Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF95B5CCC62611EFB59DC098762E951A.roa
File: FF95B5CCC62611EFB59DC098762E951A.roa (raw, json)
Hash identifier: bJuRnkZWsNdV/SLwJrTdwgtSbttFkLvuCDAA7TP9CwU=
Subject key identifier: 05:9B:6B:F8:E2:41:46:A6:07:F0:C4:61:2C:CA:C0:7B:FF:58:75:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF95B5CCC62611EFB59DC098762E951A.roa
Signing time: Sun 29 Dec 2024 20:53:47 +0000
ROA not before: Sun 29 Dec 2024 20:53:43 +0000
ROA not after: Sun 12 Dec 2027 20:53:43 +0000
asID: 17561
IP address blocks: 154.217.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77726 (0x12f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:53:43 2024 GMT
Not After : Dec 12 20:53:43 2027 GMT
Subject: CN=6771b6db-5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:9b:ed:ec:8c:0b:2d:bb:ea:76:46:8d:1a:
b5:5a:34:cf:4b:da:30:16:53:b9:a5:e6:a5:81:ca:
00:b1:d3:83:8a:f2:da:0b:fd:9e:fc:dc:49:eb:09:
67:21:b1:fb:14:39:ad:15:b2:27:26:5f:b4:ba:42:
8d:7c:97:13:d3:6d:d3:1c:c3:3f:ab:54:c0:7f:6d:
ed:91:6b:b6:37:c5:41:f8:a1:48:c7:c8:cb:41:32:
98:a2:ea:e7:5a:42:0f:ce:b0:9d:2c:76:44:e2:c1:
ac:6e:07:e0:09:ab:43:0b:11:21:f8:3a:63:8d:4b:
3b:44:b6:16:73:0b:2b:0c:08:d0:b9:4c:f0:43:42:
e0:73:d4:50:01:e6:f1:ce:76:f1:66:8f:e3:2c:b0:
ce:df:d3:6d:4b:26:0b:14:6f:45:9c:67:08:c8:7c:
0c:8f:04:3a:5d:96:de:5f:4e:cc:5b:f9:06:ea:b7:
03:35:b3:86:e4:99:4b:93:28:24:bb:bf:59:64:b5:
18:58:8b:f9:61:ae:45:2c:02:8f:f3:23:fc:48:2a:
38:08:23:0d:28:f1:fa:30:d5:98:9c:91:c5:68:4c:
d1:01:2b:62:5b:88:93:ff:80:90:84:df:74:6b:b3:
92:7d:d9:e0:c0:e2:db:76:fd:a1:76:5f:67:69:62:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:6B:F8:E2:41:46:A6:07:F0:C4:61:2C:CA:C0:7B:FF:58:75:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF95B5CCC62611EFB59DC098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:37:32:0f:91:9c:d3:7b:3f:45:3c:a7:2c:42:89:c1:6e:2f:
f0:3d:fd:79:0c:b6:7d:5a:91:40:96:94:fb:4b:82:36:77:95:
68:ea:4b:b1:8d:e9:6e:17:7f:34:89:1e:2e:48:84:ee:18:24:
14:88:27:49:25:e7:87:1f:76:89:46:f4:c1:4f:86:16:a1:7f:
05:81:ee:61:d4:63:a5:fa:2a:8a:d9:a9:87:38:a8:50:cb:88:
26:3b:aa:d6:3d:dc:31:e3:3d:c5:38:97:0e:9d:a4:31:d9:a2:
53:a4:8a:6f:4a:94:3b:68:1e:da:e6:77:bc:56:eb:8a:82:01:
c4:9b:fc:59:1d:fd:96:4b:c7:65:cd:83:b0:00:71:4d:6e:f1:
d5:88:09:fc:18:24:5f:ff:10:a4:0a:e3:27:d6:6f:73:f9:36:
58:08:ce:fe:39:5a:c2:ff:7c:58:b0:cd:6a:ae:e7:27:05:34:
ba:cd:45:32:b6:27:32:ff:f1:e4:7a:dc:14:6b:28:c2:e7:fc:
0b:2a:fe:fa:60:fe:c6:84:74:0d:7f:b9:37:ff:f0:db:97:85:
7f:a7:c9:6c:9f:6b:3f:67:fb:b3:be:05:4d:75:42:c9:e1:0b:
78:4b:9b:d2:6e:6d:92:03:8c:6f:1c:0d:07:a4:9a:48:16:3d:
35:2d:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:39 2025 by rpki-client