Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4606A006C60F11EF860F5A84762E951A.roa
File: 4606A006C60F11EF860F5A84762E951A.roa (raw, json)
Hash identifier: 7uv/0/ZCVyHoFZj5kXCoIJeb8OSMopFDGsjEOkapxD4=
Subject key identifier: 5D:38:2A:F7:FD:E6:BC:C4:74:DB:43:8E:1C:0C:D6:F6:B2:F1:4B:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012ED8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4606A006C60F11EF860F5A84762E951A.roa
Signing time: Sun 29 Dec 2024 18:03:57 +0000
ROA not before: Sun 29 Dec 2024 18:03:54 +0000
ROA not after: Sun 12 Dec 2027 18:03:54 +0000
asID: 17561
IP address blocks: 154.217.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77528 (0x12ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:03:54 2024 GMT
Not After : Dec 12 18:03:54 2027 GMT
Subject: CN=67718f0d-01a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:c4:d0:4b:30:cd:01:ad:73:a2:a9:08:73:
16:97:2e:0b:34:32:a8:36:7b:69:47:3e:fc:62:a7:
44:c1:63:b8:d9:cd:af:06:8f:db:4f:6b:86:09:6c:
0d:a9:26:dc:dc:b8:00:05:d1:49:ce:bc:a2:97:8e:
21:24:e0:cd:04:e3:ca:1d:60:f5:02:aa:8e:11:89:
04:59:3a:29:36:03:56:67:14:aa:74:89:0a:6f:2e:
5a:dd:d0:c3:59:a1:19:44:d6:e1:7b:13:28:aa:0b:
ea:c1:bd:2a:ed:bd:bc:72:4b:e1:07:ab:c3:ca:32:
fd:63:3b:30:1d:c1:98:47:8c:3a:27:2c:8f:68:5f:
ba:85:9e:f0:a8:8e:a9:ca:aa:03:09:53:0e:a2:5e:
f9:86:24:25:7c:e4:7f:d1:75:16:33:01:9e:88:5c:
82:32:33:a2:da:f7:07:eb:24:03:f3:ee:c9:13:cd:
7b:70:13:e7:6f:f8:f2:c6:a3:86:ea:24:aa:39:c9:
95:08:e8:2d:11:c0:be:8d:d8:5d:7d:b8:bf:ef:0f:
5d:2a:5c:41:b8:0d:bb:d8:62:8c:3f:c2:34:0c:93:
85:a0:8f:12:35:66:c1:37:c5:9f:e7:36:0d:8a:99:
83:b3:33:79:e6:fe:fc:58:12:bf:7d:5f:d4:2e:24:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:2A:F7:FD:E6:BC:C4:74:DB:43:8E:1C:0C:D6:F6:B2:F1:4B:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4606A006C60F11EF860F5A84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.79.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3d:d5:73:5a:c4:dd:95:1a:47:b1:2c:88:95:c9:18:51:24:
5e:6b:6b:50:cb:d2:29:21:2a:90:7d:cf:64:2e:c5:f4:47:1c:
5d:40:f4:ff:ae:4d:f8:24:ae:ca:97:ec:91:2f:e5:e3:53:32:
e1:80:b6:e2:3e:10:23:c9:a2:33:f9:92:64:5f:1d:c7:08:87:
eb:14:88:80:1e:f1:27:e6:9b:3a:a9:90:21:59:59:67:cd:ec:
e7:70:ba:e0:e4:dd:1a:cb:98:ff:84:e0:7e:ff:c9:ff:4e:06:
d3:4c:eb:a0:95:3f:63:d0:b7:db:44:2d:51:d7:73:cc:62:61:
c1:86:3f:9e:29:c4:cc:f4:b7:8e:e9:03:61:15:b6:de:de:62:
4e:cc:f3:19:26:1d:d3:5a:a1:30:51:b9:a9:79:98:2c:7f:8e:
c0:b0:1e:bd:88:36:1a:89:aa:01:60:89:79:a8:fc:d2:ef:73:
a2:ed:67:93:33:e3:fd:9c:80:c8:6a:7b:ee:8a:00:ae:2a:a6:
35:59:65:9d:7c:3a:36:e3:81:86:88:c1:e4:b2:f7:52:81:5d:
72:f2:64:51:72:b2:36:96:4d:45:e8:1f:0e:f7:bc:05:4f:68:
d2:6f:e9:ce:fd:2c:28:ea:45:b0:5c:e1:ba:a0:90:21:72:0c:
2e:81:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:46 2025 by rpki-client