Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C97C8AAC60B11EFA8DB286D762E951A.roa
File: 8C97C8AAC60B11EFA8DB286D762E951A.roa (raw, json)
Hash identifier: 88d5CK+qqDPqzowJ3cHoxTEEq5N8sny016OLdsBzR00=
Subject key identifier: 80:9A:1A:A6:F5:FA:48:4B:09:C6:6F:E7:71:B8:70:C8:EC:FC:AC:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C97C8AAC60B11EFA8DB286D762E951A.roa
Signing time: Sun 29 Dec 2024 17:37:18 +0000
ROA not before: Sun 29 Dec 2024 17:37:14 +0000
ROA not after: Sun 12 Dec 2027 17:37:14 +0000
asID: 17561
IP address blocks: 154.217.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77496 (0x12eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:37:14 2024 GMT
Not After : Dec 12 17:37:14 2027 GMT
Subject: CN=677188ce-a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:6c:05:52:08:4c:09:90:e8:39:b9:03:3d:
70:dd:6e:be:55:d5:ea:4a:2d:13:c4:0a:c8:6d:86:
bc:21:f7:ac:12:80:ee:d5:d3:62:bd:09:50:2a:c9:
f2:c6:a0:74:34:a3:e6:da:05:cd:24:39:33:a2:17:
28:c2:f2:c3:de:5a:da:03:87:c5:35:c9:aa:41:f6:
13:35:25:d6:e3:89:36:98:73:58:12:a7:91:f8:a7:
45:65:4d:80:fa:6b:dd:d9:6d:c2:35:39:bf:04:8c:
60:92:87:5c:12:f6:3f:65:28:68:28:14:ea:6b:74:
7e:fe:da:65:fd:ab:3a:f3:a2:9f:73:a8:08:85:53:
ce:51:28:b5:34:02:86:e6:60:d7:d5:99:c7:00:b7:
26:de:f6:ea:c3:d9:8b:1a:f5:f4:aa:5d:9b:ba:ca:
7f:cd:ff:fd:2c:90:f2:9f:42:99:cd:9f:06:ca:0d:
d9:80:08:81:cd:87:cf:86:70:7f:b4:6e:3e:b9:51:
f6:ba:1a:5d:15:07:28:36:bd:8b:71:ec:66:f8:a0:
37:6f:d4:b3:21:26:7d:b2:b8:ba:93:5c:4b:20:72:
2b:0a:68:4e:5f:bf:b2:04:3e:54:75:32:11:fe:bf:
7d:8c:53:03:98:de:47:c6:9d:87:1e:a7:e3:f7:6b:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:1A:A6:F5:FA:48:4B:09:C6:6F:E7:71:B8:70:C8:EC:FC:AC:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C97C8AAC60B11EFA8DB286D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.63.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c6:fd:81:2b:12:da:17:24:aa:c7:ba:41:f2:f9:1b:91:e5:
cb:3d:28:c5:67:9c:4b:68:3a:db:ad:bb:bb:63:cd:2f:9c:52:
e3:48:84:80:8d:9c:5a:d4:cf:a0:d4:62:07:29:a1:76:b0:d1:
c3:d7:05:f6:94:7c:71:09:43:b4:0c:28:32:e5:37:0e:2a:31:
db:85:5b:24:d6:13:8a:d4:aa:a1:18:42:b2:da:87:f1:24:a8:
fd:da:e1:0b:ce:93:12:60:09:01:4a:c5:be:e4:5f:22:13:71:
4e:b5:22:84:7e:c5:87:59:ba:f9:17:0e:8b:9d:e9:6e:50:75:
26:0e:4e:90:66:f7:9e:15:10:14:94:40:c1:57:b8:a4:33:64:
c8:00:ba:25:c9:dc:a4:75:c3:03:00:2e:95:7a:98:cb:87:90:
58:5d:a3:7a:97:ca:8e:b5:fb:c5:03:47:80:a2:4d:0b:22:c0:
db:65:de:0a:51:d6:7e:f5:69:90:21:42:ce:12:d0:3b:f7:de:
11:ec:fc:5a:c8:eb:1f:df:2e:a7:60:fb:a7:53:04:98:68:c6:
39:14:8e:4c:10:3d:2c:8f:58:4e:57:c1:09:c5:c7:c8:5b:e9:
1b:25:8e:d9:ce:8f:6d:7b:0d:4c:46:26:bf:3b:68:b9:c8:7c:
4e:d2:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:08 2025 by rpki-client