Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17FBDD24BEA911EFBFC316A7762E951A.roa
File: 17FBDD24BEA911EFBFC316A7762E951A.roa (raw, json)
Hash identifier: eG2JUs5kJjfRnrqDBm7LORicJbCHRt/cYy6Ju7ncsmI=
Subject key identifier: 99:40:38:CB:56:9A:16:B5:88:86:61:67:CA:54:93:B9:F3:12:FA:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17FBDD24BEA911EFBFC316A7762E951A.roa
Signing time: Fri 20 Dec 2024 08:04:54 +0000
ROA not before: Fri 20 Dec 2024 08:04:49 +0000
ROA not after: Thu 20 Mar 2025 08:04:49 +0000
asID: 328608
IP address blocks: 154.214.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72826 (0x11c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:04:49 2024 GMT
Not After : Mar 20 08:04:49 2025 GMT
Subject: CN=67652525-8852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:3d:fb:01:10:e4:f6:d6:10:73:3a:a6:b5:
05:e3:30:fc:23:89:90:10:86:bb:3a:b4:0b:ae:66:
46:b9:0c:db:e2:82:bb:59:76:ce:00:fc:75:67:dd:
4e:6f:82:ed:36:b5:fd:dd:48:5a:06:30:05:42:aa:
26:30:59:a7:8b:b1:e8:57:5c:21:47:cd:30:8f:c0:
d7:1c:ab:22:83:71:ce:af:1e:e6:32:f6:04:37:10:
1c:29:e5:28:1d:7b:56:bf:2b:da:93:32:84:02:05:
f9:f5:46:87:0e:fd:3b:b3:11:ab:64:fb:ed:ac:c5:
e9:4f:2f:13:0d:51:84:57:c2:6b:f3:02:98:ff:65:
27:11:4a:a1:2c:f4:a3:fa:8f:ef:90:31:9e:a3:a6:
30:b4:1a:99:47:b7:a0:8a:33:1a:5a:53:91:c8:61:
a0:82:32:8f:c0:22:b0:57:7a:02:c4:be:c3:34:78:
3c:ba:8d:18:f1:3d:5c:1c:a4:9e:8d:18:bf:af:7b:
8c:c7:6d:df:71:36:72:8f:05:04:9a:72:c9:4a:2a:
6b:8c:96:17:55:d1:0e:e8:ad:04:46:82:43:76:f0:
62:bb:f4:8d:58:6d:33:81:06:d7:e1:39:a3:28:36:
f7:67:03:ac:88:74:57:8e:7d:1c:f9:49:bd:eb:25:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:40:38:CB:56:9A:16:B5:88:86:61:67:CA:54:93:B9:F3:12:FA:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17FBDD24BEA911EFBFC316A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.204.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9a:e3:21:76:bf:2e:10:7f:e1:d9:3c:4c:27:98:ff:4e:3a:
75:f9:19:59:f5:60:ea:12:e0:58:81:b3:b8:26:35:8d:49:16:
db:51:85:06:01:70:fe:49:bf:44:69:f7:a3:cc:14:ac:3e:b4:
56:7f:19:93:c9:87:51:12:a7:cb:46:13:56:67:5d:a3:e1:cc:
02:65:1e:16:3b:7e:81:98:9f:19:1b:e6:d2:78:d9:1d:ac:eb:
06:6a:e5:f5:81:21:31:63:e0:15:9c:e2:da:50:b2:bb:ca:0e:
37:5e:fc:97:72:6d:45:e1:ae:4f:53:ad:6a:76:a4:46:ce:aa:
05:4b:8b:c5:24:bc:fe:71:44:61:dd:e2:ac:0c:aa:22:d4:f5:
f4:a5:3a:e7:73:d0:92:86:e4:05:4e:5d:5f:fe:77:f2:aa:ef:
40:e5:11:9c:3e:fc:61:9b:38:69:6d:82:2c:08:d6:65:9e:f0:
f2:7a:c3:2e:41:d4:97:51:ac:e0:90:91:e6:8d:a2:57:cc:6b:
e7:56:b0:9b:c8:d2:86:89:65:0b:e8:90:b8:0c:9f:1c:ac:e0:
2e:5e:94:a4:f2:2e:f5:3b:fb:25:26:4b:80:60:f7:88:42:e0:
0c:3b:34:6f:36:56:74:c6:08:ef:34:ed:60:12:53:f3:38:f7:
1e:9d:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:19 2025 by rpki-client