Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B487D0C61C11EFA4998056762E951A.roa
File: 24B487D0C61C11EFA4998056762E951A.roa (raw, json)
Hash identifier: EkKeULbWquWhXAL8K2E4YwHS3F1k4wswv4frQ4MYclM=
Subject key identifier: 99:38:95:F9:0C:30:16:E6:C0:DC:CA:60:96:F0:31:2F:1A:24:62:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B487D0C61C11EFA4998056762E951A.roa
Signing time: Sun 29 Dec 2024 19:36:05 +0000
ROA not before: Sun 29 Dec 2024 19:36:01 +0000
ROA not after: Sun 12 Dec 2027 19:36:01 +0000
asID: 17561
IP address blocks: 154.217.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77636 (0x12f44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:36:01 2024 GMT
Not After : Dec 12 19:36:01 2027 GMT
Subject: CN=6771a4a5-1e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:d9:a5:5a:dd:ba:d2:ea:bb:ab:4b:48:e7:
d7:7f:dd:09:0b:cd:8b:8d:92:d1:d6:72:c4:38:b1:
cf:13:34:73:05:51:2d:dd:87:8f:d3:88:62:dd:16:
52:54:cf:54:2a:55:48:92:7d:7b:0e:a4:80:bf:d5:
9c:56:9f:a9:37:86:fd:f7:c9:65:9e:6d:d5:35:93:
5c:91:36:6e:3a:1f:80:39:96:9a:3c:35:dc:88:58:
53:34:38:41:a2:4a:d8:3a:87:5a:f8:4d:4f:eb:81:
4b:1e:b4:f7:8a:24:02:f0:b6:84:33:f0:3c:67:10:
7f:ec:42:ac:3e:a8:7b:64:53:8d:58:8b:7c:06:59:
aa:57:3b:ae:7e:de:18:2b:a0:87:e8:e1:3e:35:2f:
96:f8:ab:0f:22:96:7a:d7:67:7d:c8:91:0f:da:bc:
bd:be:6b:aa:e0:16:04:94:c6:6a:41:82:a8:44:c8:
5d:41:23:c3:7b:88:30:de:73:e3:1f:98:d9:34:27:
b1:d6:89:e6:39:2a:b7:13:57:f3:92:66:46:c6:36:
12:8c:04:36:ac:39:d3:65:98:32:99:87:40:12:94:
9c:e1:16:96:15:b8:fa:94:79:0d:47:c9:d5:d2:21:
dd:2a:8c:12:c5:d8:d2:eb:63:7a:15:d7:ed:ee:5e:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:95:F9:0C:30:16:E6:C0:DC:CA:60:96:F0:31:2F:1A:24:62:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B487D0C61C11EFA4998056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.133.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:15:b6:df:ed:74:8f:5b:0d:a7:41:b6:d4:45:d0:02:c3:02:
55:36:3c:f3:8a:40:71:24:67:4a:09:8b:48:73:8d:08:47:62:
48:f7:66:b3:f7:1a:ca:b6:d0:ba:93:6a:ec:02:e4:7f:2d:92:
02:e2:2a:1e:c6:ef:a2:00:21:2f:d9:98:52:21:4b:0f:37:cc:
ee:5b:11:48:d3:b2:c1:e2:7e:0d:79:78:7e:ad:09:5a:63:68:
f8:33:6c:ac:f0:50:18:1f:48:88:2d:9c:73:5c:07:f4:bf:d5:
e4:ad:e5:d1:13:f5:4a:f2:15:db:09:6c:c4:f4:7a:79:2f:f9:
e4:8a:37:f6:27:66:4c:9d:c4:c4:5e:6b:3d:d5:c0:a4:52:e6:
ab:3c:72:52:01:4f:08:1c:d8:97:13:19:22:2e:f1:7c:a0:8a:
8e:92:fb:7e:33:33:4f:19:07:e2:9c:35:67:da:6a:63:78:0d:
08:d2:58:89:2c:f7:df:1a:e8:9b:5e:c0:70:ac:80:f4:d1:b8:
bf:d1:ad:ee:35:81:99:ec:68:65:9c:69:26:0d:3e:56:f0:93:
cc:55:96:12:f6:4b:af:04:8a:ef:9b:1b:4f:7f:16:5c:a2:5a:
ff:68:69:b0:03:d3:39:d3:aa:c3:1f:33:43:85:a3:e5:75:e6:
7c:35:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:00 2025 by rpki-client