Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCC735AEC62A11EF88BA56B1762E951A.roa
File: CCC735AEC62A11EF88BA56B1762E951A.roa (raw, json)
Hash identifier: Ha3GDtQhTSE3wuIUxzGeBhLg64AxIRdleoTjbX3nY8U=
Subject key identifier: 84:86:9B:03:1A:AA:33:3E:0C:AD:CB:E8:A1:7C:0B:1F:9E:98:6C:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCC735AEC62A11EF88BA56B1762E951A.roa
Signing time: Sun 29 Dec 2024 21:21:00 +0000
ROA not before: Sun 29 Dec 2024 21:20:56 +0000
ROA not after: Sun 12 Dec 2027 21:20:56 +0000
asID: 17561
IP address blocks: 154.217.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77758 (0x12fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:20:56 2024 GMT
Not After : Dec 12 21:20:56 2027 GMT
Subject: CN=6771bd3c-22d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:3e:24:9d:8c:05:d9:8e:4c:e4:8f:e0:44:
6e:fa:21:66:43:69:b9:6a:50:7c:53:f6:8a:4b:e5:
3d:cf:c8:6d:69:8b:a9:b1:f6:7e:97:70:51:8c:7c:
ac:24:92:c8:46:ae:cc:e2:17:a8:18:15:4f:bd:68:
e0:43:d2:71:b5:93:da:91:81:55:77:42:55:4c:8c:
ae:c8:f2:34:de:fd:56:c6:b6:1a:52:b5:6d:8b:d7:
cc:38:d7:9b:45:31:06:a8:da:2e:ab:21:38:7e:a8:
6b:ad:64:86:d0:ca:02:86:ad:9e:f1:37:35:69:7e:
de:b4:40:e4:9b:0a:30:e1:b2:30:04:65:7b:d8:ac:
24:d7:a8:8a:d3:53:f1:8f:9b:79:3e:1b:23:fe:01:
0f:a9:9d:66:fe:1a:f4:64:54:70:be:fa:31:8b:ec:
7f:32:6a:c2:6a:bc:fc:fc:58:d2:d6:f8:fc:b3:30:
83:a6:6f:ab:5e:4f:9d:19:2b:25:88:ca:56:81:6d:
84:90:63:1e:26:d0:5b:e7:e6:ee:b1:42:bc:91:25:
58:a2:55:36:7b:f0:98:ba:62:50:9c:17:b9:a5:b6:
2b:62:67:fd:c1:37:24:63:cb:a1:ad:6e:ec:82:60:
04:9e:a4:05:fb:57:3c:34:e3:17:58:f6:df:99:3f:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:9B:03:1A:AA:33:3E:0C:AD:CB:E8:A1:7C:0B:1F:9E:98:6C:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCC735AEC62A11EF88BA56B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.194.0/24
Signature Algorithm: sha256WithRSAEncryption
17:63:f2:9b:44:eb:4a:bf:b7:ea:82:89:81:cf:81:12:4e:43:
ea:6d:ac:ef:56:16:06:a3:ef:c1:df:7c:47:62:eb:b3:30:ad:
64:12:21:63:d8:bc:1e:1f:a0:4f:99:1d:81:42:21:b4:1e:f8:
be:3c:0b:5c:7c:5b:7a:bf:90:3c:c7:01:d3:1a:8b:a0:cc:38:
e1:69:d7:5d:e4:2a:97:00:f1:58:06:78:d6:bd:c6:fb:f3:e4:
84:3e:4b:8c:e1:aa:fd:d0:40:ff:1e:a4:89:b1:34:29:da:d7:
19:da:77:b2:6f:40:5a:1f:73:58:2e:b7:71:39:1f:1d:bd:d9:
3f:07:13:b5:b9:27:c1:a2:b9:44:52:8d:40:28:67:c1:26:17:
db:79:dc:9a:0d:cd:17:9a:2e:64:25:5a:a1:e6:0f:95:83:e7:
46:34:80:1f:af:15:72:1b:5b:52:c1:10:b5:76:2e:4b:2e:f4:
ff:b4:60:44:0d:46:5d:bc:c7:60:86:29:54:1b:d6:6b:8b:85:
1e:1c:f4:17:69:6a:97:fa:44:34:c1:9a:e1:59:3b:57:18:b5:
c9:1b:64:fd:37:e9:0f:6d:7c:71:1e:1f:0f:28:99:0a:d7:e4:
e6:13:3c:85:3c:1e:89:98:ba:85:92:39:41:f6:6a:6c:5f:b4:
00:fc:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client