Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB20D5C4C63011EFA206A657762E951A.roa
File: CB20D5C4C63011EFA206A657762E951A.roa (raw, json)
Hash identifier: FeDjgxetKIWasfUxsXudZ8T2l9nmekvGObCmXnkTsd8=
Subject key identifier: D5:50:4B:A3:8A:91:BA:C6:E8:AC:DA:3B:AB:C9:30:CC:97:F3:BE:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB20D5C4C63011EFA206A657762E951A.roa
Signing time: Sun 29 Dec 2024 22:03:54 +0000
ROA not before: Sun 29 Dec 2024 22:03:50 +0000
ROA not after: Sun 12 Dec 2027 22:03:50 +0000
asID: 17561
IP address blocks: 154.217.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77808 (0x12ff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:03:50 2024 GMT
Not After : Dec 12 22:03:50 2027 GMT
Subject: CN=6771c74a-038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:00:ba:9b:07:f1:7d:51:04:85:ee:0d:4c:
ee:62:81:8e:96:5e:18:b3:3d:e4:f5:e8:6f:69:2f:
9a:da:57:38:2d:de:8d:df:82:07:84:72:85:9c:46:
21:99:85:5b:ab:c2:f7:ff:56:6a:fb:31:fc:06:2f:
ef:7a:41:dd:1e:1d:27:d2:33:e5:30:a5:f6:5e:e0:
21:78:cc:0a:49:88:7b:42:fd:16:04:73:62:d8:75:
99:f3:65:b3:03:26:c6:e9:dc:2a:85:5c:99:45:4e:
c9:a4:00:f3:7b:28:3e:a2:ca:69:36:9f:d4:d6:6d:
57:55:76:9d:cf:f9:4c:5a:0e:d8:a4:08:54:e5:0f:
40:d6:f1:e4:8e:ed:e5:53:de:b9:65:a1:5e:53:5d:
5c:cc:df:b9:c6:da:70:1b:44:39:94:26:6e:af:40:
22:82:5b:3b:b8:b4:c2:02:24:8a:40:6d:64:6e:40:
dc:d2:1b:db:e7:31:04:24:3b:89:14:6d:f6:52:f9:
fc:15:e0:2a:db:07:0a:71:ea:f3:5f:ad:6b:d4:0f:
66:5e:9c:42:ed:00:de:9e:b7:5c:9c:17:46:50:26:
7b:9c:dd:89:8f:0c:36:54:e4:09:40:65:43:af:67:
09:10:23:46:49:31:62:0e:9c:e8:70:ca:22:2d:a9:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:4B:A3:8A:91:BA:C6:E8:AC:DA:3B:AB:C9:30:CC:97:F3:BE:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB20D5C4C63011EFA206A657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
95:33:31:af:55:77:01:3e:95:02:c6:cf:36:89:6e:c7:ef:d6:
df:45:3c:b6:9f:3b:98:d9:d3:d3:b1:cd:93:22:15:c6:12:d0:
19:0b:24:b0:4c:55:80:60:1e:00:ea:d0:8e:34:c7:5f:a6:13:
6e:6b:39:11:69:a8:ff:3e:7b:7b:be:d2:53:b8:d0:94:94:e9:
a1:85:91:8b:84:b3:1f:69:a0:59:e2:e2:42:4b:ac:7c:a4:2a:
c7:c8:f6:a3:bd:90:1a:43:1f:81:7a:25:00:00:2f:ee:56:07:
d7:c8:c7:a6:8f:ed:49:e6:25:ce:d0:0f:61:5f:39:a2:76:f8:
ff:ba:96:3d:87:e9:70:e9:50:76:b5:75:0b:b6:cc:a2:64:12:
b1:34:2e:ab:bc:39:2c:7a:98:39:2a:29:46:91:f1:11:4f:4e:
8a:9b:43:0c:20:54:b6:6a:1d:77:25:18:83:08:ab:93:6f:56:
08:43:58:e9:69:f1:07:fc:4d:fe:0d:f8:de:8d:82:f2:d2:3a:
23:a2:3c:7b:00:d8:f1:26:d0:c6:d4:99:43:bd:ca:d0:01:ac:
3f:36:f6:03:41:b8:ec:12:64:ad:f6:87:c8:05:29:89:7c:03:
f9:29:86:7d:62:8a:70:91:d2:2b:3b:db:05:22:ed:78:5e:e5:
8a:c0:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client