Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87E82ACF44411EFA1539A68762E951A.roa
File: C87E82ACF44411EFA1539A68762E951A.roa (raw, json)
Hash identifier: wdmDpKUPXdR7V+sPSwS+T5reV9iCSzrJlVnUzeDBY1Q=
Subject key identifier: 11:52:9A:7C:A3:CC:A3:BD:64:78:1E:43:8C:1D:07:39:05:F5:67:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87E82ACF44411EFA1539A68762E951A.roa
Signing time: Wed 26 Feb 2025 13:22:53 +0000
ROA not before: Wed 26 Feb 2025 13:22:49 +0000
ROA not after: Sat 19 Feb 2028 13:22:49 +0000
asID: 17561
IP address blocks: 154.82.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91061 (0x163b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:22:49 2025 GMT
Not After : Feb 19 13:22:49 2028 GMT
Subject: CN=67bf15ad-aba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:25:d3:e2:c9:27:14:8b:79:71:e2:7b:33:
0c:7d:af:33:d9:c0:b0:51:f5:cd:7d:94:88:af:ed:
7b:27:6b:53:9f:7a:e8:8f:66:cf:4e:80:25:ab:ca:
f1:30:a8:7e:87:b9:88:0d:4c:dd:eb:87:ea:45:e0:
25:a0:45:85:15:a9:42:fb:4b:69:70:77:bf:f3:f8:
0a:67:39:5e:94:00:a1:68:12:64:ab:94:2f:4a:b0:
16:95:c3:8c:c9:0d:a6:c1:fd:88:cc:cb:db:85:2e:
e1:34:83:19:1d:6b:91:95:4c:ed:01:08:00:bc:85:
d5:d9:70:f0:f3:07:72:94:a8:e1:88:1f:dc:23:e6:
f1:b5:fb:09:bc:c7:5b:b1:69:d6:0c:ee:68:9f:4a:
16:3f:63:30:f8:bc:7c:10:0e:74:12:1d:f7:ff:67:
89:ed:97:7b:37:e6:fc:8b:ab:1b:17:90:a9:35:bd:
a2:71:12:9e:0a:32:50:fe:77:ff:3d:08:72:06:1a:
19:54:d6:b1:bf:c0:ae:bb:b2:db:bd:85:30:cd:62:
ef:e6:1b:a5:90:d5:54:41:93:37:69:e3:a1:a7:1e:
91:45:69:6a:4a:4b:f2:8c:1f:80:d1:99:44:be:64:
bf:aa:92:d9:90:56:9b:21:04:b7:2f:df:18:56:7b:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:9A:7C:A3:CC:A3:BD:64:78:1E:43:8C:1D:07:39:05:F5:67:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87E82ACF44411EFA1539A68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2d:48:77:4e:6d:07:69:0d:e7:7e:2b:84:0a:84:8d:a2:cd:
27:7b:f0:01:b6:7a:79:48:55:13:28:a1:47:a6:56:28:f0:d1:
a0:be:ff:d1:2f:fd:90:d8:1a:62:df:d0:ee:19:27:21:73:92:
12:c1:0f:34:77:87:c4:b7:c8:3a:71:23:92:ec:19:92:9c:91:
5c:d1:2d:32:5c:00:49:99:9b:9f:71:2c:bf:22:87:b1:f4:a8:
a5:17:4e:7b:93:b9:fb:fc:a3:04:95:f8:0f:c6:5b:d7:d8:9c:
05:a6:48:29:37:5d:0e:e7:4f:7f:e6:65:e0:5a:91:1d:d0:74:
88:ee:c0:d7:42:2b:b7:05:31:5f:d5:9a:19:c9:3f:36:9d:19:
24:8c:9e:23:fa:1e:c5:b3:54:f5:2d:b8:15:b6:a5:88:1c:07:
03:d6:55:94:93:de:4d:e7:ee:02:4e:27:76:90:51:0c:e1:8f:
e3:c9:b2:fb:02:2b:11:04:bf:1f:8a:33:d2:46:9c:18:99:a8:
b3:af:bf:b6:94:01:fb:de:c6:84:15:eb:51:5e:0f:29:f0:17:
a6:b0:43:b5:3d:53:a4:be:73:90:6b:81:2e:67:a2:13:82:31:
5f:8c:65:f1:ce:a7:91:e8:b8:84:80:4b:37:e9:25:4a:b9:a1:
20:a0:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:37 2025 by rpki-client