Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280ABADCC63811EFAF1BA184762E951A.roa
File: 280ABADCC63811EFAF1BA184762E951A.roa (raw, json)
Hash identifier: 0Fpq4ez2PgJncbMBioymiBUu3QFnr8WXABO4X2CmOxQ=
Subject key identifier: 30:A8:9E:F5:BD:93:7C:83:2B:47:83:28:41:2A:9E:60:4A:21:7A:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01302D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280ABADCC63811EFAF1BA184762E951A.roa
Signing time: Sun 29 Dec 2024 22:56:36 +0000
ROA not before: Sun 29 Dec 2024 22:56:33 +0000
ROA not after: Sun 12 Dec 2027 22:56:33 +0000
asID: 17561
IP address blocks: 154.217.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77869 (0x1302d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:56:33 2024 GMT
Not After : Dec 12 22:56:33 2027 GMT
Subject: CN=6771d3a4-b7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:f6:45:9f:ae:ab:d8:d5:da:a0:8b:9d:11:
1a:68:79:e8:ab:9b:f5:81:fc:8a:f1:8a:c1:78:37:
c1:90:46:4a:6f:ef:fe:f9:40:3d:65:bf:e6:9f:27:
1c:57:57:a5:a3:74:5c:3d:e8:80:59:81:ea:7a:f6:
83:c3:75:5d:80:b1:39:be:00:da:d2:5a:57:56:1f:
a9:3a:c6:7f:3e:c3:9d:d0:5d:64:4e:78:b9:b3:03:
28:43:1e:49:93:27:ee:e1:ec:61:87:0a:50:35:96:
42:db:6e:ad:56:13:ae:8b:3f:a8:10:ea:b5:4e:8e:
63:52:03:e2:22:07:57:d5:2e:08:b1:79:0d:81:7f:
7c:ca:d4:f0:42:86:0a:01:d0:92:32:48:cb:9b:2b:
fa:c7:d7:73:14:ea:1b:2e:78:ad:81:e8:59:95:85:
f9:11:18:05:63:08:45:0f:81:fe:5d:7e:0a:5d:d5:
0a:d2:d8:22:5d:ff:25:a3:b1:af:fc:fd:e4:f9:c0:
1b:d1:94:ea:da:47:94:5a:fe:c5:bf:dd:e8:48:23:
d6:15:5d:37:71:7e:97:98:ca:4f:f1:39:fa:7d:83:
35:b9:32:9d:61:fa:79:e7:e7:bb:a9:7e:15:8c:63:
3b:8d:51:da:b3:03:ec:96:9d:a6:60:e0:e9:85:76:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:9E:F5:BD:93:7C:83:2B:47:83:28:41:2A:9E:60:4A:21:7A:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/280ABADCC63811EFAF1BA184762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c8:39:60:37:20:07:31:60:f5:fb:36:75:3c:6c:f1:90:70:
b2:4e:76:ee:91:09:86:a3:6d:16:b9:55:c1:c1:41:b8:5d:50:
c9:5d:6d:b4:a8:7a:32:b8:53:96:f6:14:e3:ed:ed:54:a6:4b:
21:69:e4:6c:1c:c2:da:10:88:d3:eb:e1:00:e2:f0:6f:2e:00:
bf:5a:5c:40:ca:74:a0:4a:b1:81:33:8c:29:6f:ec:08:58:9a:
d7:70:1e:cd:df:09:18:06:a5:d5:05:e6:e8:2d:f3:ea:79:25:
09:21:70:26:38:c2:04:5d:0b:41:b2:6f:28:48:85:02:5c:be:
50:08:a7:3b:a1:95:15:54:03:c4:03:b4:21:73:ec:c4:d0:aa:
ac:77:dd:9a:75:82:75:20:0b:2b:8e:a5:c1:79:29:a4:4d:1c:
09:da:cf:dc:29:8e:b5:34:e7:e8:39:23:a6:dd:15:f0:40:d2:
7a:81:c0:fd:4f:51:49:1e:ab:4e:ef:af:69:71:0e:db:1c:5e:
f3:70:9e:eb:22:ee:16:7b:dc:8f:1a:65:cd:a5:75:27:57:98:
ad:18:12:76:3e:b9:9f:2f:25:90:6a:c4:ef:f7:2d:71:2f:e6:
2b:69:60:ce:65:ff:3c:b1:90:6f:49:dc:ba:3f:8e:c8:31:61:
20:c7:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client