Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F221FCACC61C11EF9A39EB5A762E951A.roa
File: F221FCACC61C11EF9A39EB5A762E951A.roa (raw, json)
Hash identifier: HPhGDNQ4/Xr7lYeWHC3XlvlumG5EhgtrYjJzH90Jc7Q=
Subject key identifier: 38:65:BE:76:54:2B:18:00:91:29:26:AE:71:20:87:BB:2D:40:45:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F221FCACC61C11EF9A39EB5A762E951A.roa
Signing time: Sun 29 Dec 2024 19:41:50 +0000
ROA not before: Sun 29 Dec 2024 19:41:46 +0000
ROA not after: Sun 12 Dec 2027 19:41:46 +0000
asID: 17561
IP address blocks: 154.217.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77642 (0x12f4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:41:46 2024 GMT
Not After : Dec 12 19:41:46 2027 GMT
Subject: CN=6771a5fd-8658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:25:30:c9:03:8c:50:b3:ba:3a:73:19:be:
2a:3a:91:13:8a:77:85:ff:d7:54:76:5d:87:54:e2:
78:88:1a:79:80:d1:8d:f0:1d:5d:62:54:da:95:7b:
03:78:4a:11:3f:3a:25:7b:4f:c5:a7:60:08:8b:41:
cd:7d:7c:8d:b2:df:63:d5:58:f9:a5:b4:93:e3:1d:
f0:c3:14:8d:25:9c:18:73:c3:02:17:ce:6c:ac:84:
02:ba:47:a4:73:4a:f7:b4:57:dd:d6:46:af:20:c3:
be:c9:fc:62:5e:d4:8e:31:0a:fa:66:85:02:28:13:
8a:c0:93:c0:52:d8:91:bf:21:bd:8d:47:60:96:56:
1f:23:a5:df:4f:31:26:2b:0c:d4:39:c0:96:81:d5:
4c:61:15:e4:a0:4a:a7:d1:d4:5c:0d:3d:b2:13:bd:
cb:1e:36:e6:a7:6c:71:ce:3f:d5:5b:ba:58:6a:f3:
c4:8c:94:84:24:54:d3:90:7d:41:05:db:bc:ed:c8:
9b:0b:f4:ad:a8:2c:bc:aa:ac:7f:1d:bf:1b:39:40:
0d:99:bb:0b:94:1e:f3:59:81:0e:f0:aa:d4:d4:28:
64:33:4b:de:d1:c4:48:22:fb:c2:21:b5:0f:67:98:
a7:86:bd:31:5b:a6:0c:b5:bc:20:5a:b7:18:a4:37:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:BE:76:54:2B:18:00:91:29:26:AE:71:20:87:BB:2D:40:45:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F221FCACC61C11EF9A39EB5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.136.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:85:b4:77:77:0e:c2:21:29:ae:4c:69:5a:82:0d:44:7c:8d:
bc:fd:ac:05:6b:a8:60:3c:b0:eb:5e:dc:ab:34:53:db:60:73:
e7:6b:97:27:9b:35:a2:cf:23:6c:26:34:41:e5:99:37:93:f4:
18:89:e2:b3:2c:6a:dc:c5:82:d5:a8:ea:de:52:31:84:bb:33:
40:4b:bd:c0:8b:c3:c7:40:e8:47:42:33:df:1c:5d:a7:6d:15:
d6:de:4a:ea:43:be:1d:f7:cb:8d:db:03:95:40:f1:86:1d:e5:
58:49:58:06:7e:fb:05:9c:46:90:ec:36:43:fe:5b:3d:19:6c:
a1:db:ba:dc:1c:55:61:80:13:b8:fd:c8:e6:a5:cd:a0:59:61:
a3:a3:1f:cf:9e:e0:de:59:ea:0b:98:e9:ca:a7:d1:97:1b:f8:
63:1d:1f:e4:07:dd:61:95:18:73:c2:f8:d7:d2:df:a5:23:98:
93:d8:35:1b:55:72:fd:3e:bc:72:d2:26:21:98:e9:fe:0a:6b:
f9:f0:81:1d:de:6a:00:09:28:8d:2d:92:31:9f:dd:f2:df:0f:
90:62:ab:28:a4:ad:08:45:fe:10:8f:c9:21:36:fb:e2:17:6e:
34:5c:97:62:9e:8a:4b:bb:51:7a:be:e9:52:08:96:03:a6:18:
c0:3f:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:32 2025 by rpki-client