Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7DF582EC93411EF931F2389762E951A.roa
File: D7DF582EC93411EF931F2389762E951A.roa (raw, json)
Hash identifier: BE01ju6tRiQ79iR4JKK0Ax0pMIQUwK5AwJBTYfUuCrw=
Subject key identifier: 13:29:E1:92:DE:00:86:C8:FF:2D:5D:8A:3B:B2:39:60:C6:BE:7B:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7DF582EC93411EF931F2389762E951A.roa
Signing time: Thu 02 Jan 2025 18:10:27 +0000
ROA not before: Thu 02 Jan 2025 18:10:23 +0000
ROA not after: Mon 13 Dec 2027 18:10:23 +0000
asID: 17561
IP address blocks: 154.222.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78793 (0x133c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:10:23 2025 GMT
Not After : Dec 13 18:10:23 2027 GMT
Subject: CN=6776d693-a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:ec:a7:d7:f8:29:4d:df:4c:68:fb:af:cb:
46:92:79:eb:d7:a4:90:39:ee:c9:df:1e:3d:b4:30:
de:50:d0:02:b6:63:78:bd:88:95:9b:57:c9:c8:5e:
e4:b7:bf:27:c1:73:10:44:ab:64:1c:65:14:37:78:
1a:62:ce:92:7c:c2:46:d8:3b:b7:5d:07:bd:9c:c0:
b3:a7:53:a3:db:45:a4:81:f6:9a:af:db:50:5e:38:
10:95:e0:db:07:c1:20:65:84:20:38:4b:88:e3:f4:
12:63:82:08:cc:55:9e:c9:77:05:53:6a:13:c8:07:
0b:f9:9f:c8:0f:30:95:0a:81:eb:df:c0:58:8d:59:
57:77:6f:58:e2:11:bb:e6:49:f9:7b:14:8a:e9:e1:
b6:f9:3e:e7:fe:aa:1a:92:65:8c:64:4f:e8:07:b2:
99:95:bf:7d:d2:9f:e6:da:c1:81:35:7a:08:4f:b3:
4f:72:59:3d:d5:90:cb:00:6c:05:6e:03:67:5c:2e:
1e:48:df:d5:33:63:25:8d:80:2c:5d:aa:e2:32:99:
75:06:97:f2:df:27:c7:20:a0:0c:00:e2:be:00:fe:
48:58:27:87:f4:09:e9:42:a3:29:b1:86:1e:29:a5:
e6:d6:60:77:1b:7e:3a:0b:60:5e:b9:d8:09:ef:88:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:E1:92:DE:00:86:C8:FF:2D:5D:8A:3B:B2:39:60:C6:BE:7B:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7DF582EC93411EF931F2389762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:92:70:6c:a1:18:4a:ca:ce:9c:e6:38:22:3e:58:62:63:64:
54:cc:0d:ec:55:14:38:83:fd:97:d9:21:d7:27:1a:c7:1a:8c:
48:a1:46:b1:91:da:9a:f8:26:f2:b8:7c:ee:80:38:96:fd:16:
26:50:2e:bf:a8:3a:5e:64:ac:3d:53:e7:d6:74:6a:c9:d2:4c:
c0:fc:4a:3e:67:89:e4:3c:21:34:61:da:1f:d7:9b:54:5d:d9:
2a:2f:3b:26:26:a6:ab:eb:0d:27:22:c6:ea:5b:b8:ac:a4:07:
d4:05:02:ad:97:d7:be:ac:8f:1a:c2:22:07:32:31:a4:69:9d:
c9:20:c7:f2:62:6e:f7:8c:bc:da:49:9f:c1:78:04:22:ff:a9:
e0:a8:50:03:ff:e6:85:54:43:ae:ab:f0:e7:2e:84:a5:1f:78:
b6:2e:00:6d:1e:b0:48:fa:01:25:17:9a:3c:5a:c4:36:b9:e0:
8e:d7:af:08:90:ae:5d:28:f1:e8:79:d2:df:59:2c:12:bd:bd:
6a:fa:05:96:ef:37:8b:0f:7e:76:8d:6a:10:aa:86:60:6d:50:
69:fc:ea:2c:d2:4b:1d:35:1e:33:29:14:60:0b:5c:40:26:6e:
bd:8e:bd:70:a8:8c:ed:72:ea:64:db:c4:e2:96:10:cc:ec:3d:
55:b1:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:38 2025 by rpki-client