Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A79550BED711EFA5D37243762E951A.roa
File: 27A79550BED711EFA5D37243762E951A.roa (raw, json)
Hash identifier: oZrV11iw9mR4Jf25zJUKgZXuoPphU3EBEMVSTf0o7pY=
Subject key identifier: 1F:68:B0:99:EF:B7:81:04:DB:47:40:D2:98:54:6F:8E:F9:59:40:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A79550BED711EFA5D37243762E951A.roa
Signing time: Fri 20 Dec 2024 13:34:37 +0000
ROA not before: Fri 20 Dec 2024 13:34:33 +0000
ROA not after: Sun 02 Feb 2025 13:34:33 +0000
asID: 49505
IP address blocks: 154.211.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72940 (0x11cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:34:33 2024 GMT
Not After : Feb 2 13:34:33 2025 GMT
Subject: CN=6765726c-f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:0b:f4:21:f1:d6:d6:46:3a:ba:49:9e:d1:
7c:e0:8c:b0:53:3d:43:65:7d:e5:fd:bb:95:1f:8a:
34:f6:c0:fa:95:62:b4:74:3a:e2:59:a8:c9:b2:14:
81:7f:0c:58:53:9a:93:f0:fe:e5:b0:7c:9e:fc:85:
ca:bf:b3:8d:e9:82:7a:28:67:f8:9f:e5:b8:60:6e:
f3:98:28:bb:aa:76:35:99:d9:8c:c0:13:3a:23:6c:
e2:a7:12:e2:43:2b:59:5e:02:43:0f:d3:ba:9e:d4:
8f:c0:39:21:83:cf:d5:52:25:04:32:e8:2d:21:27:
05:01:d8:49:95:18:84:53:10:c4:77:e0:bf:dc:8d:
87:26:9e:d0:df:a6:22:a5:a5:6d:30:7f:dc:14:f3:
18:38:bd:5c:cd:be:b2:fb:65:d1:96:1c:f7:55:79:
f7:08:41:69:7d:ec:22:ce:67:4d:67:b9:0a:72:1d:
a7:8f:1b:e8:89:a9:e7:7a:74:6f:3f:0b:01:eb:a6:
1f:d0:95:9c:d2:93:39:12:f3:d7:53:12:d2:d5:71:
4c:ff:b5:12:69:bd:b7:8e:2c:b0:ad:b4:bf:b8:33:
ac:b0:39:43:cd:37:54:d3:cb:77:64:07:63:33:a7:
de:f2:49:81:d3:f7:98:3e:42:da:0e:6f:ae:ca:56:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:B0:99:EF:B7:81:04:DB:47:40:D2:98:54:6F:8E:F9:59:40:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A79550BED711EFA5D37243762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.9.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6b:1e:03:99:45:5c:25:2e:66:7e:0b:23:f5:fd:61:e2:41:
30:18:1d:8a:cc:a3:e1:1b:d3:a0:c9:7a:e2:f1:f3:44:9a:53:
4f:ea:01:dc:df:ea:f7:db:9b:24:61:3f:2a:6a:1d:6e:62:43:
13:e9:ad:ed:b4:5a:10:36:62:f8:1e:57:8a:fd:78:4b:b9:79:
a8:68:13:54:5c:e3:40:7c:6c:68:17:18:74:29:cc:6e:7f:3c:
fe:a0:96:32:ab:90:95:55:b2:e5:d6:44:f7:d1:c7:06:49:d9:
b4:bd:9f:df:22:af:1f:58:02:ea:9b:e1:ad:13:0b:5d:11:d9:
b1:65:58:94:a7:4d:9c:a9:b8:c3:18:0b:03:ce:87:fa:27:6d:
46:e2:fb:ef:39:09:6c:3d:97:85:76:f7:8b:a6:e4:b3:0c:5a:
1a:0a:43:6e:1b:55:3c:d5:50:95:9a:7d:56:73:c7:50:58:1a:
b5:01:34:18:3b:6c:df:da:db:44:14:1a:43:d7:2a:08:39:1f:
2f:9e:87:29:94:03:37:4d:ad:b8:2b:12:38:af:dd:a1:bc:76:
bc:83:8c:44:ec:8a:c8:b1:8b:64:61:e5:56:a7:23:f7:bb:ac:
ea:b3:9e:5b:12:a6:c0:e8:48:6e:ba:46:01:46:78:f0:a1:60:
99:ee:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:26 2025 by rpki-client