Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56F997AC61811EFA76373BF762E951A.roa
File: C56F997AC61811EFA76373BF762E951A.roa (raw, json)
Hash identifier: KizrAAfw0DbuWZdsDRvySQDeLcD2YuKX3yS8W7WWaxU=
Subject key identifier: 04:28:EF:FD:9C:8B:E9:B6:D0:C4:C4:E8:36:7B:AF:CF:5D:15:50:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56F997AC61811EFA76373BF762E951A.roa
Signing time: Sun 29 Dec 2024 19:11:57 +0000
ROA not before: Sun 29 Dec 2024 19:11:53 +0000
ROA not after: Sun 12 Dec 2027 19:11:53 +0000
asID: 17561
IP address blocks: 154.217.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77608 (0x12f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:11:53 2024 GMT
Not After : Dec 12 19:11:53 2027 GMT
Subject: CN=67719efc-3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:76:88:36:20:95:27:f5:f2:92:a7:c5:7c:
55:0d:9a:5d:04:d7:78:b9:c3:42:1f:e3:e2:4f:84:
bf:1d:7f:43:2a:53:f8:bf:c3:be:77:73:0a:60:b2:
e5:ad:b9:04:cb:2b:33:be:fb:d0:72:60:4f:f1:72:
48:a2:e3:4f:9e:b8:50:f4:ed:c3:6d:ed:45:68:42:
bb:9b:07:55:06:39:73:2f:fe:0a:b2:4b:ae:4c:9c:
78:40:95:e8:60:e3:b1:af:44:74:f7:ae:95:ef:a8:
de:bb:7a:3f:74:ae:bf:5f:7c:a0:c4:47:ae:7c:8a:
46:4b:f3:4c:9e:99:4a:9d:ca:3e:83:46:40:5b:39:
b8:3f:58:c2:7e:4f:40:03:32:80:b7:18:53:49:e1:
3d:66:3c:54:17:e6:9f:8f:19:5c:10:5e:f6:a4:d9:
95:57:6a:fb:ec:c1:9e:43:5e:ab:a9:21:b5:09:44:
6d:79:ba:e6:69:f5:90:0d:aa:6a:b9:11:15:6f:ea:
e8:da:22:b1:35:12:69:5c:21:b6:15:d7:cd:f8:e3:
99:69:e7:f6:b3:fb:a6:b5:3b:8b:15:0a:f0:4a:6b:
98:8c:74:e9:dd:9e:8b:fb:20:d2:00:ea:85:6a:ab:
41:92:6a:29:79:80:a7:17:7e:cf:9f:e7:bc:12:e9:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:EF:FD:9C:8B:E9:B6:D0:C4:C4:E8:36:7B:AF:CF:5D:15:50:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C56F997AC61811EFA76373BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b4:9d:b7:c9:39:6d:9a:12:c9:85:de:fb:11:33:6f:b7:e1:
f3:66:79:ae:6a:d5:ff:69:ce:1e:cc:bd:66:60:f8:a4:de:1e:
72:74:3e:21:c1:2d:5f:41:e4:57:93:b1:2f:cf:7d:db:1d:8b:
31:bc:89:66:fd:81:bc:96:77:e2:79:89:0d:7c:94:3e:56:8f:
9e:18:c0:2c:d1:ac:d6:1c:32:ad:ee:87:28:97:d4:c3:c9:14:
98:87:e5:33:85:d2:97:b1:75:cd:6d:0d:b1:3c:25:41:e4:73:
da:59:7b:ae:b6:50:9b:45:ca:6f:f8:0a:9d:1a:f2:f1:9c:c7:
de:ec:03:12:f7:88:61:02:6a:63:1d:21:6f:90:42:89:54:b5:
2b:df:20:76:fb:c1:0b:d1:88:07:84:1e:e2:24:ba:08:b2:a8:
17:82:2f:bc:90:76:6d:4d:27:6a:87:80:70:10:f7:57:90:50:
1e:9a:02:11:45:22:41:56:3a:cd:93:cd:6c:5a:3e:21:43:ee:
24:46:05:a1:5c:ea:79:f2:b7:b0:d5:3a:bc:bd:76:f3:7a:42:
aa:09:b9:1f:f5:e1:ae:35:54:fa:57:6d:2c:34:63:0f:c6:3e:
9f:13:c3:ea:55:f3:a2:9c:4c:e4:0f:61:6d:a3:66:3f:05:dc:
01:ad:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:41 2025 by rpki-client