Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BC5FC4C63411EF8D020B6D762E951A.roa
File: 60BC5FC4C63411EF8D020B6D762E951A.roa (raw, json)
Hash identifier: P6Jp/ZmID4h6XnLa+Pj0YouDuTFWtM+Ka2D7T3nkHn0=
Subject key identifier: F1:DA:1B:15:8B:1D:B6:08:3F:F5:62:D9:44:F8:6A:A0:6A:00:F9:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01300E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BC5FC4C63411EF8D020B6D762E951A.roa
Signing time: Sun 29 Dec 2024 22:29:34 +0000
ROA not before: Sun 29 Dec 2024 22:29:30 +0000
ROA not after: Sun 12 Dec 2027 22:29:30 +0000
asID: 17561
IP address blocks: 154.217.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77838 (0x1300e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:29:30 2024 GMT
Not After : Dec 12 22:29:30 2027 GMT
Subject: CN=6771cd4d-5682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:18:08:dc:a1:c3:b0:27:97:c2:f2:16:14:
49:3b:9b:3e:7c:5c:7d:bf:a0:ae:14:5b:86:82:c6:
5e:f9:ba:a3:55:c2:64:d5:a7:e4:9e:c5:f6:16:0f:
d4:26:45:2b:9a:c0:a2:7b:fe:64:67:a3:a4:23:0a:
17:1d:b7:f1:6b:a8:3d:5b:ef:42:05:26:a3:a8:78:
7c:a6:62:04:14:59:fb:8e:c2:ad:03:1e:e7:93:e2:
40:2e:4e:b5:5e:68:b6:a5:c7:58:17:f5:47:5e:c9:
ea:0c:11:c0:20:77:f6:01:59:17:96:91:04:52:00:
4e:9b:5c:bf:3f:41:92:09:02:92:2f:32:fd:4a:76:
77:df:8e:d3:99:89:47:08:ea:1b:d3:a1:fd:87:05:
8f:05:0b:67:86:bd:3d:33:6b:10:6d:22:6f:c7:17:
5d:50:96:0c:a9:20:e9:62:af:ab:4a:24:25:da:24:
ba:1d:53:64:8b:45:97:ff:71:82:cc:63:cc:e5:5c:
2e:0e:d8:d6:bf:64:4a:5e:62:d2:22:c0:18:33:b2:
a5:c6:f3:01:8f:9f:f0:70:0d:a3:e3:29:b3:7c:a9:
1e:f8:db:72:d5:0a:42:8a:85:ea:43:fd:fd:e5:d8:
5e:38:96:4c:ec:8e:ba:9f:2d:3d:9a:4f:ae:6e:75:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:1B:15:8B:1D:B6:08:3F:F5:62:D9:44:F8:6A:A0:6A:00:F9:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60BC5FC4C63411EF8D020B6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.234.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ec:c3:af:69:39:e3:16:ed:19:10:0c:51:38:bc:cb:f7:53:
d1:95:bc:84:3c:df:d7:72:f0:46:bb:4a:da:a1:c9:47:74:8c:
c5:cd:7b:db:68:d3:43:79:8a:41:d4:ed:70:87:d4:4e:fc:54:
fa:5b:5d:12:31:b6:f9:26:1b:dd:37:56:75:f1:05:3d:9e:cb:
0d:dd:c8:8e:77:79:0e:84:88:e8:d8:d5:82:98:ff:2d:0d:40:
33:0e:f6:fa:f3:76:06:f0:f1:82:c7:fc:51:eb:ed:0a:7a:20:
e9:d8:52:f7:cd:be:d2:8f:38:11:08:b2:93:c3:2a:49:23:d9:
24:a6:bd:0f:76:e5:e0:2e:4e:ac:27:f4:6d:15:d2:72:04:b2:
05:52:6a:f6:f8:66:9d:27:08:8c:28:e6:96:fc:25:aa:b1:c3:
79:36:75:73:da:93:26:72:7c:56:da:e5:4c:69:d7:9e:16:39:
ab:db:e4:13:6b:d1:5d:21:b8:00:5a:63:6c:86:eb:c3:7e:cb:
5e:0d:0a:1a:2e:49:d9:8a:67:a9:26:b7:0a:fc:ec:59:af:22:
74:6d:88:f7:cc:bd:3b:37:5f:a2:d6:62:77:77:a9:78:6f:90:
fa:93:47:73:07:9d:3b:54:3d:32:1e:ba:3f:b1:1d:c3:e9:85:
87:3d:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:39 2025 by rpki-client