Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE226802C62211EFAA9D307F762E951A.roa
File: EE226802C62211EFAA9D307F762E951A.roa (raw, json)
Hash identifier: A24FdKlfFZebSf/wBFEM5+9hwhOOZOoH+4+ymDMRCFc=
Subject key identifier: 40:0B:22:CF:FC:D1:DE:C4:C0:0D:EA:82:54:96:B8:D3:EB:7D:C2:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE226802C62211EFAA9D307F762E951A.roa
Signing time: Sun 29 Dec 2024 20:24:40 +0000
ROA not before: Sun 29 Dec 2024 20:24:36 +0000
ROA not after: Sun 12 Dec 2027 20:24:36 +0000
asID: 17561
IP address blocks: 154.217.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77692 (0x12f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:24:36 2024 GMT
Not After : Dec 12 20:24:36 2027 GMT
Subject: CN=6771b008-24dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:16:f1:8a:cd:08:f5:40:ae:3d:8f:6e:4b:
de:b6:ec:55:83:18:87:8a:d8:f3:7b:34:9a:e8:c5:
ae:0c:89:8d:a9:94:a3:71:37:aa:96:65:12:34:07:
d5:1e:16:76:f7:41:fb:2a:6b:c2:b0:eb:09:97:e0:
a4:bc:76:02:f1:01:87:e8:23:08:fa:c4:d5:63:39:
c8:7e:59:20:af:4d:da:a0:34:91:be:fa:19:e6:b5:
d0:d2:2e:1e:f9:71:c7:fc:61:f3:a9:fa:6a:75:2a:
08:3a:82:27:48:1a:2d:2e:37:f3:d8:4e:ce:fb:16:
ea:63:70:13:a3:c5:2a:8c:31:9d:a3:10:75:f7:6a:
23:03:40:4d:3a:74:9c:39:ae:bb:86:6e:43:72:89:
64:cc:2f:63:ba:a7:8d:b6:b8:48:a1:c0:89:19:2d:
be:87:63:32:28:e2:ed:de:73:32:05:f9:b2:35:ad:
c2:35:b9:d7:92:9c:94:6d:35:38:1d:65:e6:01:09:
3e:cb:32:78:ec:2f:1c:49:7e:a0:2f:c8:b2:63:27:
d7:a3:0a:8e:bb:d8:bc:73:f5:8e:c2:bc:d0:8f:ab:
a7:05:96:90:69:d8:e1:0e:4c:c8:d0:c4:27:d9:0f:
ce:b0:19:3f:43:ca:d7:82:8f:06:ad:c6:ab:c3:61:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:22:CF:FC:D1:DE:C4:C0:0D:EA:82:54:96:B8:D3:EB:7D:C2:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE226802C62211EFAA9D307F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.161.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f3:e7:3f:40:48:72:02:18:df:a0:d5:79:59:11:14:e0:1c:
17:2c:00:e3:b9:73:c6:31:aa:d1:9d:af:af:d7:4c:c1:71:31:
d1:5b:e5:e4:b1:3a:04:63:bc:5e:25:32:06:5c:2c:20:d2:61:
b2:e6:4c:86:7a:55:45:74:c8:17:29:03:58:f8:88:5b:1f:aa:
9f:af:bb:91:23:1e:0d:f4:7e:ed:02:f1:4e:92:85:36:04:8a:
87:d3:75:66:20:0e:85:c0:ee:ef:05:69:a8:be:b9:06:b2:c1:
41:a6:b3:66:39:de:f5:a8:1f:9b:1a:9e:73:3b:5e:8c:3d:eb:
1f:7c:a4:2b:13:da:da:da:40:a7:ba:89:64:37:3f:42:34:fb:
73:5f:9b:49:db:1e:16:77:d0:18:1b:47:de:ff:1b:46:ac:52:
25:58:34:45:78:f8:a1:3d:26:9b:a0:fa:77:75:64:8c:13:30:
e2:f9:5c:cf:6b:93:43:57:16:e6:bd:c9:f1:10:50:6b:01:d0:
20:62:ac:be:f2:70:2a:c9:66:9a:d2:91:f0:5b:c8:9d:28:96:
66:5c:19:ab:d4:de:3b:5e:be:ce:16:4c:26:21:2b:19:2a:c4:
9c:6f:f6:e5:10:38:0f:15:05:7e:74:d8:31:9d:bb:b3:c2:16:
c5:bc:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client