Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8359D6C38611EFA6A16072762E951A.roa
File: DE8359D6C38611EFA6A16072762E951A.roa (raw, json)
Hash identifier: J2WEI4ctqzmMiXJdRXXv+BJSvGprgK1uCK2quQ6TAfw=
Subject key identifier: A4:99:6A:0A:0B:7F:0E:0D:ED:9C:08:49:BD:E1:1A:A5:F8:53:B3:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01279A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8359D6C38611EFA6A16072762E951A.roa
Signing time: Thu 26 Dec 2024 12:42:30 +0000
ROA not before: Thu 26 Dec 2024 12:42:26 +0000
ROA not after: Sun 12 Dec 2027 12:42:26 +0000
asID: 17561
IP address blocks: 154.94.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75674 (0x1279a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:42:26 2024 GMT
Not After : Dec 12 12:42:26 2027 GMT
Subject: CN=676d4f36-1232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:60:6e:4a:e8:d3:6b:a3:0c:78:1e:e4:dc:
e6:f1:11:b8:1e:48:1d:08:a8:63:e4:6d:09:d0:f8:
b9:e8:b7:74:e5:b0:88:88:d2:ba:e4:6f:26:88:53:
b4:9f:e8:b9:d7:98:42:c0:fc:a7:a0:6f:44:37:3c:
08:19:40:08:61:45:aa:17:22:4e:40:fa:61:d1:04:
61:f5:9f:01:a4:a9:06:fd:3e:4d:fc:7b:21:3e:b7:
02:9d:fc:f8:17:32:a0:16:ca:1c:69:4f:fc:10:4d:
82:27:07:9b:76:ed:6d:d2:af:15:9c:d4:bb:24:ba:
b5:b0:7e:63:cf:98:30:44:34:b6:9e:2e:ab:45:90:
96:7a:26:b6:f5:db:f0:13:d9:26:70:e1:57:d7:73:
97:70:dc:b7:4d:0a:a2:cd:6d:74:3c:e4:7c:14:d7:
18:c1:0b:22:32:d0:57:cd:47:a1:cb:cf:3c:7a:21:
52:a4:82:62:a4:cd:0f:97:e8:00:78:27:38:f1:e0:
ff:45:a3:59:60:de:a5:39:96:05:21:6a:04:00:fd:
9d:26:fc:4e:e3:37:dc:2b:3d:3e:2a:ee:e2:58:9a:
cd:8e:ae:01:2b:ce:7b:d5:49:49:1a:51:e9:5b:a9:
51:49:f6:85:60:f1:a9:96:ea:d0:c9:32:fe:fc:9c:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:99:6A:0A:0B:7F:0E:0D:ED:9C:08:49:BD:E1:1A:A5:F8:53:B3:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8359D6C38611EFA6A16072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f1:af:0f:71:32:6b:9a:1c:ef:88:2b:79:a7:0c:2e:44:13:
12:8e:d4:1c:73:52:43:e3:94:da:a5:9d:f1:16:e8:0c:f9:b5:
49:45:90:c0:2d:cc:fe:ab:93:b8:aa:f4:6f:b1:64:dd:13:fc:
f4:60:ea:14:47:86:d3:ac:c4:35:c2:fa:5f:4b:12:9a:98:95:
e1:cf:65:24:56:11:99:c1:bc:88:02:33:30:2d:ba:66:5f:b2:
25:9f:27:7f:fb:31:57:a4:8a:e4:10:39:11:6e:a5:6e:dd:da:
7f:6f:cf:2d:19:53:db:e9:8a:e5:39:ab:6d:32:f8:9f:ad:d4:
4d:6d:e6:09:fa:30:c8:13:54:8a:ff:05:bb:db:f8:75:aa:be:
eb:97:f2:7b:82:ed:dd:d9:49:93:05:0b:f0:a1:9d:f5:e8:1f:
2f:b6:c9:9f:96:b8:16:5b:fd:09:fd:02:fe:94:b8:1c:6c:69:
3a:99:c2:3a:96:80:b4:97:57:91:71:8f:a0:bd:8c:b0:d8:a4:
da:ed:f3:5d:0f:27:3d:8b:54:3c:47:d7:2d:d2:c8:38:48:ce:
18:9f:be:4c:10:12:bf:8e:46:67:92:5f:ff:1f:ec:b6:00:fe:
f8:d7:db:38:5c:29:45:ea:d9:28:8d:c0:2c:d4:35:2c:85:2d:
b2:7d:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:52 2025 by rpki-client