Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/562BD1DEC60711EFA6508B53762E951A.roa
File: 562BD1DEC60711EFA6508B53762E951A.roa (raw, json)
Hash identifier: qOgUXWreqtSv84T72sZMWaSffnR0ZhKIBlQ0lu8rmbs=
Subject key identifier: 03:1A:36:05:81:01:A8:43:EE:05:82:7F:94:B5:76:F9:A4:33:E3:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/562BD1DEC60711EFA6508B53762E951A.roa
Signing time: Sun 29 Dec 2024 17:07:08 +0000
ROA not before: Sun 29 Dec 2024 17:07:05 +0000
ROA not after: Sun 12 Dec 2027 17:07:05 +0000
asID: 17561
IP address blocks: 154.217.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77460 (0x12e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:07:05 2024 GMT
Not After : Dec 12 17:07:05 2027 GMT
Subject: CN=677181bc-d5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:a6:3c:46:e2:d3:64:72:e7:da:03:1b:2e:
e5:d8:8e:89:a8:ef:1e:c5:d6:21:79:91:a3:11:a5:
9e:84:e8:6e:d1:45:22:aa:ee:67:ed:be:55:c8:ed:
b2:ba:34:b4:b4:23:1b:25:07:da:a0:d0:1b:0c:f8:
46:a4:a6:27:cb:8a:12:eb:56:41:49:6e:1b:a5:9a:
c5:db:dd:26:94:ee:7b:f2:58:a4:8f:a4:7b:2d:eb:
78:c7:b7:e4:45:f1:ca:66:07:27:cc:b1:39:93:8b:
c1:19:1d:8d:d1:e4:24:26:0f:55:42:50:cf:8b:46:
95:ee:55:41:0c:aa:64:06:4a:ca:00:40:d8:d1:7f:
38:6b:ca:fa:f6:38:97:5e:fe:35:3f:81:5e:59:42:
26:28:e1:15:90:94:09:e9:9b:dd:3d:37:60:93:18:
56:02:69:37:03:fa:51:fc:97:ac:be:74:7c:80:78:
1c:58:24:64:6e:e5:fe:80:32:e6:8e:77:9c:e6:b3:
18:22:98:00:3b:2a:f7:be:cc:57:80:9d:f8:ef:2d:
bf:d6:3c:86:bf:29:7a:73:71:53:6c:6f:cc:b2:2f:
7e:00:0d:ce:fa:09:f1:c7:4d:8c:7f:f1:4a:a9:82:
19:8f:ee:36:fe:7f:05:37:6c:78:1f:40:e4:e2:95:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:36:05:81:01:A8:43:EE:05:82:7F:94:B5:76:F9:A4:33:E3:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/562BD1DEC60711EFA6508B53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:64:da:a6:6b:17:8a:60:47:a2:8a:91:74:d0:3b:ee:d9:74:
f1:02:90:be:04:9c:5a:fa:13:89:b8:4b:e1:09:dd:8f:3e:ed:
ec:07:54:52:68:f6:42:85:e7:49:93:90:8f:bf:7f:69:c6:24:
45:76:bc:b3:ed:b9:6f:66:0d:85:5b:89:12:bc:a6:08:72:85:
c6:d4:fc:4d:44:61:5b:9d:6f:ef:c1:2f:f4:33:36:2b:34:07:
4d:db:2c:2a:45:ad:56:ba:35:97:ab:c7:7a:86:33:f9:0b:f4:
00:df:de:b8:58:c5:cb:bd:eb:80:61:3f:d7:bd:72:d7:7b:2f:
76:61:b3:bb:6f:e2:5b:c9:69:80:40:00:b4:fa:9c:67:d7:11:
75:86:f4:00:2d:de:08:92:eb:90:a7:19:ec:f8:32:c2:7f:c2:
6c:05:66:f7:40:99:6c:29:b0:0a:d1:5b:c1:d8:c8:1d:72:ec:
e8:77:ef:40:68:43:45:78:9b:c3:e8:7c:9e:61:d8:1d:f1:c5:
07:84:99:8b:a9:14:70:f5:91:bc:79:01:34:bc:22:b8:1b:cc:
62:53:ba:0c:32:34:5f:40:d4:22:3a:78:c5:bf:25:2f:93:39:
78:67:8b:ba:4c:df:c2:62:b0:0e:e6:39:a8:cd:dd:8a:0b:7e:
88:0a:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:59 2025 by rpki-client