Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F831E7B4C63611EFB44F087E762E951A.roa
File: F831E7B4C63611EFB44F087E762E951A.roa (raw, json)
Hash identifier: ngj0/S2igIPYPQA4oCA+PZlzDyNylWgDQgyw+IKK578=
Subject key identifier: AB:0D:70:D5:E3:4F:E6:5C:40:2A:63:0F:AF:85:00:7A:CC:24:1B:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013023
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F831E7B4C63611EFB44F087E762E951A.roa
Signing time: Sun 29 Dec 2024 22:48:07 +0000
ROA not before: Sun 29 Dec 2024 22:48:03 +0000
ROA not after: Sun 12 Dec 2027 22:48:03 +0000
asID: 17561
IP address blocks: 154.217.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77859 (0x13023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:48:03 2024 GMT
Not After : Dec 12 22:48:03 2027 GMT
Subject: CN=6771d1a7-abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:52:c5:a2:23:83:88:d1:e3:1e:bf:59:8c:
67:d0:da:9c:38:3e:32:a2:e3:91:85:46:0f:56:08:
1c:81:4a:d1:e9:94:8e:f3:13:e7:fd:6c:14:57:73:
ef:62:b5:cc:c9:f3:e1:45:02:56:fc:7f:da:e6:f1:
8e:56:2d:aa:f1:70:c8:f7:52:0e:79:e3:74:50:c8:
00:b5:b0:5d:2b:92:40:94:e7:af:b3:1c:4b:f2:ed:
e2:6f:51:cf:01:7b:6c:a8:df:d4:41:77:a4:8c:c0:
33:4d:f7:a6:c9:25:b0:f8:fc:06:84:c5:e1:04:c9:
88:bd:ed:3e:e9:48:53:61:de:a1:2a:26:4b:19:d4:
f2:59:7f:04:93:08:2b:cc:88:83:68:04:04:a4:b5:
b0:ab:60:91:78:f6:ee:b6:cb:60:6f:16:4d:a2:10:
b7:4b:dd:ca:97:31:12:57:40:3b:1e:bc:b8:89:a2:
de:77:04:35:f1:fa:28:17:67:55:12:c0:e5:8b:8a:
d9:af:2a:c1:38:17:a5:b3:75:d3:49:bf:b8:5d:c5:
a5:4d:0f:a0:bb:33:f8:a9:b9:98:9f:89:fb:ea:87:
47:72:31:32:46:85:4a:85:e6:7d:cc:38:ac:f9:48:
bc:76:f3:96:3f:da:6d:25:a7:91:e3:a2:65:36:4d:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:70:D5:E3:4F:E6:5C:40:2A:63:0F:AF:85:00:7A:CC:24:1B:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F831E7B4C63611EFB44F087E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.245.0/24
Signature Algorithm: sha256WithRSAEncryption
61:77:50:62:d2:4b:bb:fc:cd:8e:06:a3:22:64:24:57:fb:d8:
e5:5e:a3:4f:cd:6e:99:d8:0f:0a:0d:f0:ee:4c:10:51:a2:ed:
a6:4c:f5:ef:88:91:40:2c:34:15:d6:ca:eb:db:a8:e1:d7:91:
ba:25:b1:03:c2:77:a0:8b:31:d2:89:9b:a1:dc:c9:fb:f8:bd:
d9:b5:07:b7:a0:7e:c5:0c:02:46:13:f1:64:d5:bc:06:61:e9:
9d:f1:1a:00:e6:90:7c:9f:db:5e:1d:00:68:d1:af:a8:3b:9e:
d0:14:26:1e:bf:97:59:e4:8d:1d:1d:ba:02:06:9d:b5:d2:06:
2d:4a:0b:4d:8a:d4:00:2e:b2:14:77:85:06:49:cd:3c:c4:5b:
cd:88:b2:6f:c2:d6:20:38:a4:6c:05:60:9e:6c:d0:c2:d2:ff:
5e:9d:d6:cd:74:6c:7b:2c:ba:47:e1:de:8a:a6:d0:8e:f0:0d:
88:d9:93:0f:d6:ff:7a:1c:78:d1:a6:88:6e:30:1e:6e:13:84:
b5:ce:8b:0d:20:cd:15:d1:76:5d:95:24:da:a8:0d:4f:35:67:
94:d8:83:a6:a5:51:06:e1:ef:7e:7f:f0:0c:7d:9a:3c:dc:29:
3b:57:9c:58:c1:87:c7:fc:d2:c3:61:95:3d:97:3f:20:c0:3d:
65:b5:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:22 2025 by rpki-client