Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613CB178C61211EFA359BE97762E951A.roa
File: 613CB178C61211EFA359BE97762E951A.roa (raw, json)
Hash identifier: qNNzYG1syRRlyYijsVDybe+9E3j6EVl0TqE1lLLDbj0=
Subject key identifier: 60:88:2E:E4:81:8C:EE:DF:76:CA:F8:0F:4E:84:4A:8B:31:E4:74:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613CB178C61211EFA359BE97762E951A.roa
Signing time: Sun 29 Dec 2024 18:26:11 +0000
ROA not before: Sun 29 Dec 2024 18:26:08 +0000
ROA not after: Sun 12 Dec 2027 18:26:08 +0000
asID: 17561
IP address blocks: 154.217.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77554 (0x12ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:26:08 2024 GMT
Not After : Dec 12 18:26:08 2027 GMT
Subject: CN=67719443-8a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:86:16:bf:e4:5e:1c:72:98:b8:d1:ce:47:
16:b1:7b:a4:2a:19:c8:f9:35:81:88:f4:8f:f8:f7:
34:39:1e:8b:67:51:b2:87:e6:80:08:57:92:04:b5:
1b:2f:22:54:ba:91:b8:f5:cd:f3:79:7c:d3:ea:ac:
a2:7a:d4:84:8e:8c:bf:dc:0d:05:bc:b4:08:9f:db:
9b:66:db:03:6b:f4:26:ed:ff:69:a0:6c:de:b3:0f:
19:3d:d1:be:e2:e7:44:01:e9:aa:62:71:2b:5a:89:
62:c6:38:f3:f0:1c:8a:0d:4c:99:84:4a:da:9c:60:
bf:06:3c:91:1f:b0:64:bc:2e:15:cf:29:61:22:c9:
20:34:e7:15:54:f0:c8:5c:a1:ae:ae:41:6d:7a:f2:
4c:67:1a:9a:40:07:a4:7b:8c:1a:5e:e2:a1:56:a3:
71:0e:c9:2c:27:ce:7a:f1:fb:07:8c:f6:2c:10:ce:
5a:f9:00:f8:cf:ac:06:7c:9c:d5:25:30:0b:60:cd:
8b:89:9a:a1:eb:37:be:42:ad:a9:f7:85:6b:2d:1b:
54:74:87:66:47:59:7b:0a:91:88:c6:9a:b9:b4:da:
fd:86:47:31:e3:4d:5d:f0:33:ff:0e:8c:b3:0d:d8:
26:36:72:76:ca:a7:68:b3:6f:c1:ec:d1:fa:12:6c:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:2E:E4:81:8C:EE:DF:76:CA:F8:0F:4E:84:4A:8B:31:E4:74:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613CB178C61211EFA359BE97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:36:0b:49:ff:75:da:64:43:e5:ef:64:b0:15:25:ea:12:fe:
39:3c:61:cb:80:6b:9e:7a:98:7d:7e:06:c3:4c:34:57:a2:f0:
dc:82:de:c5:63:8f:a5:8f:bc:f5:d2:81:98:27:20:67:12:f7:
09:1b:c7:1a:da:6c:87:67:2c:b8:27:26:29:30:d2:7c:c6:4b:
8d:6f:6c:d4:88:77:08:5c:9b:0e:6f:c1:95:6d:9c:e3:73:49:
44:02:63:65:47:ad:2f:dd:2f:84:7e:25:38:aa:74:37:8e:8d:
1f:0f:52:93:72:d4:23:fe:9a:45:9a:fd:cb:bb:e7:f8:c5:1b:
fd:6a:31:2d:8b:46:98:d7:ba:58:4a:38:1b:d0:62:de:2b:3c:
0e:75:ac:d9:b0:42:e9:c8:e1:f6:79:1a:5b:9b:c3:fe:f3:1c:
8b:23:5c:0b:f2:f1:5d:64:d5:b5:cc:21:5e:22:a4:44:25:4f:
fd:f9:69:2e:62:ea:0d:a8:11:f5:8d:51:55:8f:ad:65:25:3e:
ce:18:dd:3c:d9:ea:c1:f0:ac:9c:e4:eb:52:75:9b:89:22:5c:
3b:d9:ea:73:80:e1:52:28:bd:b4:04:4a:87:c5:fe:2d:45:22:
70:e7:0f:f3:15:1c:bf:dd:aa:6b:69:e2:ea:e6:7f:66:6c:89:
38:22:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:50 2025 by rpki-client