Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161383C2C5FC11EF9E02208C762E951A.roa
File: 161383C2C5FC11EF9E02208C762E951A.roa (raw, json)
Hash identifier: cpKvL1s9ReJwPU8bcNcYyNcKzWrDpVYUnefEszSaM4s=
Subject key identifier: 6B:BA:5C:81:FD:0B:69:0C:D8:F0:62:56:52:A4:8C:45:A1:14:2F:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161383C2C5FC11EF9E02208C762E951A.roa
Signing time: Sun 29 Dec 2024 15:46:37 +0000
ROA not before: Sun 29 Dec 2024 15:46:33 +0000
ROA not after: Sun 12 Dec 2027 15:46:33 +0000
asID: 17561
IP address blocks: 154.216.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77364 (0x12e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:46:33 2024 GMT
Not After : Dec 12 15:46:33 2027 GMT
Subject: CN=67716edc-98f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:f0:c2:32:b6:77:4b:77:c7:4a:4d:05:69:
f7:da:12:dc:a9:46:63:46:b4:ea:81:b3:50:f9:08:
83:ff:0e:c5:e0:5e:28:c9:4b:c8:35:97:b3:b0:83:
3d:ce:60:c6:d4:05:4f:59:90:89:39:7b:8e:0c:15:
7a:d4:62:17:bc:9c:83:63:39:35:e7:97:22:f5:aa:
32:38:49:bc:88:92:84:15:1c:f5:94:76:1f:50:f2:
35:41:8a:7d:88:5b:cb:1e:9d:71:6a:c1:72:ef:6f:
be:25:12:bc:ab:73:09:b8:34:7a:1d:65:bd:d1:34:
1a:15:e0:e7:2a:49:70:ec:67:2a:b1:e1:c5:18:a2:
76:e2:81:92:7d:ed:44:85:f2:f8:f6:dc:17:99:b7:
fd:d0:78:41:90:d4:df:17:27:05:43:fd:09:ec:9a:
2c:8a:73:89:e2:3e:bc:9d:a4:8f:3b:20:05:8f:c2:
62:c5:d3:2b:74:37:d5:43:62:df:87:01:7e:b5:e9:
cd:94:e1:41:7a:aa:45:d0:52:82:2a:27:46:80:bc:
cf:a3:c1:24:03:b6:c3:83:ca:95:d7:95:ed:91:22:
2a:f6:1e:c7:bc:67:0e:a6:59:07:30:bb:c8:ac:d6:
9b:54:37:61:bf:1b:4e:17:07:ab:9c:03:ae:d3:7d:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:5C:81:FD:0B:69:0C:D8:F0:62:56:52:A4:8C:45:A1:14:2F:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/161383C2C5FC11EF9E02208C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.29.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:61:fe:f7:ee:cb:58:40:09:26:bb:b4:4e:09:c9:0c:1e:2a:
1c:ef:ec:9d:5c:6a:b6:d6:55:96:8f:f5:35:e6:18:ce:cc:6a:
1a:f3:12:8c:fb:88:1e:fb:c9:5e:f5:7c:bd:42:b6:a0:54:da:
2c:34:71:34:b2:c9:61:2d:ca:92:d9:d0:72:59:52:ae:8f:f8:
54:ae:8b:59:6c:c0:40:e2:fc:10:ab:69:c5:fe:b0:a6:fb:32:
2f:a5:ca:fc:b0:73:f6:a5:65:6c:cb:2b:f3:11:db:63:b9:ed:
09:b8:9e:fe:ad:c9:14:3e:63:33:35:e3:74:7f:f4:7a:47:39:
4c:42:ee:87:cd:7b:cf:85:31:9e:82:29:2e:29:1d:23:24:0f:
5f:90:14:70:52:ec:39:56:8f:15:12:41:c0:c8:dc:ef:93:03:
e5:65:4d:eb:0b:e3:4a:89:94:9d:83:ed:9e:6b:26:af:5e:5b:
3e:1b:63:06:78:8a:82:93:3f:6b:35:1d:e3:6c:58:1f:e7:1f:
de:fe:ac:ff:e0:0c:75:ae:f9:99:53:6b:ad:cf:2c:46:43:d4:
9b:f0:6d:f7:03:05:54:08:0f:b2:57:7b:e8:01:83:48:52:5f:
cb:2e:84:1c:b5:32:08:63:bc:79:fe:c6:d0:19:60:80:75:3a:
02:d0:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:11 2025 by rpki-client