Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB25E4CC53A11EFBCBB6E43762E951A.roa
File: CAB25E4CC53A11EFBCBB6E43762E951A.roa (raw, json)
Hash identifier: bN7DlE8esFUmpuzcPNq2+uFWu7GxlefCwuK40mELANE=
Subject key identifier: CD:B1:25:35:E9:A3:A4:6B:05:12:E9:A1:56:0D:68:33:2A:EF:00:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB25E4CC53A11EFBCBB6E43762E951A.roa
Signing time: Sat 28 Dec 2024 16:42:57 +0000
ROA not before: Sat 28 Dec 2024 16:42:54 +0000
ROA not after: Sun 12 Dec 2027 16:42:54 +0000
asID: 17561
IP address blocks: 154.205.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76867 (0x12c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:42:54 2024 GMT
Not After : Dec 12 16:42:54 2027 GMT
Subject: CN=67702a91-eaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:69:ba:1c:af:e0:b0:7b:88:af:7a:d2:08:
8a:be:42:15:c0:37:fc:2d:6c:6d:f5:2f:64:b5:7a:
68:0d:df:d9:56:94:56:b7:ed:10:7f:60:28:3c:ac:
ea:d3:9b:c5:18:62:91:24:a1:11:bb:09:10:69:e2:
eb:39:ca:cd:b0:39:75:7d:6a:ed:12:73:05:bb:72:
f1:a3:af:17:1e:9b:46:00:74:f6:1f:7b:2b:25:0b:
90:0c:56:ca:96:9f:5c:9d:02:74:05:d8:0f:52:aa:
66:2d:fa:af:d8:ed:cf:cf:f8:c0:db:97:8c:e4:4f:
aa:49:8f:c2:7b:0f:bf:93:fb:de:60:18:af:43:25:
8b:23:4c:99:41:dc:07:92:be:8c:a1:ec:6d:b3:d5:
48:30:d9:d5:45:6e:3f:6c:71:a7:c8:88:00:c7:78:
c4:7a:f8:db:be:4f:9b:bd:4f:35:41:15:a6:9f:90:
00:b2:18:a9:d3:92:37:4b:da:88:c3:81:1d:bc:6c:
38:35:6a:d0:82:ab:d1:1e:24:65:ca:d5:e7:79:06:
a6:b7:56:1d:ff:27:41:fd:22:59:d3:4d:0c:d1:90:
e4:b0:c0:88:6f:b6:18:0c:43:e7:b3:d4:a0:6b:ce:
35:4e:6d:ec:8e:34:9b:dc:ef:fc:4c:4f:27:d6:3b:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:25:35:E9:A3:A4:6B:05:12:E9:A1:56:0D:68:33:2A:EF:00:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB25E4CC53A11EFBCBB6E43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:e7:30:1e:94:54:df:88:f7:ac:af:6c:b1:39:f2:83:0b:
61:f3:d7:2b:cc:8e:5c:bb:81:6a:ab:06:b3:33:2f:ab:a5:20:
19:d5:1a:bc:74:60:b7:c9:e2:4a:5a:37:25:40:ba:47:33:85:
f7:89:9a:66:b5:9d:d0:ba:c0:69:26:5c:28:78:f1:ba:ce:fb:
94:15:0e:d8:06:51:08:c2:01:a9:9b:53:4d:c0:7e:27:d9:a3:
95:9e:00:f1:2c:74:8c:f8:2b:30:0a:3c:6b:d6:df:48:4c:95:
96:e6:8b:99:f0:89:1e:7d:31:68:bf:38:8e:da:a3:f8:ea:a4:
96:f9:2c:15:8d:43:90:1b:82:2c:7a:0e:c4:af:f7:99:99:ec:
e8:75:67:66:14:28:b8:e2:28:ca:44:9e:a3:b5:d4:e5:91:b0:
bd:7a:55:8f:ad:eb:89:91:0e:0f:de:e1:85:0a:1b:f1:5b:bf:
c2:77:ee:da:8c:37:61:07:7a:6d:12:26:8a:77:1b:ae:59:9b:
c4:48:f5:3a:12:39:bd:b8:f8:67:16:b8:86:45:45:ce:70:7d:
55:5f:39:b3:61:f1:66:d8:a4:93:69:30:95:8e:04:88:9d:fa:
4a:86:b6:3d:6d:e3:47:61:b2:01:a3:ab:7c:e7:df:a6:cf:c8:
6d:3d:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:06 2025 by rpki-client