Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98CDB84C61411EF8C57ADA7762E951A.roa
File: C98CDB84C61411EF8C57ADA7762E951A.roa (raw, json)
Hash identifier: t3JP4AWOuSV6/8Ww3lZHdbKaKeSJYdm6nXsPYNqDXyo=
Subject key identifier: 9D:33:68:28:89:CD:0E:AA:45:7D:AC:18:12:03:37:28:D1:F8:85:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98CDB84C61411EF8C57ADA7762E951A.roa
Signing time: Sun 29 Dec 2024 18:43:25 +0000
ROA not before: Sun 29 Dec 2024 18:43:22 +0000
ROA not after: Sun 12 Dec 2027 18:43:22 +0000
asID: 17561
IP address blocks: 154.217.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77574 (0x12f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:43:22 2024 GMT
Not After : Dec 12 18:43:22 2027 GMT
Subject: CN=6771984d-e815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:41:50:3d:b2:d6:26:e2:af:9a:b4:2f:1b:
1e:bd:a9:11:7d:b1:f6:88:54:dd:33:14:ea:e4:ed:
a8:e6:29:e5:46:8a:1b:64:4f:00:a0:55:46:bb:e1:
50:af:5c:ec:61:eb:d7:f9:9d:fc:11:01:69:46:54:
63:66:f3:32:da:ac:27:00:e3:55:89:f8:ea:c8:8e:
11:de:86:9b:07:29:a7:ce:3d:d1:e7:5b:b2:49:e3:
d5:e9:ef:a0:18:d6:be:27:62:08:b5:bd:fe:1a:a1:
97:14:b2:49:d2:77:ab:1c:d7:76:03:0c:50:8e:ca:
57:65:e0:9d:34:47:33:91:88:57:b4:82:c4:40:85:
a5:ab:56:45:4c:a2:09:ae:72:74:a0:91:08:3b:2e:
50:4b:bd:e9:e2:c0:78:d4:4d:e4:da:fe:7a:cb:76:
d2:1f:61:e6:91:db:a5:bf:06:83:60:72:f1:dd:2f:
3d:7b:c7:e1:ed:f4:77:c7:8c:99:d1:25:cb:a9:fc:
c6:9a:c0:f4:f4:e6:64:de:ce:88:09:13:83:54:a1:
a4:c8:9a:e4:57:30:e5:7a:47:40:90:2d:e7:3c:73:
4a:3b:46:b2:57:bc:8a:90:d0:f9:31:84:57:c2:d4:
a5:0c:91:a6:77:f7:65:e0:a9:5b:1e:c1:cb:90:6c:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:68:28:89:CD:0E:AA:45:7D:AC:18:12:03:37:28:D1:F8:85:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98CDB84C61411EF8C57ADA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:28:f6:99:7e:33:ef:0f:e8:a2:38:46:a6:47:b5:57:c9:1c:
8a:12:1e:17:37:18:28:6b:36:ee:3b:cf:f9:70:6a:fb:60:28:
44:c1:cb:1c:e6:d7:10:75:46:3e:60:ba:cd:2e:32:8e:e6:cf:
e8:ab:3d:cb:68:f4:e3:98:00:7b:2c:71:30:b6:b3:cc:aa:ed:
e5:20:33:44:38:d1:a1:38:44:ab:9d:52:08:0f:1a:40:2f:59:
fa:3e:70:3d:ce:79:d7:bf:88:bd:37:24:5a:46:c8:17:04:a2:
30:13:8f:9a:37:0c:77:c6:13:e2:af:ca:fb:49:8e:07:45:d0:
66:9a:14:5f:3f:a0:38:72:2f:70:4f:90:5a:4a:46:2b:bd:21:
82:1f:7f:4a:20:f8:10:2c:07:42:aa:11:38:52:38:1b:84:3e:
1e:fb:ed:bd:53:6e:72:de:b4:fe:67:94:1d:fd:e9:cf:0a:07:
f2:82:3a:1d:48:6a:e4:c0:51:61:04:1a:5f:54:f6:0a:07:91:
5e:ba:03:07:8a:3c:32:bb:f3:c2:79:05:c2:59:ba:46:6c:ee:
3a:2e:49:2b:0e:36:06:48:17:cf:39:36:56:6f:92:b7:2e:ad:
f2:a1:fe:ce:e8:92:14:42:54:4b:a4:65:e7:e8:0d:5e:5c:2c:
b0:d9:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:20:58 2025 by rpki-client