Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43792C60F11EF986C8782762E951A.roa
File: 08E43792C60F11EF986C8782762E951A.roa (raw, json)
Hash identifier: SMxekjjEPDXET9cWzxoxsZY4KJ+IPAADWFmByCO4NmY=
Subject key identifier: 74:07:A3:5C:8A:5E:0B:65:87:6E:4C:E9:30:35:63:72:CB:AF:E2:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012ED6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43792C60F11EF986C8782762E951A.roa
Signing time: Sun 29 Dec 2024 18:02:15 +0000
ROA not before: Sun 29 Dec 2024 18:02:11 +0000
ROA not after: Sun 12 Dec 2027 18:02:11 +0000
asID: 17561
IP address blocks: 154.217.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77526 (0x12ed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:02:11 2024 GMT
Not After : Dec 12 18:02:11 2027 GMT
Subject: CN=67718ea7-0469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:d2:71:4a:1f:bd:8d:53:36:9d:48:fa:eb:
0b:d0:52:73:7f:e1:15:b8:bf:86:38:df:cf:d0:f8:
44:63:7d:79:03:00:58:10:5d:d6:d5:0f:26:5b:8f:
07:98:c7:c6:66:45:50:7d:7d:0a:e6:f3:81:b8:1b:
ca:11:53:82:74:8f:10:4c:79:3d:d8:cc:df:87:1e:
55:ea:45:3c:b5:12:57:58:47:53:16:c2:9a:08:d1:
d5:e3:88:94:ce:d8:3c:9c:a3:4b:ee:19:68:bc:80:
fc:72:f6:6e:df:ee:8f:16:f8:5d:76:5c:fd:b7:90:
1d:e7:ae:3f:85:10:dc:4c:7d:d5:79:1b:6b:95:a1:
78:76:e4:98:d0:f3:06:cd:83:13:87:a2:a8:c7:4d:
5c:8a:cb:59:5f:bd:d8:86:83:f9:ba:65:71:37:77:
18:d2:ae:56:94:b8:93:2c:32:a0:d5:54:17:46:3a:
f2:c2:bd:59:42:f6:7e:20:ff:25:42:bd:69:b1:49:
a2:d1:ba:39:88:de:7f:f6:61:df:91:1e:18:09:87:
02:3d:d2:a8:7c:de:04:66:62:36:0c:a3:5f:1f:a4:
77:f1:9c:86:b4:dc:9f:10:3f:34:cd:78:19:e3:55:
d2:a5:c5:c6:e8:c5:44:87:88:4f:5e:1f:01:ab:14:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:A3:5C:8A:5E:0B:65:87:6E:4C:E9:30:35:63:72:CB:AF:E2:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E43792C60F11EF986C8782762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.78.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0c:6a:b0:92:61:81:85:fa:9c:37:67:a2:95:54:64:b9:02:
c8:3a:fc:00:d2:db:1e:7e:68:c8:3a:3b:cf:a4:1f:3e:f5:00:
31:c6:c3:95:1b:4d:de:1b:45:92:61:cc:14:1e:7a:cf:b8:a5:
7d:b2:02:71:1c:64:ae:88:c5:d5:d8:90:01:f7:6c:22:81:c3:
bb:ac:12:22:05:85:58:11:7a:f9:bd:95:cd:40:66:dc:72:16:
5c:5a:15:71:f4:72:d6:ee:e4:cd:65:c5:f1:5c:33:75:c7:77:
63:5e:a5:6b:95:59:f0:92:b5:07:3b:14:ae:b4:d6:59:74:25:
f5:b2:51:30:2e:fe:62:f2:00:19:d3:63:e4:ee:dd:d0:10:3a:
08:c9:e6:6a:15:4e:5c:89:e7:c7:c6:0c:eb:89:15:4a:1b:7a:
d2:1f:7e:5f:b0:dc:17:73:79:25:25:b1:6c:2b:fa:e6:77:cf:
2a:99:e6:23:29:53:ec:6b:a2:db:6d:5e:14:1d:22:59:0f:c6:
94:a7:af:67:4b:49:ec:64:38:fb:ac:3d:7a:7b:6e:f7:71:3a:
f9:4b:1f:aa:ba:f8:82:ca:92:04:05:7b:fc:1b:cb:c2:9c:b9:
96:72:c4:19:33:ff:7b:18:94:5d:19:ae:19:69:03:15:ef:ac:
a0:6a:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:57 2025 by rpki-client