Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB0ACF0C61111EF9DE82B91762E951A.roa
File: 2FB0ACF0C61111EF9DE82B91762E951A.roa (raw, json)
Hash identifier: o3wNtV+xU2OMrqz8kSSSzXHEwqw5Gm6tGIV4f3i1Ojw=
Subject key identifier: BC:B8:23:93:A9:0B:C4:6F:83:78:C0:99:9A:7D:8A:1D:5D:8A:A8:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB0ACF0C61111EF9DE82B91762E951A.roa
Signing time: Sun 29 Dec 2024 18:17:39 +0000
ROA not before: Sun 29 Dec 2024 18:17:35 +0000
ROA not after: Sun 12 Dec 2027 18:17:35 +0000
asID: 17561
IP address blocks: 154.217.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77544 (0x12ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:17:35 2024 GMT
Not After : Dec 12 18:17:35 2027 GMT
Subject: CN=67719243-36b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:4e:25:08:3a:2b:54:07:b4:e5:a2:29:42:
bc:8a:53:94:56:50:fa:76:e7:0c:fb:e5:90:a0:7a:
d0:b5:4f:b9:1c:39:f0:d4:88:31:1b:cb:33:b0:d1:
76:7c:22:34:27:88:52:a9:a5:64:93:fd:75:36:b5:
6f:ba:3e:eb:eb:3c:6f:d4:1d:54:be:ef:e8:46:e1:
45:5e:98:80:f8:9f:70:09:9f:7b:64:28:09:cf:ce:
57:32:b2:17:e3:ac:39:1f:61:a4:8c:96:f5:1a:b5:
01:41:01:59:ca:3c:97:a2:65:ec:a3:a9:b8:e9:e6:
f2:02:64:d1:cc:4e:ec:ed:74:fe:dd:04:e7:04:f1:
6b:e4:34:bc:cc:0c:bd:7c:6d:4a:28:67:17:d8:0d:
e2:a4:3d:94:cb:95:11:bb:4c:db:01:b9:c9:79:5c:
d7:82:f2:ec:c3:9c:79:0b:61:0a:82:20:a1:67:48:
9a:17:dd:d0:6b:8f:46:37:d3:50:91:ef:b9:3d:e4:
15:88:27:d3:72:ca:da:eb:70:f4:a0:f6:f2:3a:a8:
9c:a6:cb:07:af:2b:c4:85:31:66:84:21:db:84:47:
ae:a4:26:8e:8c:13:ad:70:a6:c7:cd:93:55:79:f2:
97:a5:ed:72:fc:b7:37:47:fd:b4:d8:f8:35:6f:44:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:23:93:A9:0B:C4:6F:83:78:C0:99:9A:7D:8A:1D:5D:8A:A8:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FB0ACF0C61111EF9DE82B91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:02:f2:d2:a6:c4:01:a9:dd:03:a8:1b:79:af:2b:70:c2:
4f:75:ac:96:7b:14:4a:14:71:28:9b:0b:1b:fb:5f:4b:cd:d8:
70:23:43:0f:30:8b:c2:43:52:7c:08:4f:fe:a3:d2:c2:44:1e:
09:b5:66:46:46:f7:3e:41:21:ae:9a:26:3d:64:04:10:6c:c3:
08:80:3a:10:ad:fb:61:5c:be:55:9c:f0:a1:43:67:44:85:62:
76:19:1f:f8:be:78:93:0c:75:8a:a0:d7:0a:e9:d8:3b:e8:30:
e2:ee:50:54:08:43:75:82:0b:8d:14:21:36:2b:ee:80:52:de:
bf:90:78:a2:a3:d9:51:70:60:b5:36:17:5c:12:52:a8:71:54:
71:d7:b5:fc:97:85:0b:b1:ad:c3:37:f5:68:af:13:9b:bc:33:
5f:de:1a:2d:7d:97:9d:5f:c7:56:28:91:6c:4c:3d:c9:ea:60:
de:a8:70:13:17:dd:7d:4b:52:e0:22:72:da:33:38:89:8c:73:
39:d7:65:cf:d1:d0:49:84:97:e1:43:cd:10:45:2f:f5:e4:df:
d5:c7:cc:28:32:79:6a:86:c0:c1:b9:81:0d:2d:6e:97:0a:c3:
1a:a9:fe:de:1f:a2:34:bc:76:8d:a5:b2:4c:58:17:54:91:09:
26:5d:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:38:02 2025 by rpki-client