Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2379E810C61211EFAC669B95762E951A.roa
File: 2379E810C61211EFAC669B95762E951A.roa (raw, json)
Hash identifier: mDb+CWc0oMXY4U2wY3Oxi+cbb2pbus5crLS76+FTbBU=
Subject key identifier: 70:AF:EF:B9:A7:7C:D7:C1:03:83:8C:91:2E:FD:65:66:C5:C7:71:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2379E810C61211EFAC669B95762E951A.roa
Signing time: Sun 29 Dec 2024 18:24:28 +0000
ROA not before: Sun 29 Dec 2024 18:24:24 +0000
ROA not after: Sun 12 Dec 2027 18:24:24 +0000
asID: 17561
IP address blocks: 154.217.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77552 (0x12ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:24:24 2024 GMT
Not After : Dec 12 18:24:24 2027 GMT
Subject: CN=677193dc-f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:cb:7b:29:f6:6d:4f:b0:58:f5:27:dc:56:
c7:36:bd:13:26:9e:7e:e7:39:51:3e:d1:00:75:78:
14:c8:9d:02:b0:05:17:d6:40:4e:93:45:27:8a:77:
d9:92:b3:bf:50:f5:ba:02:e1:ae:ec:23:30:91:f0:
93:43:d6:b1:cb:aa:4e:31:af:b0:fc:37:60:62:ea:
a5:dc:5f:45:ab:c2:64:bb:b7:7f:a7:ad:e2:7a:74:
1e:d3:5c:23:a3:3f:90:f9:f1:69:57:f5:69:af:c9:
c4:a1:c9:70:e7:19:74:0a:bc:0c:b4:d6:73:be:bf:
e9:5d:49:75:4b:70:3f:7a:9d:cd:1d:74:90:92:6c:
9f:6e:a3:4e:fb:a7:ae:90:15:7e:0b:40:79:61:0c:
7e:5e:73:51:a7:56:14:23:0c:02:1e:c1:4d:b7:19:
76:9b:e6:49:49:d6:1b:39:7a:95:b9:ad:c5:e5:af:
7d:f4:55:df:45:d8:af:6b:2d:5f:0e:2c:49:80:73:
9d:cd:dd:ee:90:f7:49:74:73:de:0c:fa:71:af:46:
ce:73:3f:81:87:ed:59:83:c0:69:fb:32:e5:ab:f3:
03:b5:61:8c:b0:fa:46:d6:ff:5e:12:f5:d7:48:a8:
dd:6c:7b:1c:ab:c5:6e:69:94:bc:2c:d1:ca:23:9a:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:EF:B9:A7:7C:D7:C1:03:83:8C:91:2E:FD:65:66:C5:C7:71:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2379E810C61211EFAC669B95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:10:36:e3:c7:be:71:df:31:75:0c:e6:05:ea:11:50:d8:f3:
da:74:46:11:8a:e6:92:6b:dd:07:7c:7c:b0:f7:55:3f:58:64:
51:f9:79:79:da:1d:4d:50:dc:60:9d:09:0a:a5:b1:4b:2e:a5:
0d:d5:05:51:76:c1:a3:f1:ab:10:04:6e:c0:9f:8f:f6:e9:af:
32:8d:4b:ea:6b:2e:da:a3:b1:dd:fa:eb:42:aa:68:61:d3:a6:
f4:53:e7:94:5a:79:fb:70:de:4a:7e:78:00:17:b6:5d:ea:cc:
61:19:0a:60:13:3c:f2:1d:81:ee:12:ae:ab:7a:b1:63:19:45:
07:c6:3c:8a:f5:4b:44:f9:e0:9d:c4:4d:ad:41:5f:54:8c:23:
c1:b0:ee:e1:7a:54:4d:43:23:db:6f:01:94:74:89:d4:96:83:
3e:f6:7d:76:15:9d:84:85:f7:f2:b5:0f:07:88:2d:a5:a7:59:
4c:29:41:2f:9b:70:ae:44:e6:00:b0:1c:7a:e7:27:95:93:92:
85:26:45:39:7b:f9:2d:61:e9:f0:c1:18:5c:8f:b2:96:65:6f:
d2:f7:9c:8d:da:1a:7d:72:2f:a1:c5:21:3e:1f:89:84:c3:bc:
ef:3b:24:47:0a:9a:23:d5:eb:94:3a:2e:8c:bd:f9:ca:7b:71:
51:5f:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:42 2025 by rpki-client