Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D059A524C42411EF8339E36A762E951A.roa
File: D059A524C42411EF8339E36A762E951A.roa (raw, json)
Hash identifier: pogIcYNuAVNKhOQuufpWaurS5MPQ2McW3f5i+ipccfM=
Subject key identifier: C6:C2:85:A0:AD:E9:E8:9D:67:7D:36:3F:F4:C9:04:E5:E5:63:43:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D059A524C42411EF8339E36A762E951A.roa
Signing time: Fri 27 Dec 2024 07:33:06 +0000
ROA not before: Fri 27 Dec 2024 07:33:03 +0000
ROA not after: Sun 12 Dec 2027 07:33:03 +0000
asID: 17561
IP address blocks: 154.202.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76267 (0x129eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:33:03 2024 GMT
Not After : Dec 12 07:33:03 2027 GMT
Subject: CN=676e5832-c31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:b9:a1:2c:fd:29:b7:8e:d9:cf:12:71:4e:
cd:8e:a1:ef:49:bb:8c:3c:86:14:a2:87:38:62:42:
36:b7:25:dc:63:4c:bf:6c:f2:e7:0d:8f:67:98:de:
02:0a:8d:7a:1c:16:43:54:b7:4f:ec:e3:3a:8b:14:
f9:70:3f:f0:45:77:52:ae:0b:82:f0:6a:78:95:af:
a3:64:a7:f4:f1:4f:f3:ba:dc:36:ae:e0:07:4d:15:
11:8d:89:19:a7:3a:20:89:5c:e3:0c:61:f0:c2:a3:
a2:38:3d:81:08:f9:d5:a5:70:83:33:e1:2b:e6:76:
4a:e6:3d:0d:2b:48:7d:3b:54:da:c9:aa:c3:8d:85:
bc:d5:14:58:15:2e:d4:c4:ea:67:70:ff:21:c8:46:
19:94:eb:1a:af:6f:f4:e0:b8:88:50:2a:9d:7f:8a:
37:84:9f:be:29:2f:ec:a0:b8:aa:1d:ce:75:6d:a3:
a7:9f:31:68:cc:90:5f:56:63:38:03:b7:11:dc:61:
1c:50:b3:ed:79:90:e8:26:f2:fd:5b:6c:01:fa:7a:
a8:99:47:5f:ec:69:31:e1:89:d4:13:c3:4a:17:4c:
7a:12:3c:f5:b3:49:b4:a6:1a:22:ec:dd:3a:90:a3:
f5:78:68:d9:c1:37:fc:48:ef:b0:07:8b:21:01:2e:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:85:A0:AD:E9:E8:9D:67:7D:36:3F:F4:C9:04:E5:E5:63:43:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D059A524C42411EF8339E36A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fe:33:81:a2:ce:73:b7:53:fb:b5:dc:3d:37:93:37:5b:dc:
1b:cb:13:c1:17:2c:12:62:bb:8f:a8:0a:68:98:20:1e:8e:c6:
97:da:80:22:0b:4e:b1:40:08:1a:0f:9a:53:fb:4c:cc:b6:94:
1f:91:37:87:52:92:5f:5d:f6:06:ce:50:0a:59:5d:b4:2a:e4:
56:69:30:0d:a2:e2:f4:e6:2c:40:e4:8d:25:ac:b2:c5:98:59:
a1:a4:3a:07:65:d4:10:64:b8:3b:13:98:99:f0:1f:dc:67:17:
f3:57:fc:47:41:07:aa:13:82:b5:e4:c9:06:cf:84:a6:5a:10:
28:87:d2:62:6f:04:ef:30:f2:ff:43:65:60:b7:3c:70:85:38:
62:f6:18:f0:b9:98:0a:e5:26:cb:e2:29:65:86:4f:d0:19:96:
21:ab:e8:f5:37:86:5f:b1:1f:c8:a0:70:f5:30:0a:61:f8:a3:
d5:e1:48:e6:ee:cd:df:f1:22:ab:83:c3:b3:60:d5:d9:4e:3e:
59:dc:56:6a:e5:8a:43:f5:a7:01:fb:2a:8e:77:58:ce:54:01:
01:80:1e:eb:78:f3:d3:df:af:3a:8c:10:d1:a5:fc:50:fa:98:
2d:79:f4:a5:16:9c:8f:7c:41:56:49:38:31:29:f9:e5:b1:86:
b9:e8:80:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:00 2025 by rpki-client