Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48F6D4B8C62611EF91C17D94762E951A.roa
File: 48F6D4B8C62611EF91C17D94762E951A.roa (raw, json)
Hash identifier: ockFZzCh+7/kex7KD4FEvm/eYg0rMTK2lyP/ynIIpwI=
Subject key identifier: 94:4A:35:BD:DD:08:8F:75:15:7A:FC:E4:91:82:DC:D9:93:00:F0:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48F6D4B8C62611EF91C17D94762E951A.roa
Signing time: Sun 29 Dec 2024 20:48:41 +0000
ROA not before: Sun 29 Dec 2024 20:48:37 +0000
ROA not after: Sun 12 Dec 2027 20:48:37 +0000
asID: 17561
IP address blocks: 154.217.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77720 (0x12f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:48:37 2024 GMT
Not After : Dec 12 20:48:37 2027 GMT
Subject: CN=6771b5a9-3711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:24:91:74:9a:ec:9e:be:c6:c1:e7:69:08:
07:a7:97:f4:2e:f7:ce:27:b8:e9:b5:3b:ee:fe:a1:
e1:3e:b6:20:ba:21:de:7f:43:15:2d:8d:53:10:85:
9b:b2:68:aa:37:79:03:a6:16:d1:5d:a0:0c:2c:f1:
05:77:22:30:da:21:ca:9a:ea:66:0d:df:7b:be:72:
8d:32:2f:48:9d:c6:64:0c:be:74:13:c0:44:88:f7:
7d:9b:ee:f0:33:a3:86:f9:7e:08:7d:05:41:6e:8b:
63:7f:ff:d6:87:3d:6b:f8:26:b1:04:cc:a5:ab:c8:
10:9c:7f:f5:a9:1e:67:f7:55:9d:42:36:1c:1f:7c:
50:ad:cb:f4:f8:6e:47:eb:20:ed:32:5e:ad:39:3c:
f3:3f:04:42:85:0d:5c:33:4a:4e:92:62:58:66:06:
bb:6f:6d:6a:7a:bf:01:b5:de:dc:e9:37:36:38:99:
ff:ae:3e:af:57:97:95:e4:aa:9f:e9:04:a3:2d:d6:
99:11:76:bb:8d:87:e6:d6:4b:92:4e:96:99:0b:a9:
b9:9b:d0:ee:d0:7b:9a:d9:37:cd:93:48:bf:29:1a:
98:57:1b:38:bf:64:17:4b:7e:ac:34:8a:f6:82:c5:
dc:27:0b:95:cd:b7:04:5b:66:a2:0b:d6:96:e5:13:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:35:BD:DD:08:8F:75:15:7A:FC:E4:91:82:DC:D9:93:00:F0:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48F6D4B8C62611EF91C17D94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.175.0/24
Signature Algorithm: sha256WithRSAEncryption
36:53:87:c7:25:44:f7:f1:0f:a0:f8:b2:a0:8c:79:8e:7b:3b:
ec:04:52:cb:8f:90:02:c0:88:ec:ce:44:ab:e0:4f:50:72:61:
c9:63:fa:86:02:a6:5a:ad:35:68:c2:7d:61:0e:0a:f9:6b:64:
ba:e2:84:ae:eb:89:57:2c:bd:d8:90:c0:de:98:17:30:9b:b3:
f7:05:20:e8:0c:09:2f:3c:f8:6e:f8:d2:e4:fd:4b:68:03:48:
7a:71:67:00:a6:c3:de:96:12:58:4c:ae:65:26:1a:1e:08:f3:
a2:96:13:66:dc:18:89:be:ea:fd:54:c6:14:52:e3:3b:6f:70:
56:5c:f5:60:71:79:e9:8e:16:0a:e7:bc:55:ea:92:8b:9f:22:
6a:19:4e:50:b2:cc:e8:a5:ea:35:01:e9:50:7a:ed:f4:4f:ca:
ad:ef:08:c2:fb:bc:2d:95:d8:ca:20:51:5d:ec:99:0b:31:5b:
6f:7c:e9:a4:f0:80:60:85:1c:64:45:a8:b1:95:d0:88:fd:7a:
29:8c:2a:75:1b:ae:1b:77:30:23:0e:75:b1:8d:39:0d:69:72:
fb:4d:ff:16:32:4e:71:fa:ce:51:e8:5b:4c:60:87:04:ca:26:
d4:51:7e:d3:f8:02:76:c1:fa:75:6b:0a:e2:e0:4f:72:1a:ef:
2a:6d:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:45 2025 by rpki-client