Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24380F32DFFF11EF9C89DAAA762E951A.roa
File: 24380F32DFFF11EF9C89DAAA762E951A.roa (raw, json)
Hash identifier: Ih1qJi4rCRzM4frxBV+imsyOd3rR6BmzC8aVUAAYF3k=
Subject key identifier: 18:80:16:80:C1:D4:4F:38:80:33:BA:1C:A7:84:E6:DC:A8:6F:38:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24380F32DFFF11EF9C89DAAA762E951A.roa
Signing time: Fri 31 Jan 2025 18:13:59 +0000
ROA not before: Fri 31 Jan 2025 18:13:55 +0000
ROA not after: Tue 04 Mar 2025 18:13:55 +0000
asID: 200373
IP address blocks: 154.214.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85579 (0x14e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 18:13:55 2025 GMT
Not After : Mar 4 18:13:55 2025 GMT
Subject: CN=679d12e7-6e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:c6:a1:b0:9e:f0:79:f2:d7:bd:f9:3d:49:
46:7f:ca:00:09:d7:77:de:2a:0f:ff:e1:84:b1:91:
33:47:a2:95:20:17:46:fe:96:70:ad:9a:fb:4b:e4:
44:b9:82:0a:f8:70:c2:e8:9f:24:ad:fb:2d:86:c6:
54:43:8a:eb:7b:e8:75:21:e0:9f:79:7f:8d:5f:1e:
ee:21:1e:55:ba:21:e6:cd:52:58:07:45:5f:24:4a:
96:ae:d6:17:c0:a5:ec:0a:66:b3:79:9b:7f:f8:06:
46:ed:ee:55:36:4b:71:c2:c5:6d:0d:9f:9c:9d:5a:
1b:81:e4:0f:d2:3d:a5:80:2c:75:34:31:dd:f5:3e:
ed:ff:42:17:3b:33:73:f3:0b:4d:7a:8d:c0:64:00:
25:39:8c:d7:1e:11:d1:4e:60:f7:d2:65:98:23:f2:
28:e8:6c:4e:5c:74:4c:f3:e0:6b:d3:ae:b1:bb:fe:
86:a9:4c:df:1f:f1:98:c9:92:f9:9f:2d:bb:45:5f:
a2:ff:af:62:8a:87:21:6c:5a:6d:e5:96:08:ca:7c:
49:9f:5b:e9:5a:67:aa:54:87:4e:1e:e5:85:d7:6b:
88:5f:b5:61:03:a5:0e:8f:76:8d:bd:fb:1e:a3:f9:
af:e6:3d:62:4d:ff:31:55:6f:83:43:60:53:f2:df:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:16:80:C1:D4:4F:38:80:33:BA:1C:A7:84:E6:DC:A8:6F:38:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24380F32DFFF11EF9C89DAAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:67:09:e0:3e:37:2c:aa:5a:7f:09:6e:cb:a8:16:53:e3:23:
7c:85:65:c6:8b:03:0a:19:50:b6:fc:ee:49:3e:70:85:b4:7b:
a9:84:9a:31:32:c5:c0:18:97:92:e0:fe:1e:7c:8a:8e:3d:87:
b9:5a:9c:47:d3:ca:b3:4b:57:95:3d:dd:35:b1:29:60:b9:52:
2f:a4:98:67:d5:59:d5:4d:87:5d:43:d3:1f:64:dc:86:41:4d:
54:64:38:90:c5:7c:f7:bd:c9:b9:c4:32:ad:cc:82:4d:ea:2a:
3f:04:e1:f1:5f:4f:51:e6:ac:14:35:71:a3:9a:9e:58:e3:e4:
a0:56:a6:be:42:0c:43:4d:bf:64:b4:05:c3:bc:f9:92:c1:07:
4d:98:84:0a:85:0e:85:67:cf:1b:21:12:2f:71:8c:41:f6:40:
e7:45:23:2b:01:7a:bb:76:38:56:92:de:42:7a:9a:32:87:df:
fc:a6:d4:ac:1e:23:11:f3:3d:5b:76:cf:2e:9a:ac:64:dc:a0:
c0:0f:c9:d2:2d:61:7c:79:b3:5b:71:17:58:c3:16:46:8f:a1:
0c:56:9e:07:e6:1c:d9:32:4c:c2:a0:fb:61:0c:dc:bc:00:26:
98:99:49:3a:f6:56:81:1a:99:2c:0d:98:f9:e2:b3:73:1e:37:
e4:0a:e2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:35 2025 by rpki-client