Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D688E5FAC61711EF8C50ECBA762E951A.roa
File: D688E5FAC61711EF8C50ECBA762E951A.roa (raw, json)
Hash identifier: ZQ6UF0u8amsKrLfcXc5tzGpbmJPL2UVUs0mGoSBKIH0=
Subject key identifier: A4:51:DE:F0:7E:AA:C7:F6:11:4A:D1:7D:AC:59:C3:5E:F5:62:64:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D688E5FAC61711EF8C50ECBA762E951A.roa
Signing time: Sun 29 Dec 2024 19:05:16 +0000
ROA not before: Sun 29 Dec 2024 19:05:12 +0000
ROA not after: Sun 12 Dec 2027 19:05:12 +0000
asID: 17561
IP address blocks: 154.217.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77600 (0x12f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:05:12 2024 GMT
Not After : Dec 12 19:05:12 2027 GMT
Subject: CN=67719d6c-87f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:54:ca:81:be:5c:41:38:86:59:e2:91:6f:
f8:10:02:11:18:a1:f3:f1:b1:c0:a3:d1:4a:3d:1e:
e3:12:47:a2:c0:d4:4e:cb:bd:73:d3:cc:db:8d:74:
2d:f9:df:be:a2:82:3a:51:be:e8:ea:4d:41:34:32:
42:66:57:4c:46:b6:01:bf:94:a3:51:b3:2b:22:ae:
03:19:fa:29:8f:70:48:a6:b1:e5:d1:25:cd:3f:ee:
b6:5d:54:dd:cb:3b:9a:92:0a:39:33:93:eb:b2:8d:
4c:15:7a:cb:43:ed:fc:66:6a:f6:b2:f1:0f:5e:47:
31:3d:2d:7a:2d:d1:10:38:42:a1:1a:b9:70:de:12:
4d:d1:5e:20:58:1f:65:4c:fc:96:95:2e:e3:01:9e:
46:59:5c:4c:f5:f5:e2:62:4a:05:83:fd:80:b8:54:
21:b7:8a:8d:0c:6c:87:27:dd:7b:65:41:9d:84:16:
e6:5d:68:ae:b4:cc:b6:b4:40:fa:4e:75:09:c8:c3:
c0:d7:b3:c1:37:64:f4:5f:09:c1:7b:1d:5b:b1:21:
94:bd:18:eb:8e:05:5e:2d:fa:47:16:30:76:cf:d0:
5f:36:34:62:94:53:50:75:8a:87:53:bc:41:2a:b3:
0e:68:0b:86:cf:1e:a7:4c:2b:8b:02:8f:95:15:59:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:DE:F0:7E:AA:C7:F6:11:4A:D1:7D:AC:59:C3:5E:F5:62:64:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D688E5FAC61711EF8C50ECBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.115.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3a:49:c0:3a:08:be:41:44:ca:e5:00:f5:3a:a1:29:2d:55:
d4:96:d0:c5:5b:16:8e:7a:ad:8e:40:a9:3c:46:75:02:af:88:
e5:ca:e7:39:93:ce:5f:5e:ce:b5:df:74:e0:88:c5:07:f4:d7:
41:a2:4c:86:ff:94:3a:3f:40:75:30:a1:1a:14:dd:7c:0b:60:
df:41:08:20:f4:39:cf:42:2a:5d:ed:90:50:4f:72:3b:1e:43:
7a:1b:f8:cd:8c:61:43:7e:b9:c8:55:4a:d3:c7:8f:f7:8c:75:
4f:4c:82:4f:81:8d:2b:e6:28:92:cb:a3:95:ae:3b:a5:c9:52:
16:46:4d:4b:b3:e6:87:a8:ad:d4:3e:7e:5d:f9:59:ce:10:2a:
78:43:7a:c2:03:b3:c6:ff:80:07:e1:2a:99:4e:7d:4f:06:96:
4c:6c:f6:fc:01:36:80:4b:55:c7:62:ad:11:a3:b4:ad:ad:fa:
a1:87:b8:17:91:a0:b3:0d:42:23:c1:e2:b2:a0:f9:f5:25:62:
77:e4:36:6a:85:0a:10:db:1f:f9:a5:37:1b:14:09:d4:90:37:
3e:b4:82:e3:89:ef:1a:fa:a1:e3:ef:40:04:7d:80:a4:8e:c8:
5b:2d:b4:7f:c2:d9:36:2e:09:97:4a:75:f7:23:91:cf:e1:cd:
0e:c6:de:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:23 2025 by rpki-client