Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC4B5CC61011EFAD2E128F762E951A.roa
File: F2FC4B5CC61011EFAD2E128F762E951A.roa (raw, json)
Hash identifier: NnPPGJ/cYb4ZsAb7v0wmumvqnCvWwCyfYUM3oAMEpsI=
Subject key identifier: 99:03:8C:F6:FD:F2:11:73:4E:1B:9B:CD:AD:A5:F1:F4:E5:09:B5:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC4B5CC61011EFAD2E128F762E951A.roa
Signing time: Sun 29 Dec 2024 18:15:57 +0000
ROA not before: Sun 29 Dec 2024 18:15:53 +0000
ROA not after: Sun 12 Dec 2027 18:15:53 +0000
asID: 17561
IP address blocks: 154.217.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77542 (0x12ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:15:53 2024 GMT
Not After : Dec 12 18:15:53 2027 GMT
Subject: CN=677191dd-a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:8a:e9:48:56:95:39:95:9a:4b:74:89:08:
e3:4a:7a:7c:94:f3:f2:bc:cc:8d:6e:f2:bc:6f:02:
69:ad:f6:0d:e6:b7:f9:d6:ba:7e:f5:cb:6c:59:b4:
31:37:73:cf:22:d2:5b:0a:00:97:20:05:b3:58:20:
21:c2:63:e1:a1:b1:fc:5d:8a:ff:35:83:fb:8b:83:
76:a2:fe:8b:76:0e:b4:54:52:cf:9a:34:6f:fb:63:
37:6c:ea:37:8f:6e:dc:a5:bf:b5:38:c0:bb:a3:0c:
e0:ce:67:0e:2b:8f:59:c0:ce:a9:c1:33:5a:28:9b:
2c:75:7e:09:34:8e:ed:1e:4b:27:b4:8e:39:d6:42:
cf:d6:c8:a1:f0:3c:88:90:98:2b:53:15:af:d0:6c:
29:a6:e1:21:4d:37:62:6a:da:02:ba:e7:af:fa:fd:
53:4f:74:d5:3c:44:fb:b3:90:40:22:7f:5b:ae:61:
f0:1c:9c:db:37:21:79:1e:80:fa:4d:43:17:14:6f:
7b:a3:bf:3a:7a:65:76:c4:3e:ab:65:27:ec:3b:59:
e2:a2:a1:85:7f:6e:8b:e0:b8:74:21:62:04:61:71:
7c:eb:b5:d8:e7:e7:f3:0d:8d:ee:44:16:52:40:e1:
62:09:8c:60:f6:a1:d3:4a:ff:6d:d8:44:64:3c:4b:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:8C:F6:FD:F2:11:73:4E:1B:9B:CD:AD:A5:F1:F4:E5:09:B5:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2FC4B5CC61011EFAD2E128F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.86.0/24
Signature Algorithm: sha256WithRSAEncryption
92:16:c3:6b:16:90:ea:6e:9d:c0:4d:f8:32:31:ab:b9:df:57:
73:81:4c:5c:ab:43:fb:36:9d:bf:e1:80:ef:dd:29:0b:62:50:
ae:dd:f2:30:26:22:15:fb:c8:8e:e6:d7:09:9e:48:45:c4:2f:
b5:79:fa:cb:ad:d0:c6:db:bd:45:89:8b:6f:81:7c:36:4c:3c:
e1:0e:67:01:fe:50:46:60:cd:72:83:7c:f8:c5:f0:4e:61:26:
a3:10:a0:92:67:ae:81:e9:51:d6:db:a4:b9:15:98:46:a2:67:
88:63:6a:b5:7c:fc:52:83:88:d8:4a:e0:e5:fd:46:03:c8:c1:
03:da:8b:56:93:70:e3:71:2d:c4:76:a3:22:5c:f6:42:35:64:
d4:c9:7a:26:75:08:b7:2e:69:0d:1f:6b:a7:8d:87:39:cb:d8:
88:e8:5b:68:e4:5a:67:83:fc:49:d9:81:91:1a:5c:1c:02:9c:
38:aa:9d:5f:01:a9:35:5c:86:6b:f5:3b:6d:fa:0f:97:ed:ea:
15:cb:ad:bf:de:8d:a3:58:cd:cf:7d:9a:9b:db:f5:0b:62:0e:
d1:d3:3b:ca:ed:18:ef:dd:93:57:c7:57:e7:27:0e:f6:c0:91:
50:29:fd:85:ba:a3:94:73:50:99:e0:33:06:5f:ef:6d:10:91:
86:68:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:10 2025 by rpki-client