Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8FF9DF8C54811EFBE90779B762E951A.roa
File: D8FF9DF8C54811EFBE90779B762E951A.roa (raw, json)
Hash identifier: 7wcLXR16l+QbLE4s9cZYrU4Y656QYJ5tFerjBm4Fw74=
Subject key identifier: 5E:38:44:48:AE:E5:05:6F:53:2C:CC:73:AA:1F:F0:E3:4E:84:8D:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8FF9DF8C54811EFBE90779B762E951A.roa
Signing time: Sat 28 Dec 2024 18:23:34 +0000
ROA not before: Sat 28 Dec 2024 18:23:30 +0000
ROA not after: Sun 12 Dec 2027 18:23:30 +0000
asID: 17561
IP address blocks: 154.209.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76997 (0x12cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:23:30 2024 GMT
Not After : Dec 12 18:23:30 2027 GMT
Subject: CN=67704226-5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:0d:16:41:98:b2:fb:3a:dc:34:68:0a:eb:
dc:58:5a:ce:31:ee:dc:43:2a:32:b8:4e:56:9d:bf:
9c:52:e9:bd:67:66:6d:a8:5f:14:78:33:b2:6a:31:
df:6f:a6:15:2b:14:3a:92:13:41:45:5c:de:8e:d7:
ea:94:d5:69:12:3c:54:32:b5:14:84:55:4c:43:ec:
79:8b:a4:69:d8:97:b9:b8:80:e4:e0:43:4a:19:df:
a2:99:21:7d:ef:1d:17:ed:8b:3e:a5:ed:f7:da:0c:
80:3d:b0:3a:b4:ee:ec:b8:86:22:6d:37:ee:58:85:
37:67:34:0f:bf:8a:a6:78:dc:77:1c:42:94:74:e3:
3d:c7:7c:aa:e5:9a:30:af:9b:36:89:85:2b:5a:17:
0c:52:06:f1:e3:08:05:1f:c1:e5:8a:77:6c:da:fa:
01:2d:90:0b:24:50:96:55:e3:9b:8d:49:98:a6:d8:
22:47:f1:97:cf:29:6c:55:ed:e0:c7:a6:49:54:aa:
1e:86:bf:3f:ad:11:f2:a5:db:4b:11:da:e8:0e:28:
68:37:a2:e3:e7:ae:bd:2a:81:18:12:e0:ef:1c:ae:
b2:39:6a:d4:83:33:74:3b:c2:d0:74:c5:9c:a4:33:
4e:1a:cf:26:e4:43:9f:b3:e3:ea:16:c6:9b:c4:8f:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:38:44:48:AE:E5:05:6F:53:2C:CC:73:AA:1F:F0:E3:4E:84:8D:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8FF9DF8C54811EFBE90779B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.29.0/24
Signature Algorithm: sha256WithRSAEncryption
93:97:b1:58:47:29:07:b1:04:9c:bc:63:7e:54:d5:c9:97:4e:
f8:74:cb:72:28:4c:87:b6:83:7a:52:18:18:6e:f3:2a:89:30:
b9:8a:0a:3d:38:29:4f:17:e3:c6:e8:ea:bb:0b:31:44:5b:2c:
ab:04:09:f0:bd:76:a1:8e:78:47:d4:86:12:5e:51:ac:93:11:
fc:49:f0:21:d4:d6:a7:b2:b0:ac:3c:5f:ff:73:d2:e5:9a:7b:
e9:88:fc:f3:be:35:1e:54:02:1e:82:17:a8:8e:ec:ff:82:e0:
b2:19:94:68:19:40:ac:37:99:7e:1a:ef:3b:23:ac:b0:f5:18:
7e:3d:5a:ce:01:94:8c:17:91:0a:a8:fb:5b:dc:55:07:f7:6d:
35:51:81:3c:6b:a9:06:56:5c:25:3a:41:12:b4:d5:0e:f5:ae:
41:34:9b:99:34:72:77:1a:3c:06:c6:4e:4a:14:4a:e7:93:30:
66:1b:c3:f5:7a:fc:cf:38:06:29:0f:2c:95:e1:9b:4c:01:83:
26:87:de:34:e0:39:86:bf:0b:fc:10:5c:7b:cc:c3:72:aa:d1:
00:07:d0:a6:f8:d6:83:30:64:40:b8:bf:72:ff:a3:95:f6:7e:
f0:af:96:ba:c8:1d:bf:c4:eb:6e:a1:e5:a1:ae:63:96:60:b0:
2f:ff:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:21 2025 by rpki-client