Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C260679CC62B11EFA271C3B7762E951A.roa
File: C260679CC62B11EFA271C3B7762E951A.roa (raw, json)
Hash identifier: WNNJ0RMDz3NN/G8qGYyJexHSyUhqfg2uXnGYEA2s4Sg=
Subject key identifier: BD:F6:95:3C:0C:DC:65:FD:E7:E1:39:56:D0:F6:C5:42:CA:43:13:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C260679CC62B11EFA271C3B7762E951A.roa
Signing time: Sun 29 Dec 2024 21:27:52 +0000
ROA not before: Sun 29 Dec 2024 21:27:48 +0000
ROA not after: Sun 12 Dec 2027 21:27:48 +0000
asID: 17561
IP address blocks: 154.217.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77766 (0x12fc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:27:48 2024 GMT
Not After : Dec 12 21:27:48 2027 GMT
Subject: CN=6771bed8-cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:3a:3c:a9:79:08:18:bb:5d:12:28:53:f4:
f6:c4:86:bb:f6:54:54:08:a4:80:a3:d6:21:8d:f7:
45:25:30:82:c4:9d:a1:2a:c0:16:8d:e3:dc:d8:a8:
ed:46:cb:c0:8f:34:cc:9a:fb:c7:7f:ea:7d:8d:c7:
26:33:4a:24:fb:74:df:af:be:93:c2:00:e7:dd:e8:
97:9e:88:26:3a:22:59:e9:30:a6:d3:61:c8:39:34:
b4:42:d2:4f:ca:c4:c5:ba:df:66:2a:66:7b:b4:ca:
7f:85:8e:2b:fb:5f:b0:31:12:a7:e9:02:3b:6d:e7:
85:c1:24:d6:a5:11:67:0c:3f:8c:a1:99:e0:ce:57:
74:20:25:59:28:7c:aa:c1:e1:2d:1c:d1:25:97:9e:
ff:8e:26:4a:9d:17:dd:c9:68:6f:95:f6:94:0c:47:
ba:bd:0d:00:c2:9b:0d:24:38:42:fb:00:2b:7b:8a:
a5:16:b3:bd:5a:51:59:99:1f:2d:69:bc:5e:f7:87:
f4:0c:de:1d:42:3a:0d:f5:f0:f0:9a:02:ff:5e:8c:
f6:4f:1c:ba:68:84:85:39:d9:87:2c:60:f3:f3:66:
53:88:83:6e:26:9a:52:b5:04:5f:48:12:ab:91:b1:
6b:bc:ae:b5:8d:98:c3:78:1e:37:39:6e:62:c5:bb:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:95:3C:0C:DC:65:FD:E7:E1:39:56:D0:F6:C5:42:CA:43:13:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C260679CC62B11EFA271C3B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6c:c0:c2:16:fc:34:42:16:04:61:7f:de:a1:3d:7e:19:37:
05:aa:01:10:6e:5a:94:05:43:14:25:31:47:70:84:79:38:f9:
f6:c0:64:14:60:21:4f:0c:47:11:71:13:3b:cd:96:cb:92:63:
34:ef:46:18:6d:0f:3c:50:36:12:56:c5:8c:ab:08:3e:c2:e1:
98:22:ef:d2:d3:71:09:00:f8:e9:08:12:26:17:02:7d:bc:27:
54:df:10:4f:a1:ae:6d:75:ea:57:95:b1:76:8d:55:cb:92:2f:
2b:91:22:b3:f4:fc:b2:97:97:4b:39:5f:74:a1:a7:c0:33:7b:
20:cb:d4:2f:d5:c0:48:12:86:69:96:4a:33:80:49:f0:9d:be:
0f:bf:c5:a5:13:d8:9d:4c:b1:21:bf:b5:95:94:c8:c9:2c:d6:
23:16:07:32:db:15:81:5d:06:86:a3:b7:a1:2c:2a:d7:49:ba:
a8:3b:ca:0c:a9:54:a9:2f:e5:75:49:e0:ac:d6:00:a8:b9:11:
9f:47:c4:c2:cc:c2:15:54:21:5d:de:e9:ad:19:f3:1d:a9:d6:
c3:24:04:c3:4c:c4:7a:71:64:91:7a:4c:54:8a:b6:fe:fd:3b:
03:60:80:48:72:6b:1d:b1:a9:c2:17:d0:95:b0:a6:ef:5d:fb:
75:38:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:13 2025 by rpki-client