Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0A0C064C5F311EFAE430059762E951A.roa
File: D0A0C064C5F311EFAE430059762E951A.roa (raw, json)
Hash identifier: lJfg5QHK5Yfm79z0jGaxemyzDN79C2HBOVDw27FnDBo=
Subject key identifier: 80:7E:A1:54:0C:90:56:66:54:32:17:C9:B2:BC:93:9E:64:B7:C5:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0A0C064C5F311EFAE430059762E951A.roa
Signing time: Sun 29 Dec 2024 14:47:24 +0000
ROA not before: Sun 29 Dec 2024 14:47:20 +0000
ROA not after: Sun 12 Dec 2027 14:47:20 +0000
asID: 17561
IP address blocks: 154.213.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77294 (0x12dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:47:20 2024 GMT
Not After : Dec 12 14:47:20 2027 GMT
Subject: CN=677160fc-d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:4a:65:70:6d:52:0c:9f:0f:6c:4b:ee:fa:
dd:14:28:9f:59:05:fc:6d:43:9d:36:9d:4a:24:f7:
f7:ce:36:74:ed:eb:5a:92:12:b6:75:25:57:93:6a:
8b:8a:78:fb:b9:b2:b7:80:54:cf:c9:be:77:ce:ce:
a5:48:1e:32:1a:dd:e7:54:9b:e5:2e:cf:66:e7:f3:
7f:99:43:e9:c7:29:ac:c2:d7:4c:ec:2a:78:67:c6:
56:6b:10:f4:25:d5:7a:7b:b3:9e:b7:00:07:69:9b:
80:62:8d:b3:75:81:87:2b:77:81:fe:6d:4a:15:5a:
a7:68:c7:17:bd:4e:49:e2:05:8c:71:7e:da:6a:7a:
4f:3a:e9:5e:75:c2:19:e6:de:78:44:5c:76:5a:08:
90:02:c3:85:63:92:c7:c3:a6:71:a8:83:33:8e:ec:
a8:2f:26:ac:27:c6:cb:e3:8c:2a:36:58:30:b6:87:
be:b4:91:51:ee:56:6d:3e:4f:af:38:d3:02:f9:e6:
30:13:10:98:18:84:a7:06:2d:ef:c5:8e:2f:0b:bd:
db:d3:b1:82:57:cc:f4:dc:69:95:81:7d:a8:93:24:
d5:a0:01:d0:39:2b:11:75:a9:49:89:4d:53:46:db:
33:00:7c:7b:bd:10:9d:fc:6f:ea:27:38:b0:37:21:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7E:A1:54:0C:90:56:66:54:32:17:C9:B2:BC:93:9E:64:B7:C5:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0A0C064C5F311EFAE430059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b2:f1:42:cb:7a:d1:a3:7c:e1:4f:81:5d:43:5f:60:7c:0d:
c4:91:27:5c:6c:76:7b:40:9e:33:8c:a4:9b:f0:51:6f:51:93:
e4:bd:64:71:38:4d:f9:89:97:5c:5d:ac:08:62:7e:21:74:29:
f5:16:42:5d:1c:4f:9c:75:f5:e4:7d:d9:c8:7a:32:a8:8f:7b:
ad:65:0a:c6:4f:0b:3f:2e:b7:14:07:01:30:2d:91:1a:f4:0d:
4f:0b:42:21:b8:40:9c:73:54:e3:c7:46:a4:43:73:3a:4f:3e:
13:86:05:9b:4b:7c:ab:34:68:80:82:2b:58:66:61:1d:2e:3a:
69:d7:32:dd:81:48:da:46:f9:9f:97:03:fc:81:b2:9e:25:71:
33:3e:5f:15:bf:60:f2:80:93:ea:7a:14:53:e0:4d:4a:31:93:
e2:05:07:9c:a6:5d:9b:f6:dd:e7:bb:34:f9:22:f1:22:15:17:
8f:35:e3:b7:10:91:31:32:67:e8:cc:07:54:06:81:3f:20:98:
97:ab:f4:17:73:7c:6c:04:27:d1:a7:26:1a:4a:d7:97:a7:d2:
7a:29:de:33:e2:7d:1e:06:b1:42:4d:46:ee:e5:75:59:8c:55:
86:ea:4f:75:de:1b:73:7e:25:db:bb:6d:7c:90:4a:06:cb:a3:
65:93:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:46 2025 by rpki-client