Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52B7E0C61911EFAF622345762E951A.roa
File: 3F52B7E0C61911EFAF622345762E951A.roa (raw, json)
Hash identifier: TTr6umGSb2uYu31BLddb4LEJVaubaRPEaWvrvHxfojA=
Subject key identifier: C3:A8:72:3F:84:35:5A:D9:07:5E:23:1E:99:A9:47:E1:B9:B9:B7:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52B7E0C61911EFAF622345762E951A.roa
Signing time: Sun 29 Dec 2024 19:15:21 +0000
ROA not before: Sun 29 Dec 2024 19:15:17 +0000
ROA not after: Sun 12 Dec 2027 19:15:17 +0000
asID: 17561
IP address blocks: 154.217.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77612 (0x12f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:15:17 2024 GMT
Not After : Dec 12 19:15:17 2027 GMT
Subject: CN=67719fc9-ad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:b2:f3:7e:b8:15:b5:79:2f:88:e7:06:05:
d0:8d:66:6e:36:4d:86:10:26:0c:fa:9b:1d:10:76:
a1:f3:67:41:f0:40:3b:c4:d3:c8:d3:3f:ed:2f:c6:
43:f9:0d:8f:3d:99:43:ba:23:42:23:1f:b1:15:18:
46:fc:89:ac:98:86:f1:86:db:aa:b9:4b:ee:76:d8:
19:06:65:09:27:be:89:f0:32:b3:7b:a0:fc:0d:ba:
a3:d5:47:0a:e1:7f:f7:29:04:68:ff:42:eb:15:ef:
49:83:f2:f2:17:b2:72:64:be:85:4c:97:f9:72:d8:
7f:ff:4d:dc:ae:c4:eb:cb:82:a7:d8:7b:b5:89:74:
00:d7:f9:7d:43:b8:2f:f6:44:4b:c5:d0:9e:48:7d:
30:c3:33:7f:1b:dc:0e:06:6c:84:ee:56:47:fa:53:
45:4e:1c:26:2e:49:40:fb:d1:2a:bc:04:6c:d2:c0:
84:11:c6:e3:98:3a:65:f8:1a:1e:74:ed:16:6e:62:
02:96:f5:bc:cf:d5:75:e9:4f:25:3d:36:cd:79:9f:
ed:94:08:d1:2b:83:f7:2d:51:28:c5:5a:dd:5d:a5:
01:ce:b6:7f:51:af:aa:7b:dc:b9:3b:d3:fe:56:c5:
9f:12:a5:fc:a9:72:6a:b3:e0:41:f3:12:3a:43:44:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A8:72:3F:84:35:5A:D9:07:5E:23:1E:99:A9:47:E1:B9:B9:B7:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52B7E0C61911EFAF622345762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:50:ee:d8:56:1a:19:1e:91:a9:c0:91:31:7a:90:83:3c:38:
f5:38:d0:aa:d7:24:75:e3:d8:c6:2f:13:a1:d4:cd:96:27:29:
dc:00:e8:04:f0:ba:19:4f:16:bd:ba:c9:d3:a8:9b:76:00:2f:
e5:5e:79:26:e4:ee:42:74:fa:0e:28:bf:4e:45:06:b6:e3:5a:
18:d8:96:da:4a:07:d9:a9:3b:34:e9:14:0c:64:b4:07:9a:90:
96:6b:c1:aa:ed:e9:88:1c:f1:fa:e8:17:1d:bb:37:79:c7:b7:
cb:0e:cd:df:f5:97:ed:75:4c:a9:af:28:79:de:70:06:fe:ed:
22:06:0f:b1:62:e6:34:87:fe:7c:9e:69:97:17:6d:67:c5:0c:
d3:9a:40:4f:f6:09:aa:86:17:f6:67:cf:73:81:47:6a:a6:c2:
5b:b4:49:b1:8d:e9:13:d4:f9:70:6c:37:fb:77:e8:6a:a7:ef:
80:ae:2a:31:31:c2:b0:be:15:41:9f:65:74:58:3c:f7:5f:ed:
b9:ba:a5:3a:83:d5:ef:7e:54:a4:f3:c0:f0:d8:3a:82:de:55:
2a:a8:26:50:af:d7:5e:c1:47:3a:fe:53:d6:1c:0e:f3:76:82:
27:39:4b:54:13:89:27:99:19:b1:46:c6:d9:bc:90:57:70:e2:
df:f8:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:11:12 2025 by rpki-client