Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/370A4996C5E111EFAAC29664762E951A.roa
File: 370A4996C5E111EFAAC29664762E951A.roa (raw, json)
Hash identifier: BnWPyUoZ67woQCzKWm1Dgdm8Zh8JvJCXgrLpCWX0qOE=
Subject key identifier: CC:6C:CF:C5:A0:1D:CB:12:C1:7F:CD:5F:A9:DB:25:A2:91:BA:81:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/370A4996C5E111EFAAC29664762E951A.roa
Signing time: Sun 29 Dec 2024 12:34:15 +0000
ROA not before: Sun 29 Dec 2024 12:34:12 +0000
ROA not after: Sun 12 Dec 2027 12:34:12 +0000
asID: 17561
IP address blocks: 154.210.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77136 (0x12d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:34:12 2024 GMT
Not After : Dec 12 12:34:12 2027 GMT
Subject: CN=677141c7-9608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:76:29:db:c9:7a:91:d6:4d:a9:ec:19:97:e5:
9c:bf:e4:65:f4:12:df:c4:4b:00:44:c0:2b:d1:b1:
97:34:68:1a:2f:48:94:99:71:e2:4c:d6:e0:43:83:
26:c2:39:9c:5f:c6:d3:95:5c:83:8d:70:0a:84:80:
2c:5b:55:aa:68:7d:b5:31:f0:eb:64:b0:6f:69:a8:
42:c1:bf:5a:63:f6:18:3a:3c:8d:66:36:0c:12:f9:
da:0a:44:43:ef:f1:c4:c7:45:b0:7b:fc:26:04:dc:
b1:83:e0:c2:72:ac:7c:b4:77:7f:3e:5d:93:e4:32:
be:62:2b:c5:5a:40:46:e4:2b:63:dd:f2:19:a5:fc:
08:b6:70:98:b7:ea:67:89:7c:1b:28:43:b9:78:6d:
27:2f:b0:b2:7a:21:67:b5:26:2b:13:01:b5:47:cb:
c4:23:08:a8:81:16:05:e8:97:38:1c:67:d5:92:6e:
9d:02:cc:40:d4:db:9f:29:ba:82:1a:76:87:52:3d:
5c:ee:19:8b:83:df:dd:7e:3a:52:58:c3:88:ab:4c:
39:6f:d7:40:79:a5:b1:6e:e9:81:0d:98:15:87:e5:
65:49:7c:e3:44:2b:8f:e2:ae:1a:58:6a:c5:72:2a:
b1:51:14:46:fc:a4:94:25:4b:54:0a:66:00:b4:f3:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:CF:C5:A0:1D:CB:12:C1:7F:CD:5F:A9:DB:25:A2:91:BA:81:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/370A4996C5E111EFAAC29664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:67:6d:60:fb:8e:dd:61:a6:3d:5e:27:cf:71:81:3b:35:ae:
9a:fc:7a:33:f3:a3:2e:93:ad:2f:81:81:10:a2:49:d1:46:2d:
55:6e:bd:44:ee:fb:bc:5c:6d:e4:c5:1f:ce:27:87:cb:b3:aa:
6d:3d:bf:ee:13:41:56:8d:b1:72:a2:73:81:e0:24:73:d9:2f:
36:1c:09:0c:a2:ad:ad:de:51:34:cd:0b:ea:3d:27:fa:4c:d5:
c4:86:34:6d:37:2f:7e:f8:86:3e:e1:e8:28:b5:52:7c:cb:84:
8e:fa:b6:f3:56:fa:70:90:ba:be:57:6f:0c:c4:40:2d:df:29:
1b:f1:b0:2a:f0:6e:b8:f2:c5:9d:1a:fc:d9:3e:7b:6f:cc:64:
61:0c:67:15:d4:a9:39:4d:e9:70:db:c1:ac:6a:ee:af:21:b3:
95:3d:be:07:5b:9c:20:a3:b6:2e:05:c4:d8:93:1e:3f:4a:38:
a7:41:c4:16:7a:86:03:1d:20:6a:c2:60:28:1d:92:86:d3:75:
bc:8c:1a:70:83:e0:37:b6:21:05:6f:bd:84:ea:2f:a0:ab:b5:
52:0e:0c:27:d3:61:b4:6e:aa:6a:4c:c5:bc:8a:f0:63:73:29:
b5:02:ba:b4:79:a8:0e:6b:ac:b8:70:9b:aa:e3:0c:e5:5d:e2:
95:a4:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:06:15 2025 by rpki-client