Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A13EA2C61E11EFA2517F67762E951A.roa
File: E3A13EA2C61E11EFA2517F67762E951A.roa (raw, json)
Hash identifier: Nlg3VqT5D+ISyv9tdcoIcmlbJTzPDVgUkYmaLt/STJM=
Subject key identifier: 81:BA:EE:16:F5:07:62:F8:C7:73:86:FE:90:E7:C1:F2:69:31:3F:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A13EA2C61E11EFA2517F67762E951A.roa
Signing time: Sun 29 Dec 2024 19:55:44 +0000
ROA not before: Sun 29 Dec 2024 19:55:40 +0000
ROA not after: Sun 12 Dec 2027 19:55:40 +0000
asID: 17561
IP address blocks: 154.217.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77658 (0x12f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:55:40 2024 GMT
Not After : Dec 12 19:55:40 2027 GMT
Subject: CN=6771a940-f597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:97:42:54:b6:3b:56:80:55:f8:b2:b7:5f:
3b:6e:05:23:ef:0e:01:21:59:1a:8f:e6:26:af:79:
e5:eb:69:65:b4:ac:84:6b:1e:4c:15:0f:c3:c4:3a:
ec:8c:a3:ac:f7:2b:29:fc:fd:4c:f1:24:89:8d:85:
ac:1c:8b:17:b4:7a:7a:ed:f3:e9:77:24:b0:a5:91:
7d:08:ee:bf:0b:22:b7:ee:ba:7c:4c:22:58:52:a5:
24:55:40:67:e1:2e:73:d5:03:34:5a:e6:78:3e:b6:
4f:9f:12:3a:2d:0b:e1:1c:c3:32:e3:f9:d7:69:ba:
16:7e:e0:8c:92:8c:61:9c:ea:16:b8:ac:2b:d2:53:
23:46:3c:d4:86:de:cf:4b:ab:17:f1:b1:25:d7:60:
b8:11:65:d5:47:4f:3d:32:ef:1a:7e:b8:6f:07:e2:
20:7d:b4:ad:4e:5d:d7:d3:9c:8d:d3:03:aa:57:61:
e8:cf:24:23:46:96:43:03:23:27:47:d5:c9:72:56:
39:d9:8e:03:c7:5b:a5:f5:03:2c:20:8a:31:07:e9:
4d:4e:8c:ec:95:c9:00:1a:1f:5e:87:32:98:4c:30:
1a:85:bc:c5:8c:9d:22:13:2f:60:27:38:2e:30:c3:
7c:5e:21:db:26:49:ea:da:db:de:0b:04:d2:5e:86:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:EE:16:F5:07:62:F8:C7:73:86:FE:90:E7:C1:F2:69:31:3F:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A13EA2C61E11EFA2517F67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.144.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1b:43:90:34:2e:6a:b3:08:06:cd:54:f5:5c:de:4f:5c:a0:
3b:4c:b6:73:09:00:09:24:c1:9d:23:f2:2b:08:58:da:80:9c:
4f:62:b0:64:0b:c5:76:e3:71:1e:d1:71:26:df:2f:99:c6:97:
fd:ba:78:5f:e0:84:76:e9:aa:31:27:77:d7:81:c9:e8:fc:cf:
c4:f1:cf:b7:83:cd:d8:a8:52:c2:7d:77:92:f7:33:30:e9:9a:
ff:39:19:f1:c6:07:cc:68:c1:be:e8:cd:ea:09:74:96:30:06:
3a:f5:b4:ca:27:18:8f:85:b7:19:2f:df:70:2c:8d:b5:cd:6f:
63:02:67:76:a5:7b:b6:0d:ad:07:b7:df:50:d9:dc:6c:37:c5:
d2:be:54:45:7b:19:96:22:65:7c:f3:ef:62:0c:37:b9:f6:3f:
4c:4b:38:15:90:50:78:d4:0e:03:41:71:af:75:ba:4a:a1:77:
bf:6d:09:ed:79:84:11:f5:b2:10:f1:23:ac:58:e9:c6:a6:da:
b6:35:70:dd:88:96:93:64:7e:5b:60:44:24:55:e0:a7:3e:82:
16:f7:05:f5:6c:27:d3:93:1a:42:49:de:ad:0e:85:d1:d4:9e:
3a:6c:26:fe:53:6c:64:4d:ea:67:ea:24:92:29:3c:48:50:d2:
37:c1:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:36 2025 by rpki-client