Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3175F814C5EF11EF905F24BB762E951A.roa
File: 3175F814C5EF11EF905F24BB762E951A.roa (raw, json)
Hash identifier: DSeEhDhrh1C1V89N6sek9w//srV7hr3eOw08EJNwN8M=
Subject key identifier: B6:8C:5A:C8:6A:64:3E:7B:77:57:78:4C:8E:7E:28:28:8C:66:AC:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3175F814C5EF11EF905F24BB762E951A.roa
Signing time: Sun 29 Dec 2024 14:14:19 +0000
ROA not before: Sun 29 Dec 2024 14:14:15 +0000
ROA not after: Sun 12 Dec 2027 14:14:15 +0000
asID: 17561
IP address blocks: 154.211.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77256 (0x12dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:14:15 2024 GMT
Not After : Dec 12 14:14:15 2027 GMT
Subject: CN=6771593b-772f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:ad:00:89:c6:dc:89:98:68:e7:44:dc:c6:
31:a0:ba:79:0d:b5:5d:0d:b1:99:99:c6:5d:8f:1f:
90:0e:84:39:95:d9:3f:cc:33:68:68:d4:bc:46:36:
ee:97:39:18:df:b2:6f:b5:6a:73:d7:01:eb:41:02:
9e:e7:0f:83:74:a1:26:78:a6:fa:41:1e:38:72:54:
64:c4:e3:04:04:c3:58:aa:99:d3:8c:ea:a4:c8:a9:
02:35:de:d6:df:db:86:11:fc:cb:71:67:a3:d4:2d:
18:02:f2:6a:72:22:58:10:d8:9b:e5:1f:eb:a3:4b:
38:30:27:96:fc:94:1b:2f:c3:53:75:ce:7b:c3:67:
d4:54:01:75:01:f9:c6:90:38:b9:c6:03:99:9b:e4:
ae:3d:f0:ff:fd:6b:96:92:d1:8e:6d:40:e1:c7:b7:
f1:95:b6:8f:7e:81:05:a5:8b:f8:29:29:94:91:78:
e7:b7:1f:a7:a2:6b:4e:df:a5:dd:3f:30:0e:52:91:
07:83:2e:f4:4c:25:c8:35:46:4f:e0:35:f3:6c:7f:
d0:45:80:77:5d:d6:68:ea:23:4c:99:52:b8:10:fe:
b4:9c:06:b2:0e:44:91:e2:61:a5:73:7a:53:9a:94:
5c:c8:fb:ba:ef:82:42:23:86:40:de:91:53:27:52:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:5A:C8:6A:64:3E:7B:77:57:78:4C:8E:7E:28:28:8C:66:AC:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3175F814C5EF11EF905F24BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b5:ac:f8:7d:ce:63:7e:4f:d9:7f:65:ca:21:55:a6:bb:25:
82:96:04:31:8e:e1:b5:8a:1a:23:7a:0f:e3:00:5e:da:11:ab:
f8:7e:5c:f6:f7:04:f6:27:e5:6c:49:f8:c3:e5:93:59:28:24:
2b:c5:e1:2b:b6:ec:ac:4d:0c:b9:52:3b:34:97:34:24:d7:e8:
a4:92:aa:8e:ac:b8:20:49:8c:3f:d1:cf:c8:7c:83:cc:9e:42:
99:bc:0e:1d:9a:54:f7:4c:90:b6:5c:5c:23:10:29:22:cb:06:
ac:c7:ca:40:33:ee:0a:65:79:39:4e:1d:8c:e7:7d:65:6a:b1:
ac:5c:8c:ca:e3:f9:51:8f:90:ae:d0:05:21:05:18:f4:8c:1f:
1b:b3:64:1e:5b:f8:14:72:69:58:df:8a:d8:92:77:d1:6a:16:
ec:6c:46:f0:59:a8:3b:e1:ff:95:4f:e3:53:5b:ce:8e:a0:db:
50:a4:c2:3c:4e:6f:f4:83:31:4c:26:7c:2d:2f:f6:2c:99:77:
8d:2d:ec:d8:2b:d9:ed:dd:90:49:1a:61:6c:8a:96:57:78:39:
bd:08:d7:c4:05:4f:3b:37:68:b3:3a:48:6f:6b:62:9e:af:f2:
ec:dd:60:eb:38:f2:34:3a:5d:70:4d:0a:72:b5:dc:81:71:16:
9d:ec:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:58 2025 by rpki-client