Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C79A62D51411EF893094AC762E951A.roa
File: 24C79A62D51411EF893094AC762E951A.roa (raw, json)
Hash identifier: NPe7TrODhcocTrzZ6POczdmLLVbp0c3zoCfrv61T+UM=
Subject key identifier: 0F:D5:C1:18:87:55:C3:33:5B:75:6B:D3:C2:BC:06:67:B2:E4:40:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C79A62D51411EF893094AC762E951A.roa
Signing time: Fri 17 Jan 2025 20:46:36 +0000
ROA not before: Fri 17 Jan 2025 20:46:33 +0000
ROA not after: Sat 22 Feb 2025 20:46:33 +0000
asID: 139646
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81215 (0x13d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 20:46:33 2025 GMT
Not After : Feb 22 20:46:33 2025 GMT
Subject: CN=678ac1ac-8594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:da:de:a5:bc:a4:ba:4b:d2:8b:37:aa:d1:
62:45:02:3e:9b:b7:f1:ea:17:ff:dc:da:5e:ab:54:
f3:68:07:b6:1c:7a:0b:49:fd:ba:d6:8d:7b:66:c5:
13:0c:14:23:41:3e:0d:df:76:81:2a:db:bd:ac:26:
e4:93:31:6b:19:73:07:68:3c:7d:df:53:85:25:a6:
40:b7:b3:35:df:ba:42:c2:97:81:93:ef:3c:45:1e:
dc:3f:7e:b4:36:bc:34:55:59:98:10:10:50:4e:f7:
58:29:8f:ba:39:0a:48:5d:b3:1e:6c:89:b8:be:11:
90:7e:be:32:73:5d:91:20:0c:4c:b1:be:1b:26:f6:
a0:2d:c8:3c:b5:a3:81:a5:86:be:39:6e:33:22:40:
e0:40:68:0e:5b:ed:4d:ac:87:9a:c9:35:8b:4e:c4:
24:f3:aa:b7:5c:df:70:c8:7f:2a:14:5d:e1:ed:8b:
20:26:2e:fb:eb:96:85:27:5b:86:c3:44:48:05:d3:
cf:8b:1f:e0:e5:8d:6c:bf:3e:29:73:e0:42:42:91:
09:44:3f:6c:4e:e6:80:70:67:b2:6c:64:0c:8e:88:
c3:07:4a:3e:6b:03:19:04:2d:ee:30:bd:fa:7a:6f:
57:a4:66:95:87:d6:e7:11:14:23:05:94:6f:75:68:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:C1:18:87:55:C3:33:5B:75:6B:D3:C2:BC:06:67:B2:E4:40:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24C79A62D51411EF893094AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ad:02:a6:56:39:e7:38:34:2e:b1:25:85:86:05:50:37:90:
94:e6:00:09:77:33:82:15:81:0e:7f:2a:46:e6:4c:4d:fc:d9:
61:e3:bf:17:f6:a1:92:62:7c:86:31:9c:44:3b:4d:e9:a7:33:
ff:8d:04:1a:06:2b:1a:30:e9:ec:79:eb:eb:0d:61:60:8e:64:
4d:48:a7:7b:20:f0:75:01:dd:fc:88:b5:6c:eb:cd:fa:f4:54:
53:6c:87:39:1a:1c:27:a7:1c:86:ff:de:ed:33:33:d4:7c:14:
f8:0c:49:3e:ba:16:16:81:0d:f7:8b:c1:13:a8:bb:51:42:56:
8b:f2:91:48:1c:3a:4e:f3:da:f4:a8:28:0b:11:f9:54:a5:8a:
88:4e:4e:d1:fe:46:2d:4f:0b:e3:e1:74:ea:a3:7a:7e:36:24:
7a:67:a2:2a:f1:11:57:9f:49:a8:8e:f9:c0:ca:f8:63:13:3a:
59:ff:9b:7c:f4:93:0a:c8:2d:9f:c1:e7:35:e3:cd:29:f0:a7:
e6:c0:8e:79:81:ad:53:27:0f:14:a7:cd:9d:cc:3c:e9:60:67:
12:b7:37:a6:eb:b7:c8:15:6b:ec:52:01:d3:6e:14:bd:bb:d4:
2d:fe:a8:ea:9d:15:c1:5d:79:49:15:6b:43:48:20:7e:ff:f1:
fb:9c:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:10 2025 by rpki-client