Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3166D7AC60411EFA1AB0A44762E951A.roa
File: C3166D7AC60411EFA1AB0A44762E951A.roa (raw, json)
Hash identifier: HHG2aCWr8YlLYoyzNgJL5/T3AFgYqNLr7WUXEIUaC8A=
Subject key identifier: E5:59:0E:48:26:90:60:F0:F6:6E:F3:1B:D2:21:A8:19:49:C3:0B:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3166D7AC60411EFA1AB0A44762E951A.roa
Signing time: Sun 29 Dec 2024 16:48:43 +0000
ROA not before: Sun 29 Dec 2024 16:48:39 +0000
ROA not after: Sun 12 Dec 2027 16:48:39 +0000
asID: 17561
IP address blocks: 154.217.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77438 (0x12e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:48:39 2024 GMT
Not After : Dec 12 16:48:39 2027 GMT
Subject: CN=67717d6b-4bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:f6:25:0b:98:42:fa:51:43:f6:c9:cf:70:
2a:99:ef:8c:d1:a5:0a:ed:3d:66:97:43:27:6f:07:
ed:9f:f4:05:ec:5c:fc:68:48:61:9f:9c:54:a3:21:
7b:fc:52:39:2f:cb:11:e3:60:6e:87:61:2b:0c:0a:
ab:57:bc:1b:56:ef:ab:22:cf:a7:7b:52:1f:1c:3d:
89:37:14:f5:ef:25:fe:f9:25:8e:53:2a:14:d6:4f:
10:3f:64:cf:69:29:7a:4e:04:b2:77:b6:02:8c:0b:
2f:c0:96:c0:8e:3b:6d:5b:c8:ef:b3:3f:39:76:07:
81:8a:d2:f9:a6:b4:25:e4:83:21:08:1a:90:d9:9c:
38:2a:e1:89:8b:4b:06:6f:fc:fe:e8:1c:34:9f:39:
fc:e8:d8:d9:3b:a3:10:25:1b:ae:82:65:bf:b9:4e:
e3:e4:a4:9f:84:12:ee:01:89:fc:db:c4:f7:e1:c4:
fc:2f:ff:71:e8:9c:a3:29:8b:56:0c:45:50:7a:e3:
27:44:7a:4e:41:97:04:36:ba:7b:93:95:85:81:09:
8b:f0:b2:c3:55:a2:8f:2d:ec:c2:37:32:98:56:90:
21:f8:f7:07:2e:00:e1:8c:05:61:58:db:8e:89:73:
be:2e:be:6b:de:94:4e:8e:74:3a:cd:43:4f:ca:c2:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:0E:48:26:90:60:F0:F6:6E:F3:1B:D2:21:A8:19:49:C3:0B:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3166D7AC60411EFA1AB0A44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.34.0/24
Signature Algorithm: sha256WithRSAEncryption
73:76:5e:3f:ac:82:5d:8a:a3:2a:da:04:7b:8e:f3:fd:10:09:
14:ff:63:d5:42:bb:0d:51:06:6d:99:c2:2c:fc:d7:aa:f9:0f:
47:6a:15:8b:f2:9d:3d:d2:4f:a5:15:74:fd:6e:06:72:57:25:
8f:76:f8:36:d6:45:6d:4a:2e:48:ae:4a:26:9a:e3:4f:1a:b6:
dc:df:3c:8b:85:e3:4b:15:18:c2:a8:3e:fc:3b:ed:e6:16:5c:
04:9a:bb:bc:a2:92:65:7d:0f:98:de:36:fa:89:d3:d2:ff:19:
e4:d1:0c:21:a8:42:79:2a:bb:bd:cd:8f:e0:cc:f4:87:7d:bb:
e6:c9:c6:02:de:f0:54:cf:07:2e:32:e6:9f:d9:8a:dc:c2:7b:
e1:fc:b5:e7:42:4d:82:fc:e2:fc:1f:87:5b:92:ea:9c:82:f7:
c3:9e:5f:38:5d:74:da:cb:78:cb:ea:18:7e:9c:9f:37:0c:f0:
30:aa:44:66:74:68:9f:88:63:4a:a9:e7:99:3b:a9:b7:ab:a2:
eb:a0:0c:cb:8a:1d:65:48:9e:94:4d:b5:d9:bb:7c:96:e6:0f:
5b:46:29:07:0f:73:ab:49:4f:f2:e2:52:a6:51:45:5c:84:20:
91:69:d6:7d:64:30:18:30:04:a8:45:75:ed:03:70:e1:87:27:
01:8e:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:48 2025 by rpki-client