Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D691D826C40611EF81FD27AE762E951A.roa
File: D691D826C40611EF81FD27AE762E951A.roa (raw, json)
Hash identifier: q7qDWq6ZJmfny9l6B6b9BGzQQFxTIt81bAnctwJZV/0=
Subject key identifier: EE:B9:6A:E1:D3:4C:0D:83:45:18:9A:7A:77:71:4E:BD:96:D8:A8:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D691D826C40611EF81FD27AE762E951A.roa
Signing time: Fri 27 Dec 2024 03:58:32 +0000
ROA not before: Fri 27 Dec 2024 03:58:28 +0000
ROA not after: Sun 12 Dec 2027 03:58:28 +0000
asID: 17561
IP address blocks: 154.194.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76009 (0x128e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:58:28 2024 GMT
Not After : Dec 12 03:58:28 2027 GMT
Subject: CN=676e25e8-446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:4b:b3:14:d5:81:f4:5c:ed:eb:80:00:d2:
9b:04:71:9d:09:61:1e:74:1c:ea:dd:d6:97:53:8e:
95:2c:db:79:7d:7b:27:94:43:92:3d:9e:57:4c:47:
af:0b:ed:39:00:08:56:1d:7e:5c:ba:1e:88:cf:4a:
36:8a:9e:5e:1b:16:dd:80:2d:80:11:3a:80:ee:e6:
6d:74:70:d3:cb:7a:16:9b:b1:2d:16:d3:b0:13:14:
23:7c:27:45:1d:9c:0f:69:d1:37:96:b6:ca:dd:84:
b8:df:66:c1:1f:f3:3c:6b:ae:42:9c:0e:92:47:0f:
5d:78:f9:78:96:3b:13:2a:00:7d:fc:86:81:79:b7:
f7:7b:07:41:7e:63:44:fe:f6:cb:93:b1:f8:54:ab:
c6:ed:13:25:93:66:e2:9d:76:e6:ac:c7:a4:b0:7e:
7f:11:c2:d6:a4:2d:eb:fd:40:30:6f:fd:6c:a0:19:
fd:e5:c1:70:02:56:8e:1d:e3:bd:6c:0d:6c:3e:cb:
29:8e:8d:0e:ed:8e:83:38:8c:75:e2:4e:0f:24:69:
69:b9:49:fa:48:da:8c:e5:2f:5b:80:8d:f1:e8:b2:
54:7b:0b:31:5d:48:03:d4:2d:6a:af:78:fc:01:1d:
e5:c7:46:b5:9d:4a:11:dd:92:89:3f:78:36:f8:0e:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:6A:E1:D3:4C:0D:83:45:18:9A:7A:77:71:4E:BD:96:D8:A8:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D691D826C40611EF81FD27AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.48.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0f:3b:b5:af:35:f8:e0:d4:03:b8:9e:37:c6:99:fe:ff:2b:
17:a3:f1:5d:3c:6d:aa:58:99:40:1a:e3:a3:79:1f:03:82:63:
df:6a:83:9f:c8:83:e3:ee:f3:c7:d0:cb:66:73:78:49:16:4f:
a6:7b:e7:4b:ed:64:2c:56:bb:dd:9c:58:e6:45:f2:d8:8b:f4:
81:c4:db:95:45:2d:9c:15:31:a4:67:ef:d8:25:07:70:69:3d:
ab:d2:79:8d:c7:11:88:00:61:b7:c2:b4:ae:5e:79:7f:67:28:
e3:c1:d5:80:26:30:aa:f3:91:03:21:db:f0:59:a9:d2:eb:4d:
99:c9:d8:85:d8:09:49:72:57:14:9d:db:72:df:cd:fb:bb:fd:
89:72:49:bf:4f:69:b5:8b:55:34:51:44:19:f9:c0:cb:b0:4d:
1b:f5:f8:23:5a:6f:c0:dd:b4:f9:f9:3b:7e:49:20:7e:a0:63:
f4:9e:54:39:d0:d7:ee:12:e2:2a:ae:bc:59:3e:c3:ae:b9:86:
d9:1a:98:cb:7c:e5:b8:e8:c6:6a:67:2f:a8:08:0e:1d:ce:51:
d8:14:97:f8:7f:b3:d2:5f:7b:11:d1:99:18:ec:1c:c3:ee:89:
8b:b2:22:7a:d7:c7:1e:98:08:ca:5d:00:c7:26:20:50:93:1d:
a6:ea:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:13 2025 by rpki-client