Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AA5712C62611EF9F05ED96762E951A.roa
File: C2AA5712C62611EF9F05ED96762E951A.roa (raw, json)
Hash identifier: rtYYEBwTE4RcrXu8NbXQzmmV+Q8Mvq0yzHPDXHAvTpQ=
Subject key identifier: 10:5A:7F:90:6E:FA:8C:C7:F9:58:EA:10:72:06:FE:03:AF:E3:B7:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AA5712C62611EF9F05ED96762E951A.roa
Signing time: Sun 29 Dec 2024 20:52:05 +0000
ROA not before: Sun 29 Dec 2024 20:52:01 +0000
ROA not after: Sun 12 Dec 2027 20:52:01 +0000
asID: 17561
IP address blocks: 154.217.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77724 (0x12f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:52:01 2024 GMT
Not After : Dec 12 20:52:01 2027 GMT
Subject: CN=6771b675-9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:2f:e9:f0:6f:10:a5:1c:ea:1c:e3:97:51:
b7:2c:c6:6c:a9:c9:bc:e5:74:06:51:0b:e9:18:46:
d7:78:69:4f:ed:23:f2:c3:bb:a9:cb:29:0a:46:51:
d0:49:6e:2c:77:f1:dd:5f:03:41:70:d4:1f:65:91:
90:00:01:76:34:57:a2:1d:61:64:43:e4:0a:d6:a1:
54:71:4c:b7:fa:6b:a5:21:0a:51:27:2e:e6:7c:7b:
27:3b:a3:fd:7c:8d:90:73:a4:54:7e:0b:a2:ab:9e:
83:8b:bf:c0:86:b8:30:76:da:73:88:a3:a3:74:6f:
6f:79:c6:f0:d1:47:5b:18:af:17:e2:b3:7d:d1:94:
32:96:7b:75:9b:43:f4:6d:f4:04:ea:43:15:08:0e:
dc:bc:d1:82:90:d0:8e:26:0d:c8:53:b9:67:83:81:
1b:56:32:21:5c:e9:d4:66:8c:61:bc:a3:0d:84:26:
b7:f3:aa:4f:af:5b:f7:6d:1e:bc:6f:21:1c:50:dc:
2b:c6:8b:3c:75:b7:7e:52:4c:1d:95:88:3b:f7:25:
3d:d7:ef:03:31:50:89:92:ac:89:34:b1:d4:d0:30:
b2:44:91:76:e2:0c:4b:17:d7:70:9d:54:3f:db:83:
28:b2:41:90:3e:1a:ff:97:fa:86:8c:37:23:cd:a8:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:7F:90:6E:FA:8C:C7:F9:58:EA:10:72:06:FE:03:AF:E3:B7:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AA5712C62611EF9F05ED96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.177.0/24
Signature Algorithm: sha256WithRSAEncryption
60:08:bd:6d:1f:03:ed:2b:2f:d4:d0:8f:4d:18:76:ae:1a:24:
49:d6:cd:52:0d:4d:dc:42:dc:e2:55:4b:dd:3b:71:8f:46:3c:
91:e6:7a:54:5e:f3:a0:14:b4:4d:a0:a2:9a:04:b9:ea:8e:a5:
b4:9c:b6:3d:5a:e9:65:2f:17:7b:c2:43:33:4d:7f:0e:97:69:
f8:58:01:db:f4:6a:11:1e:fa:7f:bf:03:e5:83:6f:71:af:77:
85:e6:ce:37:c2:b1:7c:ff:52:c4:2b:51:b5:a5:09:e2:46:ae:
44:b7:9a:d3:8a:3b:0c:cb:1c:34:7f:4f:bf:43:c8:56:4a:33:
70:f7:77:10:9b:c5:dd:a1:4b:35:23:38:e4:d3:f7:25:45:d9:
0a:ef:42:90:5a:ea:e4:f5:4c:ed:21:85:3a:b5:88:a5:47:75:
29:ec:8a:65:3a:79:e8:df:04:6b:72:e1:91:ae:67:a9:90:2c:
18:0c:5d:18:90:38:77:1e:b3:f1:c8:43:36:43:b2:fe:fa:c6:
1f:9c:f6:c6:1b:84:47:b9:30:75:dc:83:23:48:ca:15:41:c7:
2c:5c:c2:26:5c:5a:66:9d:5f:3e:52:70:d4:2c:c9:70:ff:5a:
d4:c9:77:7f:d1:70:b8:bf:b2:ca:43:8f:9e:75:f5:ed:73:65:
09:28:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:23 2025 by rpki-client