:6f:66:6b:a9:81:13:90:a8:c7:ea:
ed:c0:b7:b9:46:ed:01:b6:47:78:d4:83:6a:17:da:
f2:2a:3b:87:f3:8f:f9:72:6c:70:14:35:b2:3a:cb:
fe:15:30:a1:e6:8d:8f:e8:6c:95:b1:f5:c5:ad:80:
e1:57:37:42:53:78:22:51:a2:69:c1:6a:8b:4b:58:
de:15:a1:5e:d5:77:b9:9d:68:8c:6d:bc:70:cc:9e:
56:dc:e5:08:eb:f8:26:d2:60:5c:34:c2:35:c3:1b:
24:4f:e1:e4:bf:5c:8c:b7:76:58:7c:26:c2:21:e2:
97:ac:57:7c:19:55:ae:68:fc:d7:fb:18:85:57:bb:
a3:3c:3f:d7:9b:b8:47:52:2c:c7:d1:52:b8:51:a2:
63:a9:7e:94:3b:d4:46:f3:69:ac:59:e2:ae:fa:bf:
fa:71:f9:4b:86:31:dc:a9:58:3e:74:50:b0:7b:45:
c1:3e:f4:5d:96:8f:1d:9e:47:71:90:6e:70:7b:ad:
d9:87:54:99:c7:82:cc:a2:87:12:d6:54:df:7c:ba:
f8:31:fe:a1:63:aa:07:49:94:64:8a:a3:45:68:50:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:41:12:15:57:76:82:91:3B:04:7A:CA:9F:97:D0:4C:62:99:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6EEA6B8C40811EF8A303CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:47:07:a6:44:f4:70:f6:9c:f1:6b:96:dd:31:8e:1c:30:8f:
45:a2:f7:19:f8:d6:00:90:ad:bf:a4:aa:6f:f1:55:d2:3f:80:
ce:02:64:7d:71:45:53:8d:f6:52:42:a5:03:c9:a5:5c:3b:fa:
04:a3:6c:fe:c8:30:01:67:eb:41:a2:b9:69:f1:ee:c3:a4:d5:
21:ff:96:5e:95:bd:c0:9b:d6:c2:01:b9:08:02:69:b8:a1:2b:
20:ca:d2:ca:e0:4f:e1:ac:21:dd:a2:36:8b:a3:a1:9c:ee:c7:
ee:f3:e4:5a:be:1e:3b:ac:cd:7d:f7:24:1c:dc:54:1f:74:18:
6e:56:3e:e7:cd:45:95:2e:68:cd:31:40:1c:f4:9e:18:32:23:
f6:2f:19:75:3c:7c:f3:be:98:5b:2e:b2:6a:40:08:f3:d0:a2:
af:79:50:28:fe:98:5f:12:36:fc:3b:9a:82:20:90:42:16:19:
4c:a9:25:e9:f1:e8:07:f8:10:bc:8f:74:18:70:67:f7:39:ec:
95:ee:f0:33:07:a1:96:68:88:09:4f:b3:99:5d:16:71:07:a6:
4f:42:89:3d:ab:dc:0b:8a:b7:bc:c1:c6:6e:1d:0b:93:4a:9f:
e5:c0:78:41:e0:3c:5e:87:16:1f:60:a1:91:5e:63:e0:2a:62:
61:da:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:45 2025 by rpki-client