Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DC0010C53F11EFABDD8865762E951A.roa
File: F9DC0010C53F11EFABDD8865762E951A.roa (raw, json)
Hash identifier: SWtQ2i3kZSWPr6gO470+N4YisAbEOV9LRLoFVWfGEh0=
Subject key identifier: 03:BD:E5:26:19:1D:C1:AF:B3:EE:74:5D:FB:F1:81:87:3D:F4:76:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DC0010C53F11EFABDD8865762E951A.roa
Signing time: Sat 28 Dec 2024 17:20:04 +0000
ROA not before: Sat 28 Dec 2024 17:20:00 +0000
ROA not after: Sun 12 Dec 2027 17:20:00 +0000
asID: 17561
IP address blocks: 154.206.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76915 (0x12c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:20:00 2024 GMT
Not After : Dec 12 17:20:00 2027 GMT
Subject: CN=67703344-769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:67:7f:ac:42:66:b9:b1:56:0e:e8:a7:89:
84:a1:f8:35:df:5c:68:9a:91:f2:5c:42:44:9a:56:
0c:bb:0a:82:bc:85:28:ad:3a:cb:ea:42:98:56:47:
d1:62:f9:76:96:26:cc:ed:07:60:5d:ab:e1:da:ea:
30:b7:fa:3e:52:fa:75:a9:26:fd:31:c1:7e:f8:0c:
ce:b6:fc:40:de:a4:10:38:f7:c0:9c:e0:9f:fe:8a:
d5:0d:e4:7c:26:ee:38:e6:8b:1d:ee:3a:de:a8:1b:
c4:5a:bb:a6:12:ee:04:3f:15:70:c1:a7:92:e1:df:
22:3a:d8:80:c9:2f:a7:c9:d4:5b:07:47:d7:0a:f3:
48:38:e4:a6:a4:7c:05:11:91:71:74:98:85:f7:47:
ff:18:a7:92:a6:9f:86:85:6e:0e:a6:07:c8:2d:9b:
f1:16:4e:00:09:bf:dc:5f:27:a1:11:9f:a8:bc:98:
52:8f:98:9f:25:6a:5b:9c:92:fd:4e:f1:e3:55:74:
19:ff:74:bf:c2:5d:d1:c7:d4:a4:87:18:82:46:82:
5f:15:0c:4d:a6:36:fe:a4:25:13:0b:03:fe:b1:d0:
9c:d1:88:2f:01:25:c9:46:ff:d5:56:87:d2:20:38:
5b:53:b6:46:91:24:6a:67:6f:34:6a:b4:62:2d:f2:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:E5:26:19:1D:C1:AF:B3:EE:74:5D:FB:F1:81:87:3D:F4:76:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9DC0010C53F11EFABDD8865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.241.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f9:87:ad:ec:2e:08:80:e7:3d:57:6d:0d:76:f1:9a:a6:26:
45:c7:42:b0:1f:c6:ae:3d:6f:f1:c2:2b:09:7e:f3:f0:8e:4a:
83:a2:23:0e:f3:73:66:46:02:ce:98:d0:6c:13:58:1c:01:cb:
54:24:e5:ee:7d:21:7b:69:c9:7d:81:ce:de:6e:a0:d6:e8:dd:
1c:13:52:bb:37:6a:71:4c:58:c5:22:c3:b5:28:5d:4d:2a:aa:
5b:43:2e:83:8c:9d:60:86:a1:f3:96:86:15:cb:2d:aa:74:ab:
19:6f:d7:7f:43:4d:12:f3:06:7b:06:2f:5d:b7:b1:b1:aa:74:
65:71:37:e1:6a:2b:1d:4e:ab:8c:60:24:7d:23:bf:70:55:d5:
f8:f3:15:63:ee:4f:7f:2a:e9:86:64:a8:fd:f9:a8:5d:83:11:
1d:45:b6:de:24:7f:e5:10:f1:a7:40:e7:ec:fd:7d:03:c3:79:
5c:9d:d5:e4:f5:6e:86:f2:24:5b:81:f6:fb:d5:86:22:78:8d:
af:08:6f:67:62:e0:be:43:1c:ad:71:15:6a:14:20:c3:6b:c8:
00:09:42:85:b3:bf:89:53:33:0c:33:4b:de:70:6a:23:48:3f:
8e:db:2d:ed:96:d1:83:ac:a8:65:f7:61:25:3f:fb:8c:5d:bc:
0a:26:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:53 2025 by rpki-client