Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D30BCC0CC61311EFA8AA68A1762E951A.roa
File: D30BCC0CC61311EFA8AA68A1762E951A.roa (raw, json)
Hash identifier: aNLfb8VQrhPYiBaQ/+vdY5DrXJH8azSDXb9In1f2hXE=
Subject key identifier: 71:1F:84:EE:12:70:A8:60:3E:D9:78:5F:8F:D2:12:D1:42:1F:77:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D30BCC0CC61311EFA8AA68A1762E951A.roa
Signing time: Sun 29 Dec 2024 18:36:32 +0000
ROA not before: Sun 29 Dec 2024 18:36:28 +0000
ROA not after: Sun 12 Dec 2027 18:36:28 +0000
asID: 17561
IP address blocks: 154.217.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77566 (0x12efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:36:28 2024 GMT
Not After : Dec 12 18:36:28 2027 GMT
Subject: CN=677196b0-4901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:73:b7:37:23:5b:7e:9e:6d:9f:1a:5f:a1:
ef:26:86:3b:52:9b:da:cf:f2:6c:11:d4:69:b3:cc:
94:25:f3:1c:96:f0:7e:76:b3:0a:e6:d5:49:19:0e:
75:22:58:01:ab:4f:94:39:2e:7a:37:54:eb:81:4f:
f6:b8:43:fb:2c:75:c7:a6:e5:44:4e:19:83:71:85:
7a:2f:25:0d:0a:09:42:59:26:56:77:84:d4:f5:14:
c1:fa:f5:c7:82:f5:47:17:27:73:39:98:b2:7f:a6:
d1:86:11:18:57:46:a9:4f:7b:8f:9b:b8:a6:58:51:
19:3b:23:39:23:04:1b:30:50:79:da:2b:0f:13:22:
3e:68:e4:c7:23:39:87:43:15:d0:c7:12:27:56:b2:
14:ea:b6:81:08:77:fd:6b:c6:32:c4:df:db:73:ca:
82:be:a9:18:74:2a:c5:2a:83:7c:ac:d5:bc:e3:60:
a5:7d:41:d4:7d:ea:b6:69:e6:e4:40:37:68:b1:7d:
6a:70:c0:f5:f0:be:d8:99:e7:51:74:6c:eb:1a:df:
54:ff:c9:16:b8:26:56:70:ab:e3:be:87:f6:3c:60:
79:c1:49:2a:ce:04:3d:6e:89:3e:45:a4:0e:93:44:
4c:09:fb:68:9c:db:10:04:7d:9b:d5:7f:6b:5a:9b:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:84:EE:12:70:A8:60:3E:D9:78:5F:8F:D2:12:D1:42:1F:77:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D30BCC0CC61311EFA8AA68A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ff:31:5a:b2:b0:7e:b5:e3:b5:34:a3:78:ef:49:6e:91:8f:
3a:93:20:d7:0a:8d:4a:12:af:15:98:7e:b4:9a:2f:b2:17:c6:
07:84:cb:e0:17:f1:1d:8a:df:a9:89:fc:c5:9d:8d:bf:3a:34:
0c:43:bc:17:b8:be:da:92:84:ee:f9:d5:a0:01:a7:f5:0e:f7:
98:e6:83:61:55:d7:b9:19:da:52:52:41:40:19:71:cc:8a:23:
6d:ab:cf:a0:54:5e:71:03:cd:3b:0e:1c:04:ed:b0:0c:f9:10:
8c:85:d0:89:36:68:36:c3:3b:85:97:b5:c9:55:db:99:ee:f2:
4d:1d:6b:6d:ee:bd:55:5b:b7:cb:ca:67:88:0a:33:87:6d:12:
4e:1b:bc:e7:70:63:15:da:f9:1c:96:9d:43:a0:bc:c4:f6:c0:
3a:db:40:4d:b9:00:dc:6e:67:07:5b:c6:9e:4f:fe:9a:03:4b:
c8:1c:78:7a:d7:57:72:68:ee:d5:4a:67:11:a4:77:7f:b0:ca:
bb:48:37:ad:ee:8f:9e:16:43:c2:ac:6c:c2:c1:64:7f:c4:6c:
c8:ba:c9:6b:7f:c5:7f:49:98:f8:75:6b:75:8f:bf:88:c8:6d:
07:c2:09:78:98:93:55:a3:39:aa:29:f3:49:8e:df:21:be:18:
96:96:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:06:50 2025 by rpki-client