Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCF1AEF6C63111EF9BDD625E762E951A.roa
File: FCF1AEF6C63111EF9BDD625E762E951A.roa (raw, json)
Hash identifier: eY3Ve7xytdgm9Y+cMQlkRmWxC7h1Lj94OUwKAG1NWa4=
Subject key identifier: 91:BB:C2:D0:8F:B7:55:53:1A:80:B4:B6:06:B0:06:4E:AF:67:FB:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCF1AEF6C63111EF9BDD625E762E951A.roa
Signing time: Sun 29 Dec 2024 22:12:27 +0000
ROA not before: Sun 29 Dec 2024 22:12:23 +0000
ROA not after: Sun 12 Dec 2027 22:12:23 +0000
asID: 17561
IP address blocks: 154.217.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77818 (0x12ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:12:23 2024 GMT
Not After : Dec 12 22:12:23 2027 GMT
Subject: CN=6771c94b-7526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:31:b3:95:cc:ca:b7:8d:8b:39:93:93:a3:
f2:19:ee:b4:cc:79:5d:56:8a:85:03:d0:61:f7:2a:
22:8d:40:6c:5a:a8:38:17:2c:99:f2:66:0a:98:1b:
b6:5d:e7:ab:01:22:9f:ca:79:9b:10:6c:01:77:d8:
37:f4:9d:62:9b:5c:15:a3:ed:0f:a9:b3:ca:51:89:
7e:f3:4c:de:e6:0d:dd:c2:2f:e8:f3:ef:84:2c:0d:
4f:c6:c7:90:d2:e7:e4:73:a0:1e:5d:b4:93:c8:40:
c8:42:a0:c4:af:a0:1f:fa:dc:f9:7e:e8:eb:0e:d3:
dc:7f:5e:6c:c1:c1:1f:7f:5e:00:f4:7a:b7:f6:a7:
f0:db:36:c2:39:c0:21:ad:10:ae:0c:a9:83:c7:76:
b9:65:76:60:ed:62:6e:f5:d5:62:be:d2:9a:f1:15:
b8:74:0a:7c:ef:60:8c:8d:40:49:ac:42:4b:98:a6:
68:1c:31:7c:18:7a:1c:40:d0:73:91:93:8e:7a:c0:
ef:7e:e9:34:d4:fc:00:08:48:c8:a0:9e:c6:ec:18:
54:28:c6:1c:be:77:19:5e:99:2c:6d:30:d0:34:66:
6c:6b:61:9d:f1:6b:47:ca:45:b7:f9:4d:7b:32:6e:
70:07:ba:c2:b6:7d:59:0a:3e:32:b9:76:52:08:db:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:C2:D0:8F:B7:55:53:1A:80:B4:B6:06:B0:06:4E:AF:67:FB:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCF1AEF6C63111EF9BDD625E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.224.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6f:5b:98:5f:9e:1b:a2:f0:35:db:48:dd:b7:1e:c3:12:d2:
86:81:53:15:60:d3:ef:f2:21:95:ae:8d:91:8a:49:0f:cd:3d:
8d:04:89:35:29:f6:38:9f:1c:70:05:d7:a8:e4:84:6b:f9:52:
ef:ba:e5:e2:f9:5d:82:d9:de:c7:52:9d:6f:5d:db:b7:93:ac:
e4:07:7e:d8:0c:99:7b:a7:6c:ba:13:3b:f8:9a:62:ef:11:8b:
56:ce:52:4f:c8:4b:61:ee:17:75:02:a2:69:c2:af:c6:ad:89:
74:3e:43:6e:3b:00:03:3b:e8:09:9a:57:10:18:ce:20:3e:e4:
4b:f5:9b:04:27:53:d3:0e:33:75:ad:93:6f:01:74:ce:ad:0a:
be:a0:01:08:61:bc:84:5d:26:9f:b7:e2:2b:da:c3:eb:47:87:
5e:03:ed:d3:fc:00:ec:26:4d:70:33:6f:22:ad:c0:82:60:3d:
df:a0:2a:d6:59:14:3c:5e:10:d8:9e:a6:c0:97:bc:58:69:59:
29:0e:56:06:53:25:70:4c:77:5b:cb:28:cc:80:69:97:13:fb:
a5:48:2c:42:23:76:85:0e:a6:fc:a9:ef:b2:71:ac:2f:ca:37:
a1:2a:a5:d7:a5:cd:7e:73:01:9b:3d:b8:f1:e9:86:8d:50:3e:
37:e9:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client