Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA40584C61611EF8AF055B2762E951A.roa
File: 6DA40584C61611EF8AF055B2762E951A.roa (raw, json)
Hash identifier: 5TTdtjd3AVE5iaq2FyA6/79M6gMlT2/5olah60cN8UA=
Subject key identifier: 07:36:C9:B5:94:DD:F3:61:A4:2A:89:0B:46:03:E9:FC:F6:36:E9:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA40584C61611EF8AF055B2762E951A.roa
Signing time: Sun 29 Dec 2024 18:55:10 +0000
ROA not before: Sun 29 Dec 2024 18:55:07 +0000
ROA not after: Sun 12 Dec 2027 18:55:07 +0000
asID: 17561
IP address blocks: 154.217.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77588 (0x12f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:55:07 2024 GMT
Not After : Dec 12 18:55:07 2027 GMT
Subject: CN=67719b0e-65ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:71:4e:00:49:03:37:d1:90:43:3a:0d:a2:
e2:8c:0e:c7:37:ca:cc:2c:1a:1b:88:6c:71:2f:39:
be:ec:55:40:e7:68:5e:d4:53:2d:97:9f:2c:e4:78:
c1:7f:30:1b:86:c1:6a:5a:a5:a7:cc:83:b7:ec:cf:
43:e5:c6:dd:82:ad:8f:e0:7c:50:da:b2:17:a5:ca:
13:d9:ff:e7:35:17:90:fc:cf:12:69:b8:54:5a:58:
56:f4:e4:c0:d8:fa:01:9c:e8:51:d4:46:99:57:c8:
46:21:26:1d:6c:6a:24:7d:af:e8:c2:a9:ba:ff:bc:
ab:c8:fe:ab:df:02:69:7b:5d:c3:9f:d2:75:01:86:
9b:af:97:bf:30:da:42:17:cb:98:c9:15:55:75:75:
40:3a:d3:87:fe:8b:43:70:f4:aa:f5:8d:ec:66:ba:
78:5a:b2:fa:79:cf:d1:24:d0:2d:a7:17:e1:cc:59:
96:d1:ae:c9:10:0f:24:ee:6a:a1:74:cf:0a:21:d4:
ff:00:bd:73:5e:b1:35:0e:e1:b9:bd:2b:42:95:3a:
f1:35:53:b9:c1:90:c9:80:f9:43:14:b6:8e:48:da:
9a:97:03:4b:1d:f2:28:94:0c:6b:2c:d5:57:bd:4c:
49:18:80:76:c9:5f:7b:af:80:78:33:c8:80:7f:c6:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:C9:B5:94:DD:F3:61:A4:2A:89:0B:46:03:E9:FC:F6:36:E9:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DA40584C61611EF8AF055B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d5:95:54:4d:51:2a:63:ef:55:73:75:11:f1:e5:4e:d5:04:
94:3b:54:85:66:b5:7f:13:48:35:0d:54:d6:4b:2d:bb:cc:0a:
a8:b8:fe:6f:c1:6f:92:33:dd:0a:ac:6d:63:15:f4:3b:34:a3:
c1:ba:85:d7:68:50:b0:e6:42:f8:33:10:0d:24:08:66:4f:0e:
59:96:50:ae:5c:1c:72:3a:32:45:df:c3:96:2d:99:5c:1e:0e:
26:62:bf:dd:f6:70:6f:87:89:44:af:e7:d0:31:78:64:80:63:
b8:47:31:ea:c3:84:41:6d:7b:4a:e0:4b:a6:19:7a:ca:ca:09:
02:4c:f8:10:7e:82:a1:17:cd:c2:22:e5:51:14:78:a7:38:57:
10:d3:58:0a:ea:3c:cf:46:07:4b:80:a6:f2:e2:f9:a7:67:36:
42:9e:15:1b:d4:80:7e:49:f4:a6:16:ba:60:17:6c:95:3e:e2:
ee:7f:62:2e:ce:dd:b6:96:4c:85:62:ce:f9:52:01:d0:0f:71:
1f:00:df:4a:15:ce:4f:93:cc:b1:ce:0e:33:81:65:6b:a5:39:
10:6c:72:9b:d1:83:b9:7c:2b:6f:44:cf:4e:52:e8:2c:58:cf:
8f:b8:13:e9:79:b4:90:30:8f:ce:14:4d:b6:ff:b2:c7:7c:dd:
89:f5:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:54 2025 by rpki-client