Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B66662C54511EFA5DDDE85762E951A.roa
File: 61B66662C54511EFA5DDDE85762E951A.roa (raw, json)
Hash identifier: sC+pYAbMyNLeWiqzFKh7dBG9EWwHjAJsaRagD3gMe5Q=
Subject key identifier: F4:6C:39:1D:20:24:D6:D6:9E:AB:62:8B:0E:82:22:0A:4F:12:43:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B66662C54511EFA5DDDE85762E951A.roa
Signing time: Sat 28 Dec 2024 17:58:45 +0000
ROA not before: Sat 28 Dec 2024 17:58:42 +0000
ROA not after: Sun 12 Dec 2027 17:58:42 +0000
asID: 17561
IP address blocks: 154.208.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76965 (0x12ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:58:42 2024 GMT
Not After : Dec 12 17:58:42 2027 GMT
Subject: CN=67703c55-3701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:d1:c1:0f:58:10:69:c7:30:3b:01:df:e6:
89:73:4d:48:28:e4:ae:50:82:a8:21:94:a1:59:3b:
57:73:b6:e7:c0:a2:a4:df:59:b9:d1:20:50:b4:77:
df:58:7c:9e:5b:b9:ec:45:3a:d0:49:a2:1d:77:36:
bc:f5:4e:4a:e8:46:1d:34:a5:0f:28:71:cd:7a:1c:
8f:6e:0b:06:ed:2e:4d:8e:b3:85:5b:6a:4c:65:5d:
9b:62:41:48:68:78:5b:6e:6c:5e:9a:bb:c3:55:c1:
66:db:d4:57:a4:96:8a:87:c0:83:85:74:f7:9f:d0:
ea:cc:4f:f7:8d:31:64:bf:38:6c:b2:0d:4a:8a:eb:
ef:86:50:b1:ca:fb:d7:61:f4:54:3e:25:55:4d:78:
07:80:32:fe:49:f2:74:31:76:c0:e4:a2:6f:0c:b7:
6e:8c:57:fa:27:60:ea:d9:99:f7:04:94:67:fb:9c:
79:7b:7c:79:9c:a3:43:88:d2:a9:73:69:ce:2a:05:
59:53:59:d8:7d:c0:bd:0d:ee:3c:27:18:94:05:e2:
00:67:66:44:6a:33:de:e5:b0:5c:29:9e:d4:82:c8:
0c:c7:04:b9:96:97:7a:04:b0:f9:70:11:e8:88:4d:
f6:23:77:15:20:78:6a:9d:45:5e:7e:a8:cf:b4:06:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:39:1D:20:24:D6:D6:9E:AB:62:8B:0E:82:22:0A:4F:12:43:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B66662C54511EFA5DDDE85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.183.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0b:41:86:9e:c6:06:3e:b0:cf:cc:96:a3:90:1b:48:4c:ee:
19:62:e1:41:65:74:63:19:d3:9e:65:72:9b:4e:fd:82:9f:21:
bc:ef:66:ed:5f:75:2c:f6:d2:2c:c2:2e:c7:41:28:15:1e:d6:
62:f9:6a:5b:aa:01:92:45:7a:9d:ec:9d:db:c6:53:bf:01:15:
2c:75:06:95:08:2b:ea:4b:34:e8:65:4a:4f:6f:22:5b:6c:e0:
2b:af:c3:80:1f:11:8b:82:af:42:99:02:dc:8a:ab:6e:3f:29:
2b:af:d2:87:0a:5d:63:90:36:6f:d2:34:cb:f5:02:ab:7c:33:
4a:05:04:77:63:66:4d:16:61:eb:20:40:19:f6:c5:60:75:b2:
4e:50:fe:e1:25:99:ee:a4:b7:21:a2:c9:b6:7d:f7:32:99:5a:
6d:96:71:8a:3e:8f:0b:fc:1f:24:cd:5a:56:35:73:04:e7:bf:
0a:b4:37:95:39:38:00:5c:07:8d:5d:a1:c6:0f:6b:a2:bc:ac:
d2:b5:6f:09:5e:c2:76:7e:4e:d5:91:d6:08:1e:c9:1d:f8:ad:
8b:92:aa:9f:b6:d4:c7:93:7f:27:1f:55:d6:39:fd:8c:29:e2:
5a:6e:1b:4b:d3:eb:bd:8a:6f:46:7d:e5:57:22:fe:81:c8:9e:
cb:05:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:12 2025 by rpki-client