Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D99038CBB7911EFB3742F9E762E951A.roa
File: 3D99038CBB7911EFB3742F9E762E951A.roa (raw, json)
Hash identifier: O2RXD+GNSpTKCHWq4OHLeGOOy5ybed+oz9mps1k/D1o=
Subject key identifier: 8C:30:A3:7A:DA:4D:A1:D5:64:20:72:64:36:CC:18:6E:A0:D3:61:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D99038CBB7911EFB3742F9E762E951A.roa
Signing time: Mon 16 Dec 2024 06:44:47 +0000
ROA not before: Mon 16 Dec 2024 06:44:43 +0000
ROA not after: Tue 04 Mar 2025 06:44:43 +0000
asID: 142403
IP address blocks: 154.92.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72608 (0x11ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:44:43 2024 GMT
Not After : Mar 4 06:44:43 2025 GMT
Subject: CN=675fcc5f-3c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:71:c3:bd:3d:17:af:f5:bb:28:bd:85:9c:
32:72:c7:98:69:3f:6f:c3:d7:d3:19:b3:27:d3:04:
ea:9f:67:25:0c:2c:a8:7c:90:fa:f9:d9:da:dc:43:
13:7b:c6:0c:82:cf:e7:e4:de:7a:8e:2f:ea:c8:22:
5b:02:ed:33:37:10:94:88:e1:47:0d:b1:9e:7c:4f:
e1:55:e4:b6:00:a7:13:41:37:f2:e2:bd:e2:24:3c:
51:1d:0b:11:33:73:8a:a0:5a:ae:f8:53:72:2f:93:
f5:ca:e3:6b:fe:e3:7b:9a:f6:8b:49:2e:a3:bd:5b:
92:3d:7a:ef:0f:ee:65:fe:8b:ab:f0:73:53:e4:af:
3e:45:5e:64:ec:9d:39:f9:64:8b:a6:a8:76:5d:17:
55:2f:2c:ff:1f:81:30:15:5a:6f:90:5f:f8:5a:6e:
86:03:8e:f0:0d:42:95:e8:80:c1:42:79:52:72:8a:
8b:e1:87:9d:2d:78:29:1b:4e:14:37:d7:73:73:60:
03:59:4e:0d:c1:03:20:e8:bb:72:0c:30:58:76:92:
83:03:16:0e:3d:ad:85:da:53:7a:37:75:0d:03:10:
44:0d:8e:97:50:27:ba:5a:4b:cd:ce:1d:8a:1e:98:
39:ae:87:20:6c:80:01:bc:5b:f9:5f:8f:43:d3:06:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:30:A3:7A:DA:4D:A1:D5:64:20:72:64:36:CC:18:6E:A0:D3:61:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D99038CBB7911EFB3742F9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.18.0/23
Signature Algorithm: sha256WithRSAEncryption
02:ae:4d:36:7c:f8:ab:a2:a5:8f:55:75:58:f7:03:71:5e:0a:
75:22:5e:7b:75:cd:56:3d:b7:0f:99:46:53:63:42:16:0b:d4:
40:85:2e:2d:41:b0:ab:66:ab:24:e6:ba:76:9d:5d:2c:0f:f1:
14:16:af:72:9b:79:0e:40:14:d0:65:09:0d:30:c5:46:d4:e8:
c5:f6:76:77:cf:e2:10:c3:ec:be:2f:aa:a9:89:40:66:41:b2:
98:f5:78:fd:e5:59:2f:4e:69:47:5b:95:7d:3a:b6:87:f9:8e:
bb:1a:eb:98:5c:c5:5a:fa:01:06:dc:d0:71:c8:92:20:03:c3:
3c:28:02:d6:ac:d0:c3:93:05:98:19:06:06:85:c8:93:bb:5f:
5b:66:46:e6:d3:01:82:ad:79:79:97:ba:42:74:0a:29:ca:99:
c5:8b:68:cf:8e:3a:6e:33:d1:1f:ea:13:d7:77:0d:b8:36:a5:
1a:1a:be:d4:98:e5:76:bf:4b:67:3a:86:68:aa:8f:ab:0f:09:
46:9d:d3:a0:c2:6b:03:8a:8f:a0:31:91:e3:60:72:ae:0a:07:
1c:ff:91:81:4c:20:a1:3e:6f:65:76:5f:ac:5b:2d:39:1f:df:
a6:9a:9d:8c:c0:e2:ba:b1:43:9a:1f:aa:9b:6c:13:c7:f7:2a:
ea:ae:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:05 2025 by rpki-client