Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A21C3BDEC62E11EFA953C44A762E951A.roa
File: A21C3BDEC62E11EFA953C44A762E951A.roa (raw, json)
Hash identifier: 0PWSit1zn3vJvVyi9B78OXuPkoF3ke77Stj5bHjy950=
Subject key identifier: 35:A4:27:AB:94:AA:D1:2A:91:AA:20:1C:45:08:47:B2:7D:FB:84:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A21C3BDEC62E11EFA953C44A762E951A.roa
Signing time: Sun 29 Dec 2024 21:48:26 +0000
ROA not before: Sun 29 Dec 2024 21:48:23 +0000
ROA not after: Sun 12 Dec 2027 21:48:23 +0000
asID: 17561
IP address blocks: 154.217.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77790 (0x12fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:48:23 2024 GMT
Not After : Dec 12 21:48:23 2027 GMT
Subject: CN=6771c3aa-547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:26:b5:71:7a:a7:37:8c:02:35:ac:fb:c2:
0b:c2:76:c9:4b:3a:93:7b:4a:e5:9c:7b:3e:31:41:
7f:41:92:37:16:79:90:62:83:57:96:f5:b8:53:b1:
c6:1a:2d:4d:2d:52:5f:e9:a9:e4:b6:62:e1:cc:d9:
1b:f0:86:d3:7c:2e:df:8b:a9:fe:c2:d6:39:3d:01:
e1:71:1c:65:39:9e:80:22:ca:e2:75:50:7b:10:65:
21:d3:90:c1:46:2b:93:ca:21:d7:64:1d:3e:af:2a:
0b:31:48:30:e9:27:bb:53:da:ec:d0:4c:ec:d4:8f:
1a:40:ae:58:b5:55:e2:44:74:3d:eb:55:bf:d2:e7:
83:5a:75:2c:42:78:cf:8d:aa:b8:94:bb:59:d4:91:
36:a4:6d:93:70:13:ee:b7:3b:4a:e6:7e:93:61:f1:
a4:d3:45:5a:f1:5c:0d:78:e3:83:ad:3f:bc:17:a9:
3b:5e:ec:b5:f3:90:11:8a:e4:d2:23:de:c7:bd:1c:
8e:30:26:2f:2a:86:43:94:aa:3c:ff:a5:2b:29:78:
bd:e7:4b:34:98:5b:df:80:9b:6d:a9:e2:43:0f:8e:
49:23:6f:cb:f9:2c:b8:5f:2f:87:ba:da:8e:d8:92:
70:2d:0a:9e:c6:84:1e:90:40:70:a1:c0:f8:16:84:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A4:27:AB:94:AA:D1:2A:91:AA:20:1C:45:08:47:B2:7D:FB:84:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A21C3BDEC62E11EFA953C44A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c6:63:31:7f:08:84:17:3d:19:ab:78:8d:78:b9:04:82:46:
f6:75:75:72:e9:b4:74:b7:19:df:a9:35:84:77:3f:ba:f3:51:
cd:21:85:d0:62:1a:e7:15:f7:95:1e:e0:33:54:ad:dc:17:26:
83:53:80:77:4d:69:5d:5f:45:a0:cb:57:a2:b6:aa:16:a2:7b:
60:be:2e:c9:61:09:19:a8:db:5d:52:e4:d4:f6:8a:ba:ee:71:
9c:45:1f:31:09:95:2d:8e:74:60:23:86:1a:d2:42:55:ae:67:
c5:e2:28:83:65:3d:ee:1f:20:8a:10:9b:79:8f:21:e5:a8:14:
6e:87:7b:92:56:38:7d:28:ef:29:1d:cf:4b:c5:9b:cc:da:87:
b3:ad:af:d3:9e:5f:b5:9d:30:2d:a1:49:8a:30:ff:0c:1a:5b:
51:e8:3f:23:5d:a6:16:b5:5c:3e:4a:db:df:83:bd:92:df:d0:
a6:0c:82:cc:3f:20:37:7b:cc:f9:8c:42:c5:76:4c:0f:3e:31:
c3:6b:31:eb:7d:9c:07:a4:eb:e4:b2:82:53:9c:9f:e2:9f:ff:
6b:ea:33:08:e0:74:b0:ae:9d:dd:c6:1e:11:38:a0:33:a3:a7:
e1:fb:90:ed:49:94:dd:a1:40:10:f3:4d:b2:45:5b:84:0a:dc:
26:66:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client