Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2926A9EEC62911EF90BDB9A6762E951A.roa
File: 2926A9EEC62911EF90BDB9A6762E951A.roa (raw, json)
Hash identifier: RqaRAIjSKv/qE/InTEKQgZa0j9GmOUVhJGJmpzzJ2MA=
Subject key identifier: ED:74:41:13:2B:1F:BB:7E:43:78:AF:DA:1E:DA:B4:63:25:C9:A2:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2926A9EEC62911EF90BDB9A6762E951A.roa
Signing time: Sun 29 Dec 2024 21:09:16 +0000
ROA not before: Sun 29 Dec 2024 21:09:11 +0000
ROA not after: Sun 12 Dec 2027 21:09:11 +0000
asID: 17561
IP address blocks: 154.217.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77744 (0x12fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:09:11 2024 GMT
Not After : Dec 12 21:09:11 2027 GMT
Subject: CN=6771ba7c-12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:f5:37:08:17:b9:9c:db:2f:bf:af:0f:6d:
6c:c7:3d:b6:31:e0:06:c2:0b:e9:d2:a2:27:c9:1b:
f7:2b:ee:c6:ef:9b:94:b7:ef:7c:89:ca:1f:cf:bc:
be:d0:ea:54:29:79:ee:98:46:79:c8:45:86:1a:78:
3f:b5:9a:03:32:58:1f:74:bd:70:58:82:0c:34:0b:
85:ff:7b:63:b4:08:f9:b4:ed:9e:aa:af:e7:74:1e:
64:f6:ef:0b:a1:00:f5:26:78:d9:aa:dd:09:86:92:
c1:48:93:98:c3:29:00:c7:46:f2:76:5d:09:98:7d:
57:72:52:f7:06:b0:ed:aa:20:f5:20:0e:2d:f2:85:
cb:42:0a:f8:6a:93:69:53:44:e6:f4:39:7f:4b:37:
ea:2f:f4:8a:51:1a:7c:9c:e4:fe:da:a9:ba:7a:3b:
51:d9:d1:9f:48:68:82:bf:da:a6:df:55:4f:3d:ad:
91:a1:af:45:3a:dd:d0:fc:3b:7c:ed:86:dc:ab:ad:
12:ce:e9:c3:c8:f5:99:d9:02:32:50:81:f5:44:e3:
19:5d:f1:80:0d:a0:53:ad:f3:23:eb:60:9f:36:f8:
54:fa:26:b0:20:35:34:ea:2c:35:f9:88:34:df:00:
70:a3:9f:ef:d5:84:bf:ab:a7:0f:99:fe:92:06:93:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:41:13:2B:1F:BB:7E:43:78:AF:DA:1E:DA:B4:63:25:C9:A2:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2926A9EEC62911EF90BDB9A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.187.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:ac:18:cc:2b:48:4c:3d:4e:0e:88:ca:61:57:2f:d0:a8:28:
a1:b4:1d:ae:c8:fe:e5:b6:fa:c2:fd:0d:06:5c:95:c2:a5:0e:
cb:05:66:7e:7e:88:e8:10:ce:f6:69:49:f9:a0:a3:d9:81:7d:
19:f2:86:c7:ca:04:c5:dd:6d:93:8c:85:0c:80:55:c4:c2:5e:
cd:6c:1e:fc:f2:17:a5:6d:aa:7e:ed:97:2b:50:77:a1:d5:fb:
cb:fd:6c:20:4b:23:50:0b:be:bf:ff:74:fd:f5:7b:8c:8c:de:
15:78:f1:eb:ac:d2:37:08:e7:8a:84:75:ac:47:a3:72:1c:d9:
6f:6d:59:e5:ca:0f:bb:22:2d:f0:ba:83:ab:a3:7e:ec:70:91:
92:3e:ce:a2:03:2a:15:28:76:44:51:1c:f3:de:aa:26:84:91:
6b:f5:0d:26:1b:27:9f:50:70:6f:6e:cc:5b:b2:a2:f8:33:9d:
2a:e7:bb:16:2c:e5:b6:3a:b0:b0:43:e5:fd:fa:12:98:1c:e6:
92:e7:c8:ae:a2:67:0a:2c:c0:5a:37:0d:c7:f9:31:1f:ff:e0:
50:c6:16:35:65:1f:5d:fb:fb:a3:9a:f4:79:40:c0:eb:d8:d3:
19:d6:73:8d:f5:05:d6:6a:0b:92:fd:fb:8e:35:bf:d6:1b:af:
34:08:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:04 2025 by rpki-client