Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BFC3238C61411EFBDA9BAA5762E951A.roa
File: 8BFC3238C61411EFBDA9BAA5762E951A.roa (raw, json)
Hash identifier: 7EiNnV/z2uScBEJAUyik8dupIkyp5G+47aeVgk6FhHs=
Subject key identifier: D1:8B:21:C4:67:2E:21:C8:8E:FA:7E:57:33:F0:E1:B3:56:F2:BC:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BFC3238C61411EFBDA9BAA5762E951A.roa
Signing time: Sun 29 Dec 2024 18:41:42 +0000
ROA not before: Sun 29 Dec 2024 18:41:38 +0000
ROA not after: Sun 12 Dec 2027 18:41:38 +0000
asID: 17561
IP address blocks: 154.217.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77572 (0x12f04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:41:38 2024 GMT
Not After : Dec 12 18:41:38 2027 GMT
Subject: CN=677197e6-2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:d9:50:9c:15:da:f9:f2:7d:62:95:45:76:
81:88:4a:cc:5f:f5:8d:bd:9d:29:5a:b5:5f:4a:8b:
96:52:76:d5:e2:da:71:e1:af:26:ed:ea:bf:f2:7c:
b0:72:a4:49:91:fe:34:51:65:24:96:78:d1:aa:99:
11:66:3e:16:4f:33:8b:87:48:cd:60:c8:17:47:b0:
34:f3:a4:78:80:38:35:c4:d4:69:a3:6b:41:77:6a:
68:0a:78:08:de:73:66:1e:07:df:2d:14:d2:5b:f3:
e0:b0:d2:43:51:86:33:e0:e6:32:74:48:f6:4c:6d:
39:32:f5:ba:bd:c3:37:40:72:f6:92:1f:3b:74:9f:
27:fd:31:9f:ac:fd:c7:14:00:aa:07:ce:ca:7f:b3:
09:2f:8e:88:9e:f3:37:41:a9:5d:05:f1:cc:ea:bf:
0e:9d:db:86:25:aa:ce:69:1a:45:93:a7:52:08:f8:
e2:63:f0:db:a0:53:a7:ad:92:8d:cf:a3:94:de:03:
3d:8d:e6:f5:37:db:44:a8:b7:79:3b:1f:60:d3:ec:
84:ad:55:3e:84:6c:8f:2c:83:9b:eb:41:d5:de:aa:
09:49:f6:bf:07:60:03:9c:fc:df:db:68:b7:94:4f:
cc:5f:d3:37:76:d9:64:ec:bb:f3:3c:02:dd:a2:a0:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:21:C4:67:2E:21:C8:8E:FA:7E:57:33:F0:E1:B3:56:F2:BC:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BFC3238C61411EFBDA9BAA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b0:5b:03:f7:29:06:99:51:6d:c2:ec:bb:fe:b2:db:a8:4b:
fd:a2:3f:27:e5:a2:7d:9d:3f:f7:3a:d2:ca:36:80:77:83:58:
a1:c2:29:7a:5a:c8:ed:aa:e2:ef:71:2d:7f:01:9f:04:ab:43:
ff:61:1b:c9:08:8c:ca:b4:33:89:c1:6f:95:2c:71:c0:04:5e:
03:19:ae:3d:73:c4:57:6f:ed:40:2b:c1:67:9a:9b:3b:20:ce:
6c:e9:e4:86:31:90:42:13:0e:f5:b4:dd:b2:6e:6b:25:38:43:
e0:9c:3c:c7:b6:49:49:4c:a0:c5:f6:17:a9:c7:ce:3f:e6:62:
5d:3d:04:78:0b:fd:3a:47:50:57:26:43:03:9b:3a:35:28:51:
16:66:91:77:89:71:78:c5:44:34:4a:36:69:6c:84:f0:1d:37:
90:9b:a6:e5:aa:a9:6d:71:a7:b5:f1:cb:9d:36:56:bf:52:76:
15:1d:a4:c5:ea:c2:10:cb:50:d0:22:7f:d4:fc:40:97:bd:4c:
a5:f0:fe:4d:5b:80:22:2c:a3:2c:09:72:c2:93:06:f6:bc:e8:
04:7e:18:78:b4:3c:59:42:33:08:c5:2e:d4:bf:ee:a7:62:10:
70:f2:2c:18:00:33:9e:5c:75:d2:fb:bf:b5:08:a6:ea:70:3d:
a6:47:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:08 2025 by rpki-client