Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2744CC1ABEB711EFB6D8B77E762E951A.roa
File: 2744CC1ABEB711EFB6D8B77E762E951A.roa (raw, json)
Hash identifier: GTkQhjYsNJm8RgBMeVX4Iv1X9kVNvDhTigCjNsZM9q4=
Subject key identifier: 98:4A:A0:24:A8:CA:56:7B:8C:B5:F2:6C:FC:E0:39:E7:FF:C5:A2:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2744CC1ABEB711EFB6D8B77E762E951A.roa
Signing time: Fri 20 Dec 2024 09:45:32 +0000
ROA not before: Fri 20 Dec 2024 09:45:28 +0000
ROA not after: Sun 02 Feb 2025 09:45:28 +0000
asID: 202656
IP address blocks: 154.220.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72904 (0x11cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:45:28 2024 GMT
Not After : Feb 2 09:45:28 2025 GMT
Subject: CN=67653cbc-deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:9c:bf:b7:27:3e:0c:20:83:88:3f:51:bf:
96:a8:30:e1:33:60:bf:0f:08:da:e1:65:de:cc:9d:
4d:f2:3b:42:46:66:06:98:74:50:fc:ff:66:51:c0:
15:c3:0d:a9:ca:7b:12:93:6b:af:5a:20:9e:0b:a6:
23:73:0d:0a:46:cc:8c:c0:a7:82:05:95:3d:95:73:
cb:6b:a3:a9:13:41:17:4a:7b:18:8c:d8:37:20:9e:
bc:1d:c5:6f:8a:08:a9:ed:ef:d4:be:0b:af:5d:9b:
b2:20:6d:34:9f:86:d1:a3:f8:45:45:b9:c9:6f:00:
14:4b:18:4c:4d:58:db:ae:6b:97:33:0b:88:db:40:
e2:5b:57:16:ec:9b:12:a3:e3:77:d2:63:4e:8f:b2:
6a:f2:5c:ef:0b:57:87:ba:0c:12:be:fa:3d:2d:d9:
f1:ff:17:f0:0a:5f:6b:aa:cb:ec:35:01:7d:60:82:
54:e4:e7:04:5c:d6:d6:49:0e:4b:4d:66:17:d0:3d:
a9:0f:7f:1a:67:a0:a2:12:b4:a0:5f:97:d8:c5:f1:
04:5d:f9:6d:08:91:25:62:84:85:9e:0b:d3:50:4b:
64:e7:a1:56:fb:ca:19:28:d9:0e:5b:9b:b0:25:16:
89:8f:67:17:07:04:a9:2d:6b:96:0e:52:23:dc:38:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:A0:24:A8:CA:56:7B:8C:B5:F2:6C:FC:E0:39:E7:FF:C5:A2:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2744CC1ABEB711EFB6D8B77E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:24:fb:38:da:80:2c:bf:59:ef:9b:31:14:a8:38:09:03:b2:
59:c2:5b:8b:d7:2b:30:e3:18:5b:8c:b2:67:08:3e:dd:99:02:
1d:6c:40:73:66:cf:5a:de:45:78:30:15:5b:19:7b:88:80:c7:
cc:92:a3:8f:15:c2:a8:b8:38:9e:bb:2b:c3:a2:ee:cb:ff:93:
a2:6d:e3:91:1c:21:b0:51:07:ac:ae:d8:97:0c:b4:bd:04:eb:
30:3b:a2:88:b3:bc:e2:d0:73:ca:9d:0d:5e:51:c7:b5:8a:55:
30:17:5f:9a:de:ec:3e:41:bb:f0:22:33:1c:ed:81:f3:bc:86:
f8:e8:71:52:dd:39:15:c1:cb:37:23:a8:de:ff:5d:c1:1a:67:
2a:f8:b4:e4:68:20:de:e6:f2:fc:57:f6:87:0e:ad:6d:bd:d4:
7a:88:7f:95:ab:f6:33:f7:7b:1b:b9:a9:cd:37:fe:f9:3f:7c:
4a:d2:65:af:81:43:80:15:87:cb:a8:46:47:f9:71:5a:85:5f:
d5:f4:5c:c8:92:22:db:16:a6:d8:3d:4c:60:b2:6d:b3:a5:cd:
12:ca:47:78:bf:9a:97:15:98:ca:61:21:e2:d5:5f:0f:ea:72:
bd:57:0a:66:82:b2:51:63:87:ae:f5:81:69:87:d2:a0:68:9c:
65:15:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:54 2025 by rpki-client