Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08F8516C62711EF942B2AA0762E951A.roa
File: F08F8516C62711EF942B2AA0762E951A.roa (raw, json)
Hash identifier: 7yUHyLP5uFaBrsuWD8KLPOU/5NFD2BL4n0WkplBwasM=
Subject key identifier: 81:E9:5D:8F:CA:64:09:D3:71:7C:58:82:53:E1:22:96:2F:9A:DD:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08F8516C62711EF942B2AA0762E951A.roa
Signing time: Sun 29 Dec 2024 21:00:31 +0000
ROA not before: Sun 29 Dec 2024 21:00:27 +0000
ROA not after: Sun 12 Dec 2027 21:00:27 +0000
asID: 17561
IP address blocks: 154.217.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77734 (0x12fa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:00:27 2024 GMT
Not After : Dec 12 21:00:27 2027 GMT
Subject: CN=6771b86f-cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:27:a6:fa:6c:ee:4f:c3:02:c1:bc:92:fa:
e6:b1:8c:30:8d:9c:af:aa:0d:c2:aa:61:f8:d6:23:
7b:00:69:69:4d:84:55:c9:db:ca:28:05:27:85:07:
fb:e5:4c:51:5e:39:4d:88:97:5b:3e:58:04:91:21:
9d:fb:dc:53:d3:a0:a9:4b:3a:e2:6d:44:2a:2e:32:
e7:79:a3:5a:86:85:db:0e:8d:83:50:a4:bc:d5:4d:
b2:14:6d:aa:ed:7d:e4:93:d7:44:fa:39:59:64:5b:
8d:1b:e5:76:94:ed:a5:a4:f3:b2:42:d2:10:ff:60:
ed:75:bd:77:36:e7:ab:11:2d:1a:6f:0f:dd:94:25:
b7:d7:cb:f8:2e:10:ac:ec:b5:9e:3c:5e:a5:2c:a8:
56:42:17:9d:fb:0a:79:94:41:06:af:2a:a7:5e:4f:
a8:a0:e6:8d:22:0f:bd:67:fc:dd:5a:c9:7b:5f:a3:
b6:81:bb:f8:6a:08:bf:4e:66:0d:f4:8f:39:99:63:
a0:7d:0e:01:5a:02:dd:c6:ae:92:9a:c9:54:a0:b4:
1a:39:71:1d:02:f4:cf:c8:f4:10:2f:27:01:0f:82:
30:3a:d9:bc:64:30:8c:c6:f8:cc:f1:94:55:a7:4a:
82:97:8d:f5:95:fe:50:46:8f:af:67:1e:7e:ed:0b:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E9:5D:8F:CA:64:09:D3:71:7C:58:82:53:E1:22:96:2F:9A:DD:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08F8516C62711EF942B2AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:42:3c:9d:dc:23:4b:85:dc:d7:ec:82:70:04:c8:86:45:cd:
f9:3f:dd:07:3f:6e:17:f1:7b:e9:77:af:b2:8e:48:a0:e6:97:
5f:d9:4b:d9:82:d3:e2:ae:33:32:70:e5:55:84:dd:01:30:1a:
b3:cf:6e:f4:9c:17:33:8f:70:a6:6a:37:22:43:f5:8c:77:75:
1a:81:cb:14:1d:62:07:4a:2e:fd:42:7c:31:d5:95:d8:e6:6c:
da:b2:1e:8a:70:27:b5:eb:97:1c:5c:13:34:2a:7e:88:30:4c:
a7:74:b1:2c:ac:54:a0:c7:c5:45:e6:71:32:23:cd:cd:fe:9a:
f6:fb:f9:7b:85:c3:cc:74:d6:e3:c9:0b:20:f4:81:06:55:2f:
5b:96:b6:c8:8e:53:a7:98:c4:3b:cb:0e:33:e1:15:c0:06:1a:
17:74:aa:b5:20:40:fb:e6:55:04:8d:c4:43:91:68:d4:e8:45:
f8:f1:ad:78:34:ef:ef:63:76:0a:97:ec:06:3a:e0:fc:ef:87:
42:d9:8e:20:61:08:9f:83:48:55:82:83:0f:9e:81:d9:7d:45:
0f:8c:07:36:29:88:33:3d:83:6a:b0:6b:e9:0a:2b:96:93:d0:
9b:cf:d6:07:b1:39:6e:0f:16:7f:d0:f9:de:d4:94:56:fd:3d:
eb:10:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:58 2025 by rpki-client