Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6C876AC5F411EFAAD6205F762E951A.roa
File: BE6C876AC5F411EFAAD6205F762E951A.roa (raw, json)
Hash identifier: S+NxD0/uMGyTRMyl44yTP+OJCLxQX4iSecyuaqTxY48=
Subject key identifier: 19:C5:5F:17:B3:97:6F:31:B5:8B:25:08:09:31:30:BB:BF:34:47:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6C876AC5F411EFAAD6205F762E951A.roa
Signing time: Sun 29 Dec 2024 14:54:03 +0000
ROA not before: Sun 29 Dec 2024 14:53:59 +0000
ROA not after: Sun 12 Dec 2027 14:53:59 +0000
asID: 17561
IP address blocks: 154.213.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77302 (0x12df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:53:59 2024 GMT
Not After : Dec 12 14:53:59 2027 GMT
Subject: CN=6771628b-3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:f2:c2:61:e2:1d:98:53:33:59:3f:80:5b:
e8:fc:77:76:22:4f:93:58:3c:f1:18:26:b8:61:e8:
b8:b2:e9:9a:17:6a:f9:26:0e:1f:25:d3:c4:ff:c8:
be:bc:a6:92:97:c4:9c:bb:92:d3:60:53:f7:0e:5b:
1d:d5:06:1c:82:6e:a2:10:56:77:2b:a7:75:1e:dc:
87:5e:37:45:8b:da:47:56:45:16:b8:43:0f:57:4d:
37:70:ba:3a:c1:20:2e:0d:e2:1d:40:c8:d2:af:02:
ec:9e:98:cc:78:52:c7:d2:ba:6f:e4:94:f4:f2:73:
e2:de:88:df:30:bc:80:37:cd:25:45:a5:04:9a:1e:
9a:42:bf:3b:70:e9:41:9c:1a:5d:14:d8:2d:51:0c:
f2:d9:3c:8e:23:df:fa:92:4e:f4:54:d8:c8:ef:45:
44:76:37:30:32:1a:86:00:5b:5f:21:0f:3e:08:96:
00:c7:8d:cc:fd:bc:49:0d:67:8d:85:3d:52:25:d8:
cc:60:5b:67:8a:a8:82:fa:70:88:18:1d:0e:42:c6:
1d:19:2b:83:41:c9:2e:4a:fa:b4:fa:1e:24:82:80:
54:89:68:ba:1d:a5:00:44:0b:a6:6f:85:fe:44:39:
58:14:db:bf:74:c7:59:1c:be:80:51:a4:a0:3b:20:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:5F:17:B3:97:6F:31:B5:8B:25:08:09:31:30:BB:BF:34:47:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6C876AC5F411EFAAD6205F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.180.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:a2:be:b4:16:50:b2:0d:3b:54:2b:53:23:0d:5d:0a:77:
06:22:4b:35:6b:c0:c6:ec:62:ed:c6:3b:3d:e5:c2:74:8d:ff:
bb:7b:cb:8f:76:15:03:7f:a5:44:c0:49:86:aa:49:f0:24:dc:
31:92:13:8b:49:9a:fb:bc:52:a1:c1:81:16:28:7c:b6:61:8b:
31:a0:f5:55:7e:29:7a:89:ce:02:a1:2d:ba:20:23:fc:3e:e8:
6d:9d:ca:ea:94:ac:43:3a:6a:42:ff:15:c7:77:49:98:d3:d1:
27:cd:82:7a:1a:bc:6c:45:83:33:ca:84:55:3d:3c:8d:2a:06:
42:b4:48:0b:d6:5e:75:8c:b9:28:f6:2e:b4:98:78:bb:86:c1:
86:15:41:c8:33:06:2a:35:c2:81:2f:02:07:7f:48:7e:c5:30:
83:58:3c:04:1c:13:2d:87:7f:48:2b:5c:13:77:87:df:76:e3:
29:10:69:27:99:d4:35:e9:38:1d:96:2b:b9:16:bd:f6:f9:9e:
5a:5b:99:6b:9f:96:15:e4:49:99:90:c0:60:72:c0:ae:3e:ba:
7d:c5:9c:e1:a8:5a:23:f2:4b:b0:75:23:fb:68:aa:f9:bf:6c:
ba:1b:21:84:33:95:f0:0a:c7:d4:df:07:9e:bc:88:ec:f7:80:
65:51:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:39 2025 by rpki-client