Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A1CD24C60F11EFB32F7586762E951A.roa
File: 82A1CD24C60F11EFB32F7586762E951A.roa (raw, json)
Hash identifier: amoDc20kTjErebuFYTE2D40+KvYWia4Ho5HM/HcWrg8=
Subject key identifier: D0:1F:B4:B7:0C:05:FF:51:43:CE:28:D9:42:5F:39:D1:3F:8C:B1:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A1CD24C60F11EFB32F7586762E951A.roa
Signing time: Sun 29 Dec 2024 18:05:39 +0000
ROA not before: Sun 29 Dec 2024 18:05:35 +0000
ROA not after: Sun 12 Dec 2027 18:05:35 +0000
asID: 17561
IP address blocks: 154.217.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77530 (0x12eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:05:35 2024 GMT
Not After : Dec 12 18:05:35 2027 GMT
Subject: CN=67718f73-0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:61:3a:30:fd:ac:67:92:e6:cb:89:5b:11:
ef:15:c0:90:b9:c3:af:f2:d5:88:85:e6:73:af:33:
d4:5e:86:55:bc:b5:f1:55:1f:64:fb:8a:e3:93:51:
24:34:85:ba:8e:9e:5a:16:b7:a5:a6:3b:2d:66:57:
6d:6d:f3:46:99:2f:b4:6b:64:46:ec:1a:d3:f9:6a:
61:e2:79:34:4d:12:56:86:dc:04:98:53:4b:02:c4:
a0:63:d5:51:bd:63:d5:83:b4:26:ac:b0:43:60:8e:
d3:1b:c4:7e:06:44:25:96:14:c0:be:8f:94:46:4c:
28:a3:a7:74:0e:77:61:9b:84:a1:f5:2e:4e:a0:61:
0f:5a:0e:09:b2:53:b6:82:cd:90:db:46:9f:05:b6:
02:52:3f:01:9e:9c:68:a3:e2:2a:d0:80:26:4c:08:
cf:fb:23:1c:dc:c1:bb:ff:da:fe:20:ae:47:6f:e7:
5c:c9:c9:04:7b:c0:63:60:35:7c:2b:91:32:5f:9a:
0e:99:f6:1f:56:00:5b:49:89:af:0c:12:99:b5:71:
b1:1c:96:eb:8f:a7:4e:76:3f:ad:c5:37:ac:32:eb:
b3:65:88:fe:14:ab:80:f3:4a:cf:d7:bb:54:2d:27:
42:92:6b:66:43:57:1b:bf:01:6d:d3:f9:f9:37:70:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:B4:B7:0C:05:FF:51:43:CE:28:D9:42:5F:39:D1:3F:8C:B1:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A1CD24C60F11EFB32F7586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.80.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2a:cf:56:11:bf:f1:85:0e:97:6e:59:8a:b6:bc:af:2a:77:
bc:12:50:17:a1:bc:5c:73:52:3c:30:ac:6c:61:32:a2:15:b7:
b7:27:80:f6:48:b8:2e:59:c7:02:33:1b:50:f1:1c:6a:41:9a:
b7:82:0a:15:42:1d:af:01:aa:7b:37:97:1d:9c:e9:91:8b:4e:
61:5e:6d:bb:a1:b4:39:a9:80:4c:7a:db:2e:8d:09:5f:7c:28:
d2:ec:93:37:01:2e:f0:5c:58:01:aa:32:ef:51:38:aa:80:55:
2b:19:ac:22:1d:d3:45:55:c1:41:56:8a:d1:08:ee:3e:ff:5c:
10:5a:af:d6:9a:0e:d4:1b:5b:ac:7a:56:8d:a4:21:dc:c0:3e:
40:da:ec:bb:54:b1:c7:4a:94:8c:be:18:74:01:7b:44:1e:c9:
54:cd:1b:e0:9d:de:65:4f:d4:2b:6c:12:2e:da:d2:3b:d2:06:
0e:e3:9d:e9:dc:f8:d4:50:09:b8:81:bd:b7:82:99:c2:20:ba:
a8:3a:1e:64:3b:bc:4b:97:86:05:a1:e0:53:d6:95:83:cc:a0:
ce:61:66:34:85:2c:6e:c0:b0:f7:14:49:26:2b:07:a8:6e:d9:
06:20:d3:16:9b:81:72:4e:9e:a4:7e:0d:aa:71:59:4d:59:a7:
0e:60:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:38 2025 by rpki-client