Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17201C4C5FB11EF9223D089762E951A.roa
File: A17201C4C5FB11EF9223D089762E951A.roa (raw, json)
Hash identifier: hI3XPQWw6H02yAoGh7EUEiS72UiGdBUbrzP7k3yhNZc=
Subject key identifier: 0F:A2:AC:5B:A6:24:8F:F8:A1:75:10:20:21:FF:CD:FB:38:6F:3A:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17201C4C5FB11EF9223D089762E951A.roa
Signing time: Sun 29 Dec 2024 15:43:21 +0000
ROA not before: Sun 29 Dec 2024 15:43:17 +0000
ROA not after: Sun 12 Dec 2027 15:43:17 +0000
asID: 17561
IP address blocks: 154.216.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77360 (0x12e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:43:17 2024 GMT
Not After : Dec 12 15:43:17 2027 GMT
Subject: CN=67716e19-5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:b1:aa:b3:42:f0:67:eb:c9:54:a1:f1:f2:
f0:61:05:05:00:4f:25:87:f5:08:8f:23:7e:bb:5d:
d3:6b:cf:17:fc:c5:c0:7f:f9:67:4e:d8:c8:fa:e2:
07:82:ff:5b:3b:99:71:65:5c:6c:5d:a8:9b:c9:89:
ef:09:e1:66:4e:1b:31:06:60:14:fb:f4:f4:44:18:
25:5e:70:65:cd:72:84:ab:8c:3f:06:f8:1b:96:81:
10:9f:2b:01:21:d2:64:0a:40:52:f1:5d:5b:53:8b:
6e:6f:36:69:fc:42:89:20:d4:1d:2c:ff:04:5f:7b:
a3:3e:27:da:f4:d6:2b:03:64:86:59:ae:9a:01:6f:
16:71:b8:82:15:00:61:e0:8a:0b:9d:64:d4:af:65:
b7:18:b8:8f:cb:c2:fc:b6:61:ce:c5:f4:29:dd:3a:
c0:45:a5:af:a4:b9:f5:fa:e8:4d:df:f9:8b:6a:c6:
40:f0:ec:f5:2f:3c:ef:d9:d3:76:d6:cc:11:a1:5a:
49:f2:5c:01:ba:26:0f:72:02:c7:ce:aa:8f:75:ee:
b0:3a:37:b4:5c:14:40:36:12:f9:61:74:4f:32:0f:
dc:6c:ac:0a:fd:b9:95:83:0a:1b:68:94:80:17:86:
f2:45:83:78:e8:86:63:fb:15:06:65:3d:a8:e9:8e:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:AC:5B:A6:24:8F:F8:A1:75:10:20:21:FF:CD:FB:38:6F:3A:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A17201C4C5FB11EF9223D089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d0:72:2f:ff:ab:e7:4d:3b:9c:31:ad:5d:12:0a:20:8f:f4:
0d:67:18:88:bb:e3:b8:bd:0f:de:97:c3:f6:09:cf:0c:44:39:
ad:0b:bb:8a:de:bf:68:af:2c:b3:2a:04:48:a1:f9:d1:2d:f9:
0c:a1:ad:3d:41:ba:dc:6d:f1:f3:1c:b5:6f:16:51:b1:37:c8:
ec:90:21:af:68:0f:66:d2:b0:38:c6:46:ea:26:b6:3d:b3:54:
81:2c:c0:f3:f9:a6:14:dd:c0:75:d8:8f:1c:1d:a7:3f:41:89:
c8:1e:b1:31:c6:7a:8b:3e:b3:4a:14:77:6d:79:cb:b8:e1:c0:
a3:04:79:0e:e8:2f:8c:b6:a0:f5:9c:79:fe:f4:e4:b4:0e:c8:
9d:86:9c:f9:61:06:0c:d5:3d:8e:17:f8:bb:64:4b:b7:4b:97:
11:f2:8c:33:8c:88:84:08:88:de:99:31:ca:30:d7:dc:0e:54:
94:a9:aa:b7:c7:fd:fb:8b:a8:d9:9f:3b:4d:2a:c9:43:36:e0:
7a:41:67:95:6c:67:e8:9f:a6:9c:f2:a6:5e:95:f1:3b:9e:d6:
ea:9b:12:e2:06:92:9f:62:3d:95:c8:f1:89:b4:cf:6c:13:df:
27:26:7f:19:be:1a:27:86:d3:b2:d0:77:1c:11:50:51:63:dd:
b3:dd:4b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:52 2025 by rpki-client