Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B102A0BED811EFBFA54B4A762E951A.roa
File: 14B102A0BED811EFBFA54B4A762E951A.roa (raw, json)
Hash identifier: rJgPU1uXbAvcwwoqKMlkr0jO1oT8BQSyUwQUI0QRAFc=
Subject key identifier: 24:A2:1E:6D:89:AD:3F:D0:21:2C:EF:2E:CE:26:F0:DE:93:64:89:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B102A0BED811EFBFA54B4A762E951A.roa
Signing time: Fri 20 Dec 2024 13:41:14 +0000
ROA not before: Fri 20 Dec 2024 13:41:11 +0000
ROA not after: Sun 02 Feb 2025 13:41:11 +0000
asID: 44559
IP address blocks: 154.209.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72952 (0x11cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:41:11 2024 GMT
Not After : Feb 2 13:41:11 2025 GMT
Subject: CN=676573fa-048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:81:38:a8:a9:4a:f1:b1:56:d5:a6:89:a8:13:
ea:49:95:39:a7:0c:97:60:eb:08:c6:a7:83:49:ec:
af:b8:97:2d:b9:12:42:90:c0:97:f3:00:94:77:40:
d3:d4:f4:f8:b3:0b:80:bd:d2:58:b0:d9:59:81:8e:
9a:c5:2a:95:99:2d:bf:22:78:12:e4:cc:f4:18:6f:
e8:a2:2d:c5:63:b4:55:92:ba:60:76:04:69:e8:2d:
8a:08:b2:20:94:fc:23:36:d0:18:10:0a:de:78:fa:
b2:e7:ed:5f:b5:f0:f0:01:43:41:37:39:48:32:64:
f6:80:58:f5:5e:0f:3f:9f:5b:d3:a8:ff:54:4e:d5:
a1:c1:1b:00:2d:e7:24:73:32:d3:4d:db:1c:23:1d:
73:98:55:b2:ae:c7:9d:38:70:34:93:3b:0b:9d:66:
36:d8:0e:d3:1c:79:f1:dc:2d:84:bf:97:c2:eb:63:
1a:fb:9a:b1:e5:18:f9:d6:10:68:73:10:a6:cd:9a:
4b:14:c0:45:c2:4d:76:b1:46:3e:bb:a3:0c:bb:eb:
ca:02:15:b6:86:33:9f:71:13:c0:37:ae:60:57:01:
9e:1a:77:ae:ab:4e:e4:fd:92:bf:2b:95:e5:b8:ca:
76:61:d2:8f:7b:f3:ea:65:26:b0:c9:df:a4:86:f7:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:1E:6D:89:AD:3F:D0:21:2C:EF:2E:CE:26:F0:DE:93:64:89:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14B102A0BED811EFBFA54B4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:42:1b:4a:80:76:69:e6:2d:23:4d:87:c2:e3:8c:44:aa:9c:
73:47:13:f6:85:54:34:58:c0:1d:1f:b7:42:28:c0:98:0e:88:
68:49:65:c2:50:dc:6e:b2:2d:21:2c:c1:1b:3e:93:d6:d1:0b:
88:c8:9b:0c:8b:62:5b:82:23:72:98:88:a9:2a:44:cc:a7:5b:
7f:43:09:26:46:97:d3:0f:a3:d5:d9:48:50:6b:80:36:66:61:
2b:8a:46:17:37:1b:48:69:a9:48:ae:c6:fb:c3:cf:3d:5f:55:
b7:22:c8:1f:84:6f:ba:3a:3d:5e:d4:2b:a6:3f:6c:0d:c1:f9:
54:75:b6:46:a8:8d:e5:b7:e6:38:c0:44:88:2b:8c:9f:36:4f:
87:a4:86:ce:1f:4f:63:b6:df:02:2b:33:c2:ce:d0:a1:f0:29:
32:67:3e:08:8d:23:21:e3:8f:97:51:1d:a0:47:3e:a6:f8:15:
ad:e8:87:ab:53:75:55:9d:27:e0:34:13:00:e2:23:05:5e:93:
6b:de:93:14:a7:eb:23:6f:7a:2a:dd:56:f9:42:0c:11:71:d8:
05:62:8f:eb:e7:71:46:06:09:c6:b2:c5:6b:86:71:22:ef:57:
5d:85:51:a9:9d:4f:8e:73:e4:0b:95:ba:f2:44:10:df:7f:81:
d5:59:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:05 2025 by rpki-client