Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B5FAC2C62111EFB92C8476762E951A.roa
File: 45B5FAC2C62111EFB92C8476762E951A.roa (raw, json)
Hash identifier: nT8Xe81fA5aTA9nMAw4FVQkjiPIJ3igLmm4s/NaY+8g=
Subject key identifier: 28:83:9D:5F:DC:63:EE:EB:95:55:7C:BA:82:B7:10:98:EB:E5:6E:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B5FAC2C62111EFB92C8476762E951A.roa
Signing time: Sun 29 Dec 2024 20:12:48 +0000
ROA not before: Sun 29 Dec 2024 20:12:44 +0000
ROA not after: Sun 12 Dec 2027 20:12:44 +0000
asID: 17561
IP address blocks: 154.217.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77678 (0x12f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:12:44 2024 GMT
Not After : Dec 12 20:12:44 2027 GMT
Subject: CN=6771ad40-7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:91:78:25:67:c0:1e:49:c6:49:82:a4:c9:
75:8a:c0:b6:7d:9c:3d:1b:fe:49:46:88:7b:6e:70:
73:74:b7:ee:24:e7:90:5d:29:e8:38:0e:96:4c:eb:
7c:8c:6b:87:e3:1c:c8:21:08:fe:66:be:a1:b0:dc:
b5:8d:29:18:ae:16:8a:00:a7:57:3b:a9:c9:cf:99:
3e:aa:5a:2e:23:0b:f2:06:7b:c0:4d:da:46:9c:69:
80:45:ba:57:a4:ea:2f:a8:5b:59:17:11:52:0c:d5:
61:e3:a2:84:89:73:17:ed:65:7f:2a:2f:40:f1:1d:
69:d4:9c:e0:03:b5:3e:ba:52:b4:e1:5d:7d:2b:ad:
18:b3:ab:fb:ce:37:e1:78:dc:ad:04:c6:03:7c:29:
f1:a7:aa:1b:9b:f7:66:36:9c:d2:33:04:c4:3d:6e:
5b:84:bb:6c:a6:5c:e9:f8:87:6f:06:98:b9:5e:ec:
1f:b5:f2:c3:e7:08:66:0e:3d:59:33:a3:57:44:f4:
57:f1:73:9f:28:62:a3:96:42:6b:12:58:8d:00:77:
00:6c:26:63:4b:66:2a:18:e8:7b:33:ab:6e:2c:16:
cf:78:0f:5f:a4:8a:a3:1b:10:b0:04:5b:44:31:2b:
69:ba:ec:a1:40:4a:ff:4f:b7:81:f5:a5:7d:02:e7:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:9D:5F:DC:63:EE:EB:95:55:7C:BA:82:B7:10:98:EB:E5:6E:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45B5FAC2C62111EFB92C8476762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.154.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6b:a6:96:1e:00:cb:f5:32:6c:59:f9:96:c0:de:fa:0f:db:
4b:70:cf:89:22:42:61:ab:46:75:6f:20:46:74:e1:88:de:41:
3b:b0:e1:94:6f:10:61:34:db:6a:b0:76:c2:00:0a:6b:e5:d0:
85:95:f7:18:9e:09:fb:5e:e9:81:ca:f6:3a:95:44:22:55:ce:
72:27:2e:b2:c2:e1:c1:bc:e4:63:7b:c4:08:a5:fc:33:37:14:
f1:fe:56:fc:5d:41:d3:18:b2:e3:ff:e5:4d:7c:78:59:97:a3:
fa:fa:65:31:7b:01:99:c2:fb:77:1b:d6:a6:df:98:03:f8:28:
a4:c3:d1:35:38:6f:5a:19:92:c5:3d:e8:43:21:c3:f8:ec:eb:
36:7d:c7:c4:86:4e:79:ea:78:9f:31:68:76:27:33:12:b6:57:
f0:55:c8:9a:8d:ad:b8:68:fe:f3:cc:9d:01:f5:78:af:35:f3:
f3:4e:60:c9:5f:ff:eb:a1:11:5b:0d:47:ce:e4:26:d3:5e:d1:
f4:e5:9e:2d:f6:5a:0d:e3:b4:0c:5e:eb:e1:21:17:5f:de:34:
a6:58:b4:df:9b:33:70:7f:12:f2:3b:49:9f:0e:c3:be:84:82:
a6:74:5e:18:d5:29:b8:f2:dc:dd:a0:7f:79:5f:6b:60:5c:88:
28:ad:b3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:14 2025 by rpki-client