Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA46209AC61B11EF811B6C54762E951A.roa
File: EA46209AC61B11EF811B6C54762E951A.roa (raw, json)
Hash identifier: hf7Iz8mDAA1hF6bGkc4HZaOllSdSBjR91WDtN2f4S+E=
Subject key identifier: EC:33:9B:D6:FE:4F:E0:CB:C5:7E:08:E2:FD:6F:EE:8B:59:5E:51:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA46209AC61B11EF811B6C54762E951A.roa
Signing time: Sun 29 Dec 2024 19:34:27 +0000
ROA not before: Sun 29 Dec 2024 19:34:23 +0000
ROA not after: Sun 12 Dec 2027 19:34:23 +0000
asID: 17561
IP address blocks: 154.217.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77634 (0x12f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:34:23 2024 GMT
Not After : Dec 12 19:34:23 2027 GMT
Subject: CN=6771a443-d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:d5:fb:bf:c2:ad:cf:76:8e:f3:0c:7f:72:
2f:ba:d1:83:38:f3:22:b4:a8:a0:6a:95:83:39:82:
66:a8:06:15:a6:c0:9e:2a:24:01:7b:b4:0d:85:3e:
63:3a:d3:9d:18:9b:18:70:bb:cc:4d:9c:51:67:a0:
51:40:e1:0e:26:42:89:16:80:bd:06:19:7b:39:e5:
46:37:f6:ea:1e:d0:5f:88:56:25:02:19:56:8b:f4:
4a:73:41:1c:2c:c6:3d:97:f0:45:c2:1e:94:3a:c7:
9e:67:ae:3b:61:ec:56:42:bf:08:60:f6:e0:cc:3a:
33:88:be:fb:f9:78:fa:0d:2f:92:41:dd:83:f6:54:
09:a3:fc:63:9a:e0:c3:08:7c:ff:73:6e:40:82:51:
3c:30:f5:5c:cc:ab:7d:86:c0:0a:54:6e:85:2b:43:
cc:52:ee:10:ad:5d:31:3e:ab:ce:4a:64:48:22:42:
73:84:00:02:cd:53:3e:14:a5:2e:bb:0b:c5:49:9d:
81:a7:5e:9c:40:4b:a8:2c:e3:95:ea:ad:a3:c0:28:
03:9d:20:c9:a1:4d:c0:f9:fb:11:87:d8:13:f5:8d:
19:10:d6:6f:81:55:16:d0:43:4a:75:c9:e7:15:f7:
0a:ab:26:fe:96:a8:c6:5f:f7:fd:3c:da:88:b8:ac:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:9B:D6:FE:4F:E0:CB:C5:7E:08:E2:FD:6F:EE:8B:59:5E:51:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA46209AC61B11EF811B6C54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0a:da:61:52:24:82:6c:b5:ae:c4:0c:e2:24:59:be:e4:65:
e1:bc:4c:91:bd:b0:e8:0c:0f:e4:6c:42:06:6c:ba:38:1a:52:
68:95:f7:c9:6e:b4:8b:cc:2d:e8:10:c6:82:46:62:a0:c0:18:
fc:8f:9f:70:d9:d5:46:0e:fc:5a:d5:e4:c9:42:bb:53:c4:3c:
26:b1:46:0d:02:4f:37:d3:72:07:2e:eb:29:2d:3f:e6:05:21:
c3:0c:60:46:4f:25:b8:36:7f:46:08:52:e8:79:9e:52:aa:bc:
af:d9:ef:0a:2f:dc:4c:2a:12:4a:b7:74:f4:03:60:e0:2c:be:
25:6b:de:93:fc:46:ba:7a:98:5f:cc:78:66:68:20:b1:d0:ec:
99:48:96:c1:ef:c9:43:07:76:b7:e7:64:05:07:c3:ab:50:36:
5a:0b:cc:13:6e:7e:ef:1d:b0:12:1b:34:30:b0:fb:97:6f:7b:
9c:57:67:43:b5:6e:88:10:4f:ec:26:a4:7d:0a:25:47:af:7c:
17:0c:81:70:38:2f:01:84:d7:a0:7c:9b:37:93:cf:44:7b:33:
fa:2b:21:64:92:22:39:65:ff:aa:19:c8:91:00:11:25:7d:46:
b4:b1:a1:65:b2:20:ea:7b:36:00:f9:55:a4:28:99:42:19:1b:
0c:58:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:56 2025 by rpki-client