Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4584F1C4C63111EFBA491A5A762E951A.roa
File: 4584F1C4C63111EFBA491A5A762E951A.roa (raw, json)
Hash identifier: y551HiEYgSFx/MsMxPz7ThwvX+pfybNnHUdMrTWGmaY=
Subject key identifier: 2C:71:8B:F3:CD:AD:B8:1E:42:BA:3C:31:EF:B9:31:B3:50:23:89:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4584F1C4C63111EFBA491A5A762E951A.roa
Signing time: Sun 29 Dec 2024 22:07:19 +0000
ROA not before: Sun 29 Dec 2024 22:07:16 +0000
ROA not after: Sun 12 Dec 2027 22:07:16 +0000
asID: 17561
IP address blocks: 154.217.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77812 (0x12ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:07:16 2024 GMT
Not After : Dec 12 22:07:16 2027 GMT
Subject: CN=6771c817-b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:0a:40:68:3b:13:4c:db:de:83:f8:e4:32:
b1:c5:79:f9:19:66:49:59:c4:4f:ba:03:b0:03:41:
9e:6e:ea:fd:0e:8b:a3:a5:d0:a7:fc:8c:d3:93:91:
f0:fb:d1:f5:50:85:25:68:f2:be:d3:45:e8:ba:d2:
f1:d2:8b:13:ba:35:67:26:56:a3:5d:ab:c0:2e:8d:
ad:01:44:49:0e:25:81:c5:46:5e:db:7f:03:47:b2:
f5:2b:78:68:68:53:0c:e4:e1:a3:53:19:43:b1:eb:
8b:c8:e0:3d:b9:6a:74:57:79:18:70:e3:6f:00:e0:
ca:8c:16:0e:c4:2a:e3:dc:9c:0b:de:16:c5:c0:68:
00:00:1b:b4:cc:81:65:8a:a6:ac:0a:2f:0e:a7:48:
77:96:de:85:1b:e8:75:ec:95:74:21:77:de:0b:7c:
99:ae:0a:83:4d:e6:b9:20:a1:fa:8e:5c:d3:e6:71:
c0:4a:cd:15:32:7a:cd:05:76:11:9c:f1:01:37:9f:
14:b0:8c:19:93:d1:1f:df:e4:dd:50:ba:10:55:f5:
16:14:54:f0:b8:4a:bf:48:0a:7d:bd:bb:24:8b:0a:
6b:db:d9:53:81:e5:d0:a6:f3:f2:f2:af:88:fa:8a:
52:65:07:04:5b:ce:dd:01:9a:51:90:27:3c:d5:93:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:8B:F3:CD:AD:B8:1E:42:BA:3C:31:EF:B9:31:B3:50:23:89:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4584F1C4C63111EFBA491A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.221.0/24
Signature Algorithm: sha256WithRSAEncryption
13:22:0d:4c:02:e1:b9:dc:11:53:73:13:b3:f5:71:29:48:f1:
d0:a3:f0:68:e6:56:d1:4b:94:a9:9f:30:2e:ca:66:ec:91:3a:
f4:10:42:20:63:57:27:69:a9:64:be:40:35:f8:ab:12:ef:92:
df:ce:0a:57:b6:35:79:81:25:08:90:a5:a6:7a:06:8e:f7:50:
69:77:7f:88:78:f5:64:1a:ea:d6:73:a3:41:36:1c:49:22:2b:
c4:86:66:96:40:e2:3c:0c:75:21:83:19:4e:e6:5d:f5:07:d8:
02:ab:4f:99:2e:22:b3:57:18:a5:11:d2:19:ed:3a:e1:a7:a3:
02:20:40:0f:ca:aa:41:f2:99:cd:c4:f4:85:cd:aa:56:56:4b:
23:7c:70:73:c5:ae:34:05:13:44:93:6b:62:5d:5c:08:4e:50:
1c:9d:b2:88:c6:82:ae:82:a5:f1:e7:01:2a:48:ec:85:cf:d1:
cf:6d:82:a4:4b:0a:5f:94:d5:f1:99:48:4a:8d:53:5e:19:cb:
60:f8:b9:ac:7f:76:40:0e:aa:5d:40:03:0c:23:c1:8a:08:9f:
0a:1b:27:66:7f:f4:97:df:5f:11:a3:21:28:ed:1a:97:ff:bb:
61:a5:7e:64:8b:b6:c7:59:86:83:9d:f4:10:d1:4a:a4:eb:e2:
50:ed:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:52 2025 by rpki-client