Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3C1AE6C62C11EF993EE5BD762E951A.roa
File: BB3C1AE6C62C11EF993EE5BD762E951A.roa (raw, json)
Hash identifier: ZEyA9z1an1I7WkNb6vh3w0XR/YgM15uRYuygf+EWojc=
Subject key identifier: 22:20:4B:C5:F7:FC:47:F6:99:1A:66:76:24:45:61:D5:48:F8:B3:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3C1AE6C62C11EF993EE5BD762E951A.roa
Signing time: Sun 29 Dec 2024 21:34:49 +0000
ROA not before: Sun 29 Dec 2024 21:34:46 +0000
ROA not after: Sun 12 Dec 2027 21:34:46 +0000
asID: 17561
IP address blocks: 154.217.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77774 (0x12fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:34:46 2024 GMT
Not After : Dec 12 21:34:46 2027 GMT
Subject: CN=6771c079-22eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:8c:91:3e:16:0b:aa:65:a2:83:4e:c4:26:
35:d0:a1:60:7c:4b:c0:46:e3:ed:27:d3:10:8e:bb:
9f:60:92:69:6f:66:a0:da:a2:4e:88:06:11:5e:4b:
8f:aa:78:9c:00:df:c4:09:91:eb:7c:59:c4:ea:1c:
d4:63:3a:ee:e1:5d:90:3a:c1:a7:49:1e:43:56:32:
c2:57:b9:00:ed:9f:e4:2e:7f:b8:71:f3:81:21:91:
07:38:3d:4b:00:bb:2d:90:70:ad:df:c7:5a:14:d8:
c6:d6:fa:11:74:cc:6e:37:3a:e7:6f:0a:b4:0d:cf:
36:d9:be:b9:d9:ec:b8:af:76:a8:51:6b:15:1c:29:
43:c4:9e:7b:27:02:6f:68:7b:03:30:ea:e7:6b:e2:
31:1e:e3:ee:53:1f:96:c5:4b:52:b9:6d:a2:20:fe:
15:08:bd:f1:2f:fd:67:21:27:84:9c:29:f8:d4:5b:
16:61:ff:40:7a:b1:b0:a7:1d:1b:03:c1:01:7c:98:
06:73:b8:f7:3b:0e:37:e0:bc:7d:b5:d1:93:e8:e2:
e0:92:34:26:e5:50:a7:65:dc:8f:2a:30:28:77:6e:
a8:b0:67:12:00:78:04:26:ac:5a:36:66:00:bd:01:
17:42:8a:f0:77:3e:2a:bf:22:38:dc:3c:a9:96:a3:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:20:4B:C5:F7:FC:47:F6:99:1A:66:76:24:45:61:D5:48:F8:B3:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3C1AE6C62C11EF993EE5BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.202.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1f:5e:59:7f:74:b3:7e:da:ad:fb:26:48:66:07:db:4e:0f:
7a:cc:06:be:39:36:ec:3a:d4:7b:44:b7:ff:9b:c0:e8:27:64:
2f:c1:37:cb:d0:93:c0:cf:ea:3e:bf:56:da:ee:88:83:a2:69:
44:89:22:cb:20:8b:4e:d6:38:26:8c:df:77:0a:96:0f:ae:c3:
50:a2:ce:69:2f:df:d2:4d:6a:43:02:bb:99:50:e8:f0:19:98:
95:cd:26:ba:ce:45:b0:cc:97:1b:18:fb:0f:79:76:65:86:51:
b3:de:ea:d7:86:f6:8d:8a:bd:92:f4:fe:1e:5b:6c:aa:6a:78:
f7:7e:51:d6:a4:6c:d7:00:4c:24:a4:5f:90:07:dd:3c:cb:08:
2e:4a:3f:9d:43:9a:67:8f:11:f5:9c:fd:9d:68:87:1c:1c:f7:
e4:15:e8:c5:c9:8e:cd:b3:d7:72:81:d0:02:95:e6:e2:56:f8:
e3:38:39:72:e1:d8:1a:ad:51:6d:e3:26:5e:0e:ed:42:95:49:
68:5d:5e:ea:4c:76:d8:10:ad:18:1c:42:a1:8a:f5:58:10:3c:
66:89:9c:33:87:95:c4:f0:66:3c:53:2d:07:84:1b:db:1e:97:
cb:5c:52:1e:52:72:d6:a3:21:7f:ae:52:2a:4e:6b:63:4a:a0:
c5:c2:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:45 2025 by rpki-client