Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03566642C32111EFA5CB1C5A762E951A.roa
File: 03566642C32111EFA5CB1C5A762E951A.roa (raw, json)
Hash identifier: WGQwBtT128G9ro0muPXMjo5Lya5mbgr9svZBMOw0eWE=
Subject key identifier: F7:6C:4E:59:AD:8F:0A:E9:53:E2:5A:5D:83:EE:D0:9E:82:46:62:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012568
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03566642C32111EFA5CB1C5A762E951A.roa
Signing time: Thu 26 Dec 2024 00:33:23 +0000
ROA not before: Thu 26 Dec 2024 00:00:19 +0000
ROA not after: Sat 01 Mar 2025 00:00:19 +0000
asID: 984
IP address blocks: 154.202.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75112 (0x12568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:19 2024 GMT
Not After : Mar 1 00:00:19 2025 GMT
Subject: CN=676ca453-6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:47:dd:db:4b:d3:44:5c:94:40:e7:50:97:
1b:9d:3f:0a:fd:8f:26:b5:d3:7e:9d:df:58:ee:37:
3f:55:58:cd:9e:63:18:89:ee:19:55:14:27:91:89:
83:4d:a2:e6:5c:a7:6b:ed:d9:bd:f0:f0:67:f5:48:
c1:ea:d2:eb:66:26:1d:77:fc:fe:c0:20:dd:13:a7:
07:c1:27:ae:80:01:a2:09:3e:fb:e4:0a:01:15:4e:
64:bd:41:8a:2f:a2:4f:0d:c3:0d:2d:a4:64:1e:91:
44:71:87:a6:8b:37:aa:50:9b:de:99:7c:3d:01:09:
49:98:13:5d:4b:c1:d2:7c:a4:a4:04:46:be:54:26:
0b:25:13:16:95:6e:20:fb:c2:5c:3d:f5:e7:d9:f9:
b8:b7:43:e8:1f:ee:31:a6:be:ac:4c:73:87:06:09:
aa:ee:40:dc:37:d7:62:91:69:cf:6e:16:2d:e7:6b:
4c:3a:48:1c:17:fa:be:70:3b:32:71:02:71:16:a2:
4c:d0:49:09:8d:8d:d0:67:99:14:a7:59:4e:59:c3:
de:0e:3e:96:a4:86:00:e5:04:2e:b6:e9:23:c2:f0:
06:4d:62:25:70:fa:12:92:b8:e5:be:75:83:ec:a3:
c9:b4:db:ec:79:04:81:ac:27:58:ee:1e:3d:09:a3:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:4E:59:AD:8F:0A:E9:53:E2:5A:5D:83:EE:D0:9E:82:46:62:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03566642C32111EFA5CB1C5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.128.0/17
Signature Algorithm: sha256WithRSAEncryption
68:87:39:52:ab:37:2e:5c:29:6a:cb:fb:0e:73:f1:b1:ca:c2:
fc:5f:03:ad:54:ff:39:dd:85:70:9a:1b:4b:a7:74:c2:a6:04:
74:17:1e:1f:ac:86:52:0d:36:81:13:9f:79:f0:4f:41:36:6e:
74:a0:40:91:69:4f:27:3c:66:fc:40:e4:5c:3f:4f:bd:7e:de:
d0:21:12:fb:5d:db:3a:57:3b:4b:df:ae:e4:50:3d:85:2a:59:
08:02:b2:86:ba:82:d5:e3:53:76:31:5b:17:6d:45:6f:fc:d2:
ec:a5:d4:13:0a:6e:a0:2f:98:62:3e:76:e6:86:73:b0:d2:fb:
c7:ff:60:be:c7:30:f3:d8:cd:1c:c7:ed:5c:89:30:20:a0:df:
b4:38:a5:06:a7:56:64:05:16:41:6d:6f:9b:02:61:aa:e0:ac:
2e:77:a9:7d:ba:1e:26:55:c5:a0:67:63:60:5b:52:df:c7:19:
15:40:6d:99:b6:c7:b5:e6:ca:8b:81:69:32:d6:6c:42:81:fe:
11:d7:de:97:91:e4:bb:d9:d6:cc:47:45:59:d4:e0:f6:eb:4f:
2c:14:b1:db:f9:5f:dc:97:d8:68:e7:f6:db:da:df:7d:de:f7:
81:2f:36:99:03:bf:c2:54:f0:d1:d7:e8:51:71:b4:d2:35:e1:
56:7c:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:35 2025 by rpki-client