Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDF27F8B3D111EF9182756D762E951A.roa
File: 0CDF27F8B3D111EF9182756D762E951A.roa (raw, json)
Hash identifier: rNxQdJVFv1dFmYlU/9e8c131/M+/3Oo4sEImrp86v/M=
Subject key identifier: BF:01:D7:A7:05:BA:CD:E3:47:30:86:DC:5C:30:55:55:E3:B7:7D:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDF27F8B3D111EF9182756D762E951A.roa
Signing time: Fri 06 Dec 2024 12:53:12 +0000
ROA not before: Fri 06 Dec 2024 12:53:08 +0000
ROA not after: Mon 10 Mar 2025 12:53:08 +0000
asID: 398823
IP address blocks: 154.199.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71900 (0x118dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:53:08 2024 GMT
Not After : Mar 10 12:53:08 2025 GMT
Subject: CN=6752f3b8-08d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:dc:77:3f:6d:da:cb:d3:9c:5d:f7:65:f0:
6f:bc:87:c1:a4:30:99:97:e5:69:7d:a7:f2:30:5d:
6e:ec:7c:a0:16:37:00:13:b7:a5:50:ef:16:7f:84:
8a:ba:aa:a5:7c:5c:5d:74:74:b8:93:59:4b:36:c9:
6e:46:a2:42:92:ef:e9:38:35:8c:35:d2:df:4e:d0:
ac:19:99:40:83:50:ba:c3:ee:75:53:4a:00:e6:bf:
37:74:3a:0b:68:9b:65:fb:ec:a6:fa:bf:2c:6b:16:
e6:cb:6a:c6:74:84:4e:bf:d0:6b:33:6c:14:4a:6c:
15:5c:10:f5:0b:c4:b8:01:ec:01:44:4f:10:f5:68:
75:ab:d1:26:25:5c:06:1e:25:83:3e:89:7f:4c:93:
92:a2:81:33:6f:f3:d8:70:81:18:10:12:6a:3e:5f:
ca:f9:2a:da:0e:11:49:6c:ac:22:57:72:66:33:f8:
55:48:e6:7a:86:93:25:e9:f1:f2:fb:73:85:42:df:
70:d6:e6:87:63:67:ce:f5:7e:5a:2f:1e:73:71:dd:
fb:03:d8:84:2e:99:7e:4a:93:92:13:7a:5d:46:6f:
5f:77:56:fd:bf:e3:32:ba:f0:8d:2d:83:dd:40:30:
ba:b1:fe:05:e5:ea:c7:5e:89:fd:7f:74:87:9c:a8:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:01:D7:A7:05:BA:CD:E3:47:30:86:DC:5C:30:55:55:E3:B7:7D:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CDF27F8B3D111EF9182756D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:2e:85:3b:7c:fd:51:37:22:93:3e:8f:c8:b8:cf:38:67:bc:
f5:a6:d2:62:da:d6:34:ab:5e:04:72:4e:e6:ca:d7:80:c1:29:
e4:3e:f0:a4:a8:b9:ea:99:8b:5d:5a:ac:f2:1a:e9:fe:ac:9c:
36:e1:2c:7a:32:2b:8f:74:2c:e5:e2:9e:bc:2f:41:12:3f:5a:
c9:25:dc:81:e5:3b:a9:9d:ac:1d:64:53:e0:a6:97:e6:f4:21:
25:8f:1b:80:2d:78:cc:02:7f:67:17:64:09:02:a0:53:4b:47:
af:4c:7d:53:6a:3c:df:a7:11:4b:8e:d1:3a:d4:49:70:1d:4e:
e4:82:85:4a:18:9a:23:80:d5:ed:1c:33:48:37:fb:4d:66:c2:
d2:dd:bf:6c:01:f9:f9:3a:72:99:4c:6e:ce:90:e5:a5:15:dc:
b5:7e:16:52:9d:87:d3:51:f3:68:26:22:cc:c6:3f:00:80:64:
e3:72:8f:2b:1b:36:1d:41:1b:8a:ab:97:54:31:23:cc:56:b9:
c5:48:bb:34:40:fc:f6:b6:83:49:a3:fb:a3:2b:82:a8:91:a8:
e2:1d:78:08:2f:95:ca:a1:38:6c:f3:dc:6f:fa:5a:34:82:10:
02:a3:b6:cd:8f:7b:b8:8c:8b:dc:f1:c5:8d:94:cc:f1:0e:7f:
97:a9:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:24 2025 by rpki-client