Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9678CD4C42111EF97638E57762E951A.roa
File: C9678CD4C42111EF97638E57762E951A.roa (raw, json)
Hash identifier: tEny6CiWDEZqE46YvPD/4j/u5Zz4sKceYw+yFvAjq7M=
Subject key identifier: CA:F1:76:93:D2:B1:B2:11:03:0C:6C:9C:55:C8:12:75:DE:4D:D5:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9678CD4C42111EF97638E57762E951A.roa
Signing time: Fri 27 Dec 2024 07:11:26 +0000
ROA not before: Fri 27 Dec 2024 07:11:23 +0000
ROA not after: Sun 12 Dec 2027 07:11:23 +0000
asID: 17561
IP address blocks: 154.201.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76231 (0x129c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:11:23 2024 GMT
Not After : Dec 12 07:11:23 2027 GMT
Subject: CN=676e531e-3cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:67:31:f4:90:9d:30:00:2d:ec:4e:9e:c5:
0d:b3:c5:28:23:4c:a4:6f:0e:d7:5a:8e:37:0c:ba:
d8:f1:94:d9:01:ec:7b:99:a2:a7:1e:98:8a:67:11:
ad:30:e3:d3:3f:38:b4:f3:d9:66:fb:f2:93:f5:a0:
96:1d:a6:a7:41:0c:9a:1b:3a:cb:50:60:ef:9d:04:
c7:ab:45:13:c9:09:90:34:43:f4:26:00:1a:bc:68:
e3:7c:3e:b3:e5:99:e6:a1:da:55:d0:4a:40:32:0a:
28:99:aa:b8:8c:97:67:17:58:74:7f:62:c2:f0:58:
50:9b:2c:c0:36:5e:6a:24:ce:21:3a:49:91:eb:68:
35:df:b7:7f:24:02:87:13:a0:94:14:e5:eb:0d:7c:
19:34:24:5e:aa:c4:68:7e:88:e3:fe:b5:5f:54:c7:
5b:dd:e5:0d:80:b3:0c:0d:85:a4:8d:cf:a9:8e:e2:
4b:3a:8f:fb:cc:bb:57:dd:6b:b6:d2:99:d8:68:9f:
35:a7:19:aa:00:76:da:52:d6:43:e5:86:fb:c0:ba:
a8:dd:a1:4f:42:55:9b:35:75:93:8c:e9:ae:b7:13:
93:78:37:18:10:0f:f6:84:28:b5:46:cb:de:68:3e:
d0:72:0a:fa:82:af:3b:b2:3b:25:89:77:e1:99:fe:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:76:93:D2:B1:B2:11:03:0C:6C:9C:55:C8:12:75:DE:4D:D5:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9678CD4C42111EF97638E57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b3:26:71:ae:50:81:1d:94:a7:93:a0:e5:0e:57:ed:00:8b:
67:8a:00:78:7c:83:e6:6c:d5:43:14:ed:c3:0b:ef:ed:75:b7:
60:72:90:d4:15:fb:bd:a8:05:47:61:f7:df:34:6c:e3:f5:e6:
e7:63:04:5f:41:3c:09:f8:8e:81:2d:9f:8d:1c:e0:71:77:de:
59:dd:31:4c:4f:ea:4f:fe:37:05:54:87:d3:83:2f:54:51:1d:
cc:44:6d:6d:dc:ca:7b:b5:15:77:03:93:7c:f6:38:ff:45:83:
ba:6c:95:c3:03:77:c7:ed:b1:75:66:2d:07:e4:8f:ec:97:71:
6a:75:31:64:a4:1b:68:7f:d8:0e:6a:55:13:f8:03:b9:c0:72:
6d:93:3a:01:9a:9b:5f:d1:87:f3:ff:70:91:11:12:1e:52:94:
91:d1:77:b2:8c:97:2a:1b:c1:ac:a6:fd:46:93:a0:c0:aa:8d:
6d:98:b0:72:df:ef:bf:a3:4d:f4:a9:7b:77:5c:5c:27:03:b7:
73:9c:40:db:2b:04:34:58:76:d1:84:32:06:1c:65:c6:fd:07:
2b:9e:33:7c:8b:c3:13:5f:b5:a1:0d:a7:5b:27:89:0d:3a:d2:
0e:10:10:e0:84:be:6d:f2:5d:79:1c:8f:eb:a1:a3:2c:9f:fc:
54:40:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:12 2025 by rpki-client