Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C134692C60C11EF9BD56B71762E951A.roa
File: 3C134692C60C11EF9BD56B71762E951A.roa (raw, json)
Hash identifier: CypGH4oOuqaG22om/8Ks19l1WxR/1ICNKHj36NX878U=
Subject key identifier: 89:E7:1E:FB:CC:AB:5F:1B:96:4D:1F:D5:4D:DD:89:D0:EF:04:BB:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C134692C60C11EF9BD56B71762E951A.roa
Signing time: Sun 29 Dec 2024 17:42:12 +0000
ROA not before: Sun 29 Dec 2024 17:42:09 +0000
ROA not after: Sun 12 Dec 2027 17:42:09 +0000
asID: 17561
IP address blocks: 154.217.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77502 (0x12ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:42:09 2024 GMT
Not After : Dec 12 17:42:09 2027 GMT
Subject: CN=677189f4-ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:20:88:57:d6:f5:7e:b3:92:13:ea:9f:0a:
91:59:1f:ea:ad:54:c7:4a:c4:1f:f4:42:90:93:3a:
f5:c7:d0:9f:e9:f2:6c:22:5e:a4:9a:40:2b:16:d4:
18:f7:71:b0:48:b1:e0:ad:16:66:91:31:23:87:5a:
bd:cf:2d:15:6e:f3:13:4a:28:8a:be:22:4f:1d:3b:
8f:7c:e1:59:7f:59:1f:30:ff:93:6c:5e:40:d9:a8:
7a:ec:77:67:f5:d5:4e:9c:0d:fa:02:d7:9c:66:4a:
f8:8a:21:ee:cb:1b:ec:10:94:41:25:df:d1:2d:14:
66:80:87:ec:87:c6:04:55:30:00:94:5c:75:c5:d8:
54:82:7a:5b:16:db:66:59:17:6b:a7:51:56:13:91:
ab:17:a0:b8:03:dd:82:6e:cc:4b:9d:08:94:71:3a:
34:6f:95:87:c3:70:ee:23:c5:94:b8:29:f0:4a:0d:
c5:4e:fd:ff:92:13:5a:48:c6:41:ff:82:e0:d5:60:
41:2c:bf:66:34:1a:43:b3:6c:ee:f2:85:8d:da:36:
5e:0b:3c:79:e2:20:4d:a6:0e:84:db:cc:e1:5d:a9:
ea:3a:35:62:36:98:fb:9a:9d:fc:45:e4:c9:f4:62:
02:62:bb:da:aa:d1:a9:45:b4:e8:d4:c7:0b:b7:87:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:1E:FB:CC:AB:5F:1B:96:4D:1F:D5:4D:DD:89:D0:EF:04:BB:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C134692C60C11EF9BD56B71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:ff:38:d3:53:41:5f:9c:3a:8b:61:1c:76:91:cd:80:29:
20:57:f8:16:87:40:a8:81:de:96:83:c6:cd:b4:ec:44:31:8e:
d3:24:4a:56:28:33:08:fa:83:3a:f1:f2:cf:8e:af:58:1f:a3:
68:a1:66:10:de:41:7f:df:50:c0:1e:39:02:c1:0b:de:b6:d8:
2e:c4:73:7d:44:a7:b4:74:30:9a:f6:49:80:6f:b2:c3:18:32:
73:04:96:2a:bc:d3:fa:8d:d1:15:bc:fd:c1:16:c5:5e:f0:e8:
0b:df:c7:43:d0:c5:48:29:1d:07:fe:6f:d9:01:71:93:3b:a1:
45:46:8f:b0:f3:58:5b:dd:ef:cf:b6:4a:f9:65:b0:a6:17:bd:
2e:54:e2:da:b8:8c:fa:07:64:36:a6:9f:35:be:cf:72:d7:4d:
de:24:ae:9c:92:da:22:8e:f8:11:3a:52:eb:19:ba:84:6d:cc:
75:ff:79:1a:95:57:97:7f:46:8e:56:c9:15:fd:aa:1c:32:ae:
d3:2f:43:98:0f:06:76:ec:f8:83:08:40:92:77:01:dd:d9:c9:
e9:b0:f9:13:e2:bb:33:c6:93:a2:f0:e2:8e:50:1c:6a:6a:8d:
9b:35:05:3e:a5:dc:b8:d0:58:09:42:58:cb:85:d4:a4:cd:9d:
70:8b:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:31 2025 by rpki-client