Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E359532C60111EFB87432AB762E951A.roa
File: 0E359532C60111EFB87432AB762E951A.roa (raw, json)
Hash identifier: ZMPkQzDvNrJu4NYCzebJDZrC/bF1im5N+Arjj6zfORQ=
Subject key identifier: 74:2F:51:A5:B4:9B:82:C9:E7:AE:3B:39:D8:A5:91:E3:5C:A2:A8:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E359532C60111EFB87432AB762E951A.roa
Signing time: Sun 29 Dec 2024 16:22:11 +0000
ROA not before: Sun 29 Dec 2024 16:22:07 +0000
ROA not after: Sun 12 Dec 2027 16:22:07 +0000
asID: 17561
IP address blocks: 154.217.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77406 (0x12e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:22:07 2024 GMT
Not After : Dec 12 16:22:07 2027 GMT
Subject: CN=67717733-8c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:a1:7d:81:03:d0:c4:ff:e4:e5:d2:c7:12:
c7:01:03:06:de:98:58:a0:e3:f5:d0:94:43:c4:98:
bc:82:01:83:cf:e0:1e:57:8b:93:ba:4b:3b:af:51:
c7:89:64:6d:c1:50:54:1c:ca:b2:58:5e:84:8d:cf:
06:f5:e4:1d:08:5d:11:f3:ed:65:5f:fd:7d:1d:4b:
d6:f5:6e:f9:96:0e:91:2c:3d:23:8b:0f:26:ec:ae:
5d:34:a7:08:d0:ec:8f:8e:62:87:c1:c7:e1:89:19:
4b:ff:61:8c:f8:4a:71:0c:7f:8c:de:84:cd:c0:5d:
df:40:4b:95:4d:d0:7a:c2:8f:57:fa:98:4f:82:e1:
47:78:ec:f9:57:cd:e0:88:18:11:2a:f6:c7:ad:32:
15:4f:e3:39:76:63:9f:c2:f9:79:6a:0d:7b:14:54:
ba:58:da:b2:c7:2b:c2:24:5a:41:6e:f7:2f:b7:d5:
94:b3:10:47:74:11:b2:17:0f:5c:4c:f4:7b:1e:70:
18:44:35:4b:97:00:85:6b:a0:72:35:01:40:b8:14:
1a:8b:fa:1f:6d:c2:24:c3:d7:90:94:51:b8:c0:53:
43:62:eb:f7:fd:26:9a:c7:e5:16:fe:27:e5:fe:0e:
8b:e4:5d:06:40:07:b4:44:70:16:e8:73:33:68:01:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:51:A5:B4:9B:82:C9:E7:AE:3B:39:D8:A5:91:E3:5C:A2:A8:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E359532C60111EFB87432AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.18.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:a7:86:4d:4c:db:0b:b1:b9:06:fd:24:6c:30:9d:c6:95:
31:9d:fd:cd:84:51:ec:99:98:d9:4c:18:9b:67:97:a8:c1:f8:
13:0c:cd:39:90:b0:99:fe:30:d1:74:ba:40:d8:a6:66:55:ed:
2c:fb:b9:a0:b4:d6:c1:53:b1:ed:02:d9:81:78:29:af:5e:9d:
4d:60:50:37:dc:c0:cd:cf:71:f7:f6:cb:37:cd:12:8f:52:5e:
35:f6:81:4d:28:bb:52:c1:65:79:16:29:d7:64:df:18:de:87:
0e:93:39:43:87:2e:30:ef:96:8b:5e:3a:0e:97:42:d7:1c:5f:
e7:22:71:41:7b:98:6c:a3:68:b1:97:88:e1:ab:06:83:32:16:
5e:bf:73:c4:fe:fa:66:61:47:d7:41:03:24:32:a6:26:23:74:
ff:20:f6:d2:2e:81:49:08:a9:f5:ce:57:5b:0d:51:93:70:49:
79:4c:90:3f:a5:9c:d3:8c:6b:e3:46:e1:00:3e:fc:a9:58:8b:
65:fd:56:1a:9b:02:fe:57:cf:3b:ba:e7:6a:49:12:1f:d3:5c:
16:78:78:59:fc:64:05:92:09:f8:ef:80:bd:a5:5c:60:f4:82:
88:c1:10:9e:f5:bd:fd:7b:59:71:fa:1e:20:7d:d9:b9:6c:ef:
7e:45:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:15 2025 by rpki-client