Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0B00A88C60911EFB8732B62762E951A.roa
File: B0B00A88C60911EFB8732B62762E951A.roa (raw, json)
Hash identifier: IOU56raJWiKfovlV/jF14X/U4PaXnvoz6Irv2dA8d48=
Subject key identifier: F8:C0:FB:C8:95:07:C8:F3:F4:65:FD:07:E5:4F:2F:84:09:39:8A:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0B00A88C60911EFB8732B62762E951A.roa
Signing time: Sun 29 Dec 2024 17:23:59 +0000
ROA not before: Sun 29 Dec 2024 17:23:56 +0000
ROA not after: Sun 12 Dec 2027 17:23:56 +0000
asID: 17561
IP address blocks: 154.217.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77480 (0x12ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:23:56 2024 GMT
Not After : Dec 12 17:23:56 2027 GMT
Subject: CN=677185af-ddb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:a7:7a:5f:15:8f:2b:d0:88:2d:d5:6c:32:
34:d2:71:51:74:bd:2f:84:db:16:09:cc:4f:51:ea:
f5:3a:15:a7:a9:58:0a:c0:78:ba:b3:b6:cc:96:9f:
14:fb:8b:e4:fe:e8:de:be:2e:8f:8a:f1:9f:d8:6e:
c7:62:85:37:b3:68:91:16:b7:0c:47:41:43:4e:39:
b6:11:ab:0d:74:dd:b0:12:ff:6e:83:44:f3:7c:01:
6f:ed:5f:c5:d8:e2:d8:f6:3d:20:ca:17:b3:9e:53:
8d:c6:9d:19:9b:29:01:eb:6a:8f:7b:42:a3:7a:27:
54:61:77:d4:fc:cc:5b:55:3e:91:30:00:6e:56:5f:
92:08:86:2b:7e:61:b4:17:c1:09:5e:08:47:74:69:
fe:db:d7:5f:71:56:63:ea:9a:4a:10:9f:9f:0b:77:
5a:5f:6a:05:e0:32:ba:68:e8:9c:3f:a6:44:c7:db:
75:46:e0:17:b2:bf:ed:9e:98:90:e8:17:29:81:27:
28:db:c0:87:4b:bb:7c:da:ea:42:01:f4:6c:83:6d:
d3:f8:12:a9:68:19:3d:03:6a:55:04:5b:ee:ae:99:
78:5f:e5:fd:38:cd:ac:cd:30:f2:10:9f:d9:b4:65:
8c:b5:33:bc:a2:51:48:1e:cb:4c:fe:32:dd:2a:02:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:FB:C8:95:07:C8:F3:F4:65:FD:07:E5:4F:2F:84:09:39:8A:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0B00A88C60911EFB8732B62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.55.0/24
Signature Algorithm: sha256WithRSAEncryption
21:78:02:7b:76:b2:22:23:d5:15:6d:5b:20:fe:4c:77:60:d1:
16:f9:27:ca:c4:2b:c6:02:d8:51:fe:11:46:df:8c:2d:00:a2:
dc:13:fd:df:56:26:8a:11:b7:9d:29:e1:34:68:d4:be:db:5e:
a3:03:a2:44:64:4c:6f:68:06:fe:74:3d:ce:f3:a5:68:9f:54:
bb:2d:c7:70:08:7a:4b:8f:67:fe:9a:3d:f9:26:3f:2d:3c:42:
8b:05:b8:b9:57:07:7b:e1:19:2f:43:65:64:27:68:4b:68:a9:
31:d3:1f:bf:0c:e3:d2:f4:0e:da:63:dd:39:77:a3:38:60:55:
74:25:56:72:4e:be:5f:4e:10:44:16:b1:f6:98:f8:d8:66:3d:
06:4a:9d:a5:0f:e8:5d:52:06:91:0d:33:38:05:29:55:9b:e8:
df:d8:4f:38:1d:e5:ed:17:08:c3:38:fd:51:86:b4:ce:a5:0f:
f0:48:9e:55:43:8c:bf:78:b7:f9:32:82:e6:c4:1f:eb:97:74:
78:78:90:3c:1d:ba:2a:91:d1:2f:0c:3b:54:f1:73:a5:4b:d3:
4c:1f:82:56:63:0e:a6:51:54:33:95:2b:d9:ba:a0:e8:4a:81:
e0:ea:ea:cf:95:73:b5:a0:e6:77:34:6b:fe:83:fe:bb:c9:49:
00:39:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:40:18 2025 by rpki-client