Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFDE176C51C11EFAB107487762E951A.roa
File: DBFDE176C51C11EFAB107487762E951A.roa (raw, json)
Hash identifier: ZE1JBRGBhMaMbzQXNlGsVmHw6koGrmtiLTvpkrQO9I0=
Subject key identifier: C4:EE:85:CA:D2:E1:79:B1:2C:E2:DB:94:16:F2:16:FA:19:62:1B:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFDE176C51C11EFAB107487762E951A.roa
Signing time: Sat 28 Dec 2024 13:08:41 +0000
ROA not before: Sat 28 Dec 2024 13:08:38 +0000
ROA not after: Sun 12 Dec 2027 13:08:38 +0000
asID: 17561
IP address blocks: 154.203.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76593 (0x12b31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:08:38 2024 GMT
Not After : Dec 12 13:08:38 2027 GMT
Subject: CN=676ff859-25ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:31:3f:98:5e:c0:b8:f9:c7:e8:ff:12:4c:
5c:35:af:a4:6d:66:5e:d6:a7:64:bb:85:ce:e6:bb:
8f:0b:54:6c:13:4b:fb:44:12:63:a3:af:f4:4b:95:
98:c0:35:6d:1a:21:dc:c4:9b:23:59:30:b8:ed:f7:
d7:20:85:61:74:25:46:45:2b:d7:af:b5:b1:ef:ea:
fb:11:99:05:c7:4a:26:d2:ef:d3:52:c5:74:c4:22:
1b:c3:7c:1a:83:8a:5e:72:e4:e4:28:3c:79:1f:4f:
56:cf:0c:80:92:ef:24:90:17:67:df:0e:8b:39:c0:
ef:7d:0b:8d:80:4d:7f:cb:d5:03:3d:44:f3:32:27:
21:bb:b2:c4:f3:92:68:e7:01:47:3f:f7:00:a9:a5:
c6:e7:2d:33:47:7f:ed:32:c2:0e:9c:1a:90:f1:53:
de:99:28:e5:69:a9:64:01:30:62:3f:c9:8f:dc:e8:
28:68:d3:d6:73:67:15:cc:f0:54:ca:cb:18:fc:a3:
e8:84:3a:8c:19:7e:c5:99:e7:03:b3:26:b9:c5:80:
68:b3:b1:32:91:bd:40:58:99:bb:e8:42:11:3a:6b:
55:e7:15:c3:30:5c:8a:84:2a:bd:0f:3b:ed:29:5c:
5f:fe:97:bd:d2:25:99:88:ab:07:7a:ab:3e:a7:ca:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:85:CA:D2:E1:79:B1:2C:E2:DB:94:16:F2:16:FA:19:62:1B:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFDE176C51C11EFAB107487762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
27:47:e5:e1:1a:9e:a9:c4:aa:c1:75:84:db:40:2d:0b:79:4b:
8a:22:1d:fa:46:03:5a:67:75:18:00:35:53:02:cb:c8:1d:a9:
08:93:0f:4f:74:69:48:4e:50:ca:cf:fe:94:73:66:d4:cb:55:
ba:d9:60:ff:05:e5:63:f8:f1:af:e5:de:be:cc:60:30:67:3f:
03:34:3e:0d:3c:aa:9c:ae:fc:dd:ef:df:06:4a:09:66:c1:33:
a7:25:62:47:35:14:14:e3:40:e8:c1:be:00:da:2c:f2:68:dc:
7a:c8:5e:4a:56:9e:31:3d:1f:e5:76:55:22:7f:39:21:75:f1:
cd:df:2f:4e:30:cc:78:bb:8c:85:bb:e3:39:b4:9a:1b:58:b4:
82:2f:86:49:44:b2:7a:c0:02:0d:60:a8:74:a3:61:29:5b:7f:
0a:74:af:a3:52:d0:3a:58:5b:d6:82:1f:95:ba:00:dd:ca:33:
76:69:56:9d:05:91:ce:20:67:13:64:26:ef:01:0f:70:f9:2d:
05:a2:ee:db:71:9d:61:29:45:52:b1:0e:fe:40:6c:e9:b1:5c:
20:b6:80:c5:09:47:c1:b9:71:1d:9d:d0:83:69:96:b9:aa:51:
d8:2b:7d:50:5a:54:08:d8:8c:8f:a9:36:aa:ab:25:0e:5f:e1:
f8:0f:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:08 2025 by rpki-client