Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C80234C61E11EF8FF79463762E951A.roa
File: 67C80234C61E11EF8FF79463762E951A.roa (raw, json)
Hash identifier: wNzuJjJA6lfiwLKn1bQ91PMqk16Mi3xfFsPRmxclSmE=
Subject key identifier: D3:8F:26:DF:CF:97:CD:8E:D3:07:41:DE:5F:DB:3E:59:17:22:2F:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C80234C61E11EF8FF79463762E951A.roa
Signing time: Sun 29 Dec 2024 19:52:17 +0000
ROA not before: Sun 29 Dec 2024 19:52:13 +0000
ROA not after: Sun 12 Dec 2027 19:52:13 +0000
asID: 17561
IP address blocks: 154.217.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77654 (0x12f56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:52:13 2024 GMT
Not After : Dec 12 19:52:13 2027 GMT
Subject: CN=6771a870-24a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:97:fb:8b:e9:c9:f9:d5:ff:40:38:c4:ce:
f3:ad:db:0c:0c:30:c0:72:90:38:10:b1:f4:e8:f6:
14:cc:dc:77:fd:91:4d:6c:a8:85:24:6a:cb:21:01:
64:82:03:d0:31:60:26:12:ce:57:64:fe:3b:96:a7:
24:f3:85:75:ce:8f:61:90:a5:bd:76:ad:79:db:36:
74:37:91:c2:d3:25:c5:19:7d:c1:51:48:91:a3:f0:
d2:b3:16:70:d9:0b:cc:73:2f:83:67:5a:b7:68:07:
d5:6b:c2:c5:fd:ac:f4:e4:14:d2:b3:e0:c2:c1:5d:
cd:ba:d8:25:28:5c:6b:86:bb:4c:ac:c2:ed:9b:3b:
a4:dd:44:46:a6:47:ec:15:82:46:ec:57:ff:69:d7:
8c:f9:23:42:e2:18:2e:e8:31:81:96:58:a7:aa:16:
ca:79:9a:45:cb:f1:db:50:08:01:6d:26:f3:1c:1a:
24:d9:6c:b5:b6:85:9b:06:24:37:ce:ef:be:1b:1d:
28:cf:c7:93:7d:df:3a:ee:b4:97:b0:e8:ac:b1:bc:
0b:f8:d5:ab:eb:df:e6:ad:55:fa:7d:9f:e2:ab:6e:
45:a7:2f:3d:44:d6:42:3a:bf:ec:5f:02:b0:b6:f5:
e0:c3:3c:97:b2:5c:9f:67:87:a9:42:8b:9b:8d:a9:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:26:DF:CF:97:CD:8E:D3:07:41:DE:5F:DB:3E:59:17:22:2F:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C80234C61E11EF8FF79463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.142.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9c:c3:09:5a:f1:72:62:22:d1:37:f4:a1:c5:58:9e:41:d9:
bb:b6:75:8b:82:89:22:af:87:b2:23:ee:9f:d7:6d:16:77:26:
27:ca:25:b4:e7:57:a2:ae:07:ec:89:e2:29:31:d0:4a:8f:7d:
27:5a:ab:6d:aa:d6:18:c6:b4:35:2c:d6:0f:a1:06:f3:27:df:
2c:2c:ef:02:b0:cb:81:05:cc:81:b4:75:b9:a1:f5:01:2e:13:
26:22:2d:48:0f:11:39:3e:2a:3c:3c:31:c7:75:74:e2:b2:66:
be:be:11:5f:68:d5:63:70:c0:06:55:d6:fc:76:6d:59:b6:49:
a6:68:23:17:9c:1b:ab:ae:bf:44:9b:93:65:e4:02:0e:3f:9c:
b7:4c:ff:cd:72:55:f9:24:a2:d9:4f:d1:ae:c3:86:4a:1a:7b:
1f:c3:cd:c4:6b:55:83:4b:81:24:9c:be:13:a9:14:54:89:84:
7a:eb:26:f3:3c:0d:33:b4:28:8a:e5:86:66:4d:ce:41:22:87:
02:e7:bc:2f:c6:77:af:79:7e:5d:da:8c:5d:c4:d6:1f:55:9c:
8f:45:db:04:61:1f:a0:9e:d2:e5:50:e5:68:a8:4f:44:3b:8e:
70:dd:5a:b6:83:80:12:f9:04:61:77:39:b0:5b:ad:4f:f2:3f:
c3:50:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client