Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/037E39A0C61511EFA1AC87A9762E951A.roa
File: 037E39A0C61511EFA1AC87A9762E951A.roa (raw, json)
Hash identifier: od5k4TIJHyR9vocbSOsW1ongcd7g4unPeRTo1Az6be4=
Subject key identifier: 20:4B:D7:5C:8C:5F:AD:4A:CC:53:97:83:BC:F3:1B:A8:00:78:1F:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/037E39A0C61511EFA1AC87A9762E951A.roa
Signing time: Sun 29 Dec 2024 18:45:03 +0000
ROA not before: Sun 29 Dec 2024 18:44:59 +0000
ROA not after: Sun 12 Dec 2027 18:44:59 +0000
asID: 17561
IP address blocks: 154.217.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77576 (0x12f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:44:59 2024 GMT
Not After : Dec 12 18:44:59 2027 GMT
Subject: CN=677198af-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:cf:f8:eb:38:0e:ca:1c:dc:81:f3:4e:46:
e2:e8:49:25:5f:97:83:fc:61:01:ff:66:37:5a:e3:
e8:49:88:a3:b8:29:7e:17:ae:e9:ba:de:47:1e:0f:
a2:81:0d:ab:12:60:f4:3f:0a:0b:b8:7d:9d:34:90:
ef:3c:41:2d:8e:cd:6a:75:3e:63:91:c8:65:4d:1d:
bc:60:e1:e0:ab:d3:0c:ab:82:70:c5:3e:7e:cc:02:
08:20:cf:17:72:d7:b9:16:87:84:96:78:6a:7f:1e:
d6:5e:b7:b1:34:67:99:c2:a1:aa:df:f8:e1:ac:3c:
16:52:82:00:07:e7:ce:98:ba:8c:74:74:1f:ea:92:
b7:b7:8d:44:7d:44:48:ea:64:4a:65:db:cd:f3:58:
15:61:85:4d:26:88:e4:69:7f:74:88:22:e8:39:97:
57:72:ad:a7:a3:10:1f:05:a5:ee:bb:86:e4:c4:c7:
9f:cd:8e:00:e3:ea:ca:ee:25:97:16:50:4d:95:ad:
97:2e:0e:49:ab:6a:47:26:d5:ca:cd:ae:6b:0e:06:
0a:00:2d:a0:e6:da:c8:57:26:9f:6b:59:f5:77:a0:
37:77:d1:31:e8:52:59:81:c9:ee:3f:03:58:c8:f1:
8d:04:4b:e9:22:d8:ba:03:5c:49:99:7d:e7:3d:ca:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:D7:5C:8C:5F:AD:4A:CC:53:97:83:BC:F3:1B:A8:00:78:1F:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/037E39A0C61511EFA1AC87A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.103.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d5:12:d2:bd:2b:91:df:aa:6b:c4:7a:24:51:7b:14:ec:e5:
46:44:8b:65:ed:5d:5e:b4:1c:bd:26:c4:b8:09:4a:d8:d9:5a:
91:93:14:e8:79:db:4f:3f:40:29:a6:f3:f2:28:78:a2:16:2a:
9a:25:a1:39:f4:75:b9:62:e2:c8:2d:89:9c:1e:00:ed:b4:fa:
18:a4:c2:82:5f:07:bd:d3:eb:1c:b1:4b:72:2f:23:2c:74:4c:
b4:17:83:a9:a0:44:10:b8:a4:70:51:e9:31:0e:66:3d:4f:fd:
98:59:89:2a:0d:da:f4:4b:8f:ce:cc:26:23:f7:0a:1f:82:a0:
8c:f3:b7:51:38:e1:94:04:e7:eb:b9:17:fa:8b:74:72:1e:99:
69:1a:7c:5e:fc:f2:3d:2f:29:ad:66:16:09:ca:eb:be:38:ea:
9a:6b:25:44:fc:be:9d:59:17:81:53:b3:61:b5:2e:a0:fb:6c:
dd:54:fc:37:4f:1d:66:51:fe:f3:e1:a5:f6:eb:75:d8:99:bc:
95:1f:65:f6:68:f8:e9:04:9c:1b:aa:6b:1b:f9:78:a2:55:d0:
e7:fa:5b:04:59:2b:e7:2e:08:21:58:ad:43:83:ea:05:64:89:
8a:3d:11:6a:65:08:3f:11:be:fc:c3:89:af:ae:8e:9d:a6:54:
fa:c6:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:02 2025 by rpki-client