Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72637E3AC62D11EFB81FD243762E951A.roa
File: 72637E3AC62D11EFB81FD243762E951A.roa (raw, json)
Hash identifier: O2k27MMJ2v+56jTE0gL9cnvwaF40CClJNjZ0RzKSORM=
Subject key identifier: 67:79:E6:3A:33:AF:E3:20:0E:14:DB:50:F9:67:45:8A:D4:B4:3E:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72637E3AC62D11EFB81FD243762E951A.roa
Signing time: Sun 29 Dec 2024 21:39:57 +0000
ROA not before: Sun 29 Dec 2024 21:39:53 +0000
ROA not after: Sun 12 Dec 2027 21:39:53 +0000
asID: 17561
IP address blocks: 154.217.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77780 (0x12fd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:39:53 2024 GMT
Not After : Dec 12 21:39:53 2027 GMT
Subject: CN=6771c1ad-fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:69:f7:53:8d:b1:70:e1:bf:75:25:31:86:
42:15:c2:c4:e3:46:ed:6c:13:a4:96:bb:8a:fb:e6:
62:e2:da:6b:d3:73:10:9d:8a:ad:27:cb:72:3c:50:
cc:32:41:cd:1a:5d:c3:46:62:f2:0c:c8:6f:eb:ee:
30:12:ce:41:6f:c4:c2:0f:e0:ce:66:f3:ba:bf:bf:
b5:bf:f8:b2:bf:a4:4e:da:89:02:88:be:d1:44:77:
13:59:ba:bb:b3:2f:8b:30:01:c0:85:10:40:22:d2:
9f:37:13:3f:c4:4a:f6:4f:a6:0b:47:fb:7a:2b:fc:
d3:13:8d:a5:31:89:a0:01:a3:70:c4:48:d2:89:54:
9e:c0:25:dd:67:ca:a9:08:4e:3d:90:2b:d7:f6:ca:
02:34:21:45:82:e7:5c:c3:fb:e4:b8:df:4a:23:6b:
e1:f9:f9:fe:4d:c8:d7:e5:b4:9f:c5:c2:f9:f3:ac:
8c:30:31:8d:ef:58:01:2a:fc:2e:a4:4e:28:69:9c:
4c:91:d2:19:36:10:c1:a8:d3:ba:e5:4a:c0:38:de:
06:4e:c3:7f:10:36:2d:e8:f7:f1:1e:35:33:cb:f4:
a4:8a:43:30:f3:d2:6c:83:a1:94:3f:3f:f6:70:c7:
ac:e8:89:65:37:78:cb:6b:01:ed:95:bb:3a:29:2e:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:E6:3A:33:AF:E3:20:0E:14:DB:50:F9:67:45:8A:D4:B4:3E:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72637E3AC62D11EFB81FD243762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.205.0/24
Signature Algorithm: sha256WithRSAEncryption
42:09:38:26:75:b7:d3:23:a1:90:e6:27:79:c8:79:53:f3:c2:
37:5f:31:94:60:42:72:ee:1f:51:46:9f:0c:f7:ac:8b:8f:45:
32:83:8d:76:d4:d7:7a:fd:bf:43:06:e2:71:59:9f:ae:c5:83:
73:5e:b7:7b:df:89:9f:3c:4f:87:6c:33:98:d3:e1:b5:3d:83:
3b:3e:e5:8e:71:a1:6c:32:e6:74:41:ae:61:6d:3f:4c:68:0e:
a4:0f:15:03:71:8e:85:cb:fc:5a:48:f4:7a:45:e4:c2:be:36:
15:79:88:9e:6f:89:6b:6e:e7:fd:33:30:31:c8:16:fa:1e:09:
64:10:f0:56:c2:be:2d:41:45:03:a5:84:b0:14:4e:0f:84:2a:
7a:6b:02:ca:9e:08:7f:9d:73:b0:b3:74:2f:c7:0c:74:b6:5f:
08:a3:e8:67:ff:28:1a:a2:8a:e2:f6:55:fc:d0:e1:68:a8:93:
ab:f6:5b:26:1a:69:c4:f0:35:55:81:d9:a0:2c:0e:20:d1:6b:
24:27:c0:ed:e5:fe:8d:7a:f5:94:9b:c1:87:f7:f4:7e:75:57:
76:7f:8b:78:ab:a8:66:d5:3e:35:b2:24:bf:29:12:9c:ef:da:
e9:51:87:c7:66:1f:f1:1d:85:ba:50:d8:85:49:20:2e:d9:ce:
1b:c1:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:43 2025 by rpki-client