Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7806DAAC1A511EFA9058277762E951A.roa
File: D7806DAAC1A511EFA9058277762E951A.roa (raw, json)
Hash identifier: 5EwsWL977crrdnnEgiYYOrMGEDRL6Olif1NxCau7xUw=
Subject key identifier: 0E:E0:EC:8A:52:60:B0:74:E6:B5:EA:FB:27:DF:76:FE:72:1A:01:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7806DAAC1A511EFA9058277762E951A.roa
Signing time: Tue 24 Dec 2024 03:19:10 +0000
ROA not before: Tue 24 Dec 2024 03:19:07 +0000
ROA not after: Wed 10 Dec 2025 03:19:07 +0000
asID: 984
IP address blocks: 154.92.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73965 (0x120ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:19:07 2024 GMT
Not After : Dec 10 03:19:07 2025 GMT
Subject: CN=676a282e-0197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:20:da:c0:d5:4e:6c:a4:8a:e5:fa:c5:9d:
86:df:c2:b9:0c:13:48:19:7c:58:0f:bb:a0:e0:31:
c7:14:73:e2:1c:db:3e:f6:af:79:57:93:55:2f:c4:
53:de:6e:d5:8d:46:5c:37:bb:91:1e:99:1e:28:d9:
34:5a:c0:32:4d:03:02:b7:17:13:80:22:2b:27:43:
97:e0:f1:72:0a:de:be:20:ca:f5:1d:36:bd:2e:19:
fc:44:76:cc:a6:42:98:5c:1d:5c:41:33:32:c2:ee:
ea:90:98:50:aa:97:af:be:32:fb:28:8e:cb:51:64:
2c:c0:7f:20:3a:6c:aa:29:2d:17:15:38:58:aa:71:
c3:7b:de:cd:96:7a:42:f0:c5:f3:be:eb:c4:d3:7a:
d0:52:fc:10:83:bb:20:c4:ed:6c:37:ab:23:20:e9:
11:60:9c:1e:33:0a:c2:89:1d:2e:fb:7e:84:e4:68:
a4:f4:92:51:d6:70:0f:8c:ac:d2:20:af:20:57:11:
ac:28:2f:5f:c0:0f:c3:da:b2:67:b9:6d:15:1a:72:
34:4f:dc:89:6e:87:84:d3:90:ed:e3:7a:3a:a3:55:
26:f7:c5:e3:a7:37:99:d0:37:54:c7:cb:7b:a2:5e:
f3:f2:78:e0:64:c7:a3:59:20:8f:ec:56:83:97:96:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E0:EC:8A:52:60:B0:74:E6:B5:EA:FB:27:DF:76:FE:72:1A:01:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7806DAAC1A511EFA9058277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e7:f8:3f:e9:56:c3:5a:8c:8d:74:ea:3a:d6:2c:7e:ca:0b:
1d:f3:04:5b:ca:fb:f2:54:b2:f9:59:86:22:a0:27:86:51:c3:
80:d7:9a:d3:0d:c0:a6:94:5c:3f:5c:04:dc:3e:2b:9f:73:d5:
93:07:0d:62:78:99:69:0c:42:de:02:86:65:64:d6:7a:39:17:
a5:21:e8:73:6f:74:b5:10:32:2b:dc:4f:0e:e5:c8:9d:b2:ce:
00:f4:0d:a3:d4:97:76:fd:ce:f7:1e:99:47:07:90:f3:90:c0:
e4:a3:23:31:f2:fd:0e:1e:96:ad:f5:41:74:31:0a:77:67:69:
8e:bd:12:32:93:1f:9d:2f:ba:01:f9:87:14:dc:4a:17:43:7b:
67:48:00:b0:69:48:53:dc:08:9f:87:93:0f:11:af:ba:37:70:
6a:55:d2:88:62:bc:e9:c5:69:a4:91:36:ee:2c:76:bb:e2:5c:
d3:5f:23:39:4f:b3:d9:5f:d3:23:df:5a:85:8f:c4:a8:a3:3d:
68:d1:c4:ce:f7:c9:42:90:28:4a:5b:c2:7d:6d:47:36:b5:eb:
d2:46:36:60:9a:1b:84:28:16:3c:c4:72:7f:25:63:b8:04:60:
8f:73:54:c9:27:3a:b6:ec:28:b5:eb:f2:0c:e3:dc:5a:7e:22:
31:90:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:35 2025 by rpki-client