Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4170BAFCCDC811EF9E5424AD762E951A.roa
File: 4170BAFCCDC811EF9E5424AD762E951A.roa (raw, json)
Hash identifier: jaUi+KYK5ho0hfG2FJBgQeq4I05mmKYl475q6ccm4Dw=
Subject key identifier: 7B:61:E3:90:E0:AD:3B:61:C6:60:7B:7E:FA:C7:17:A0:C1:FD:F8:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01374F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4170BAFCCDC811EF9E5424AD762E951A.roa
Signing time: Wed 08 Jan 2025 13:55:45 +0000
ROA not before: Wed 08 Jan 2025 13:55:41 +0000
ROA not after: Thu 23 Dec 2027 13:55:41 +0000
asID: 17561
IP address blocks: 154.197.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79695 (0x1374f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:55:41 2025 GMT
Not After : Dec 23 13:55:41 2027 GMT
Subject: CN=677e83e1-b22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:e7:fa:23:59:26:d8:94:db:76:83:e3:fe:
77:6d:01:ae:cf:59:c6:ae:b0:9e:6e:19:47:66:38:
6f:56:7d:92:4d:96:c9:a0:88:4e:92:eb:47:af:87:
cb:f1:a4:25:64:c7:69:93:1a:4c:72:5b:7a:eb:c3:
9f:ab:dc:1c:21:d7:b2:3b:f1:59:bd:d1:99:e2:6c:
8a:7a:17:07:a5:81:56:1b:90:57:39:f5:94:5f:84:
48:ef:da:19:31:66:aa:6a:17:bf:11:c8:27:39:41:
4c:1a:63:7a:ff:36:37:d3:65:40:54:bc:30:c9:cc:
18:5f:89:9c:b9:c4:38:43:2b:92:26:d0:b5:20:6e:
ff:9b:96:c4:d7:38:6d:e0:6d:2b:f4:60:33:91:ae:
47:84:c8:15:38:65:be:84:b8:03:2e:67:63:4d:47:
fb:83:c9:fb:cc:77:38:f8:4f:95:34:5f:b6:f3:14:
7d:bf:2f:a3:7c:60:21:1e:1a:68:45:8e:a1:8d:cc:
b1:48:0c:13:a5:4c:15:ca:53:a8:e1:e0:2b:fd:f5:
25:25:d8:e6:5f:97:b1:39:31:47:89:38:57:cd:18:
ca:c0:dc:3f:70:2a:5a:9c:e7:ca:c9:36:c9:d6:22:
88:bd:96:5c:3c:95:f5:5c:ec:20:db:db:63:f3:9b:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:E3:90:E0:AD:3B:61:C6:60:7B:7E:FA:C7:17:A0:C1:FD:F8:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4170BAFCCDC811EF9E5424AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.105.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9e:66:94:ad:af:89:02:43:af:bf:a5:56:f3:65:f6:d3:53:
02:09:4e:e0:9e:4c:9d:d9:72:bf:c1:f8:82:69:eb:fa:2c:31:
50:a0:3e:b6:ed:e7:7a:5a:e1:25:12:49:d9:36:cc:87:0f:2f:
bd:22:ee:61:54:d0:22:b2:f2:35:2d:8e:ba:be:b9:99:43:88:
6b:66:6a:2b:2b:97:27:6d:f2:2c:9f:a5:6e:0e:60:fd:a0:e0:
9f:3d:b6:90:54:12:9e:cf:85:de:01:ae:f4:72:75:fc:bb:aa:
71:f8:23:28:d7:75:e1:aa:e5:b4:94:d2:62:dd:da:8d:2a:3b:
53:0f:c8:90:df:66:d0:01:30:56:bb:47:f5:e0:af:60:2c:af:
9f:46:ce:24:78:9c:07:e7:64:cf:cd:3d:e6:22:90:cc:cc:57:
56:0e:98:a3:7b:22:69:62:a7:f9:54:10:cd:05:32:fa:e3:0d:
17:f8:27:64:ac:ed:d1:9a:e1:fa:74:16:8d:5a:f5:ee:4d:fa:
d5:97:95:46:b7:ac:df:f7:5d:4c:84:2f:20:37:b8:47:54:df:
33:14:d6:49:bd:a9:51:f7:d1:3c:2b:03:74:a2:03:62:35:7c:
00:42:76:86:55:5e:ad:7d:fe:94:d7:f2:b7:bc:38:3c:33:bd:
f0:5c:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:44:22 2025 by rpki-client