Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C49F270DFE211EF88BDAF68762E951A.roa
File: 2C49F270DFE211EF88BDAF68762E951A.roa (raw, json)
Hash identifier: 9st4+WHMWotuIlAkbSzXhNHEk5D8NxkND5FVsYaytOU=
Subject key identifier: 1D:84:E3:08:A7:C2:78:EE:A3:5A:CA:03:18:83:61:21:C7:FB:03:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C49F270DFE211EF88BDAF68762E951A.roa
Signing time: Fri 31 Jan 2025 14:46:37 +0000
ROA not before: Fri 31 Jan 2025 14:46:33 +0000
ROA not after: Fri 07 Feb 2025 14:46:33 +0000
asID: 63199
IP address blocks: 154.207.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85439 (0x14dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:46:33 2025 GMT
Not After : Feb 7 14:46:33 2025 GMT
Subject: CN=679ce24d-4998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:cc:7d:0a:48:1b:ba:52:61:04:bd:8f:72:
33:bd:64:55:54:e3:b7:0e:4c:ff:2d:8a:2e:90:1f:
e4:39:32:f6:05:2d:3a:35:ef:4b:cc:db:df:75:8b:
9e:f4:65:74:30:b6:bb:65:a4:a7:d1:27:47:e6:d5:
85:30:52:6f:38:0b:a1:bd:c9:c2:c2:d1:cb:95:6e:
db:9b:e6:67:60:27:a8:4b:04:4f:2a:97:a8:e6:53:
df:86:ee:ca:c4:50:11:e6:61:77:42:46:d6:68:37:
78:37:fe:9d:7a:38:86:65:ca:fe:f8:27:00:63:8f:
67:76:68:03:e8:42:fa:e2:2b:e0:11:41:56:81:72:
d8:95:40:9b:1f:83:53:58:ce:14:2b:a4:b8:a0:0d:
6a:03:59:44:af:98:34:26:cf:68:b7:f2:53:69:56:
cb:36:cf:b4:03:33:da:6c:4a:66:83:1c:ba:c5:0b:
3d:ce:96:b5:6c:30:bf:bb:74:35:76:57:80:06:ad:
f6:ca:c2:b5:32:4f:6b:2b:b4:74:a6:a7:3c:8c:f6:
3b:21:cf:bb:3e:b1:dd:1f:f0:1a:20:3e:df:91:31:
96:00:b3:dc:4f:35:d7:7e:93:f8:41:f2:93:e5:c4:
3b:71:78:c7:d4:13:5f:a4:ab:58:e2:89:73:41:98:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:E3:08:A7:C2:78:EE:A3:5A:CA:03:18:83:61:21:C7:FB:03:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C49F270DFE211EF88BDAF68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:7b:5f:d0:56:99:7d:2e:3c:dd:4f:32:52:9a:df:44:6f:da:
bb:e3:54:77:b8:a0:17:f2:6c:55:c7:d6:fb:47:ba:69:bf:4a:
13:90:41:97:28:65:80:a9:aa:cc:e0:42:4e:4e:d4:12:9b:5d:
28:96:95:5b:13:84:56:e0:6c:af:23:09:52:fa:25:81:e9:92:
62:20:4c:13:c0:66:e8:8b:fe:59:0d:d6:78:d8:76:f8:e4:e9:
fb:06:d6:f5:30:ae:8a:25:f5:40:b2:f1:08:7b:82:d6:dd:e2:
96:e3:0b:bd:77:78:2e:40:78:6e:f4:56:9d:f1:c1:22:e2:aa:
ae:45:81:f1:27:9d:bd:b2:33:3c:09:0d:56:81:24:cf:16:e7:
29:ea:de:14:96:34:89:19:04:5f:26:d5:d4:67:9c:96:8b:0b:
c6:87:a5:16:8b:6e:8b:ef:1b:81:22:01:e2:a9:23:8f:b2:7a:
bf:12:24:3f:5f:31:e1:9a:9b:ef:f1:d9:dc:f2:e2:3d:07:f6:
9b:2e:b3:04:4e:15:dd:e4:b6:18:f7:c3:e9:45:a7:67:cb:32:
a1:9b:05:55:c6:a0:cb:a4:87:f4:b6:01:d8:02:df:b6:55:aa:
fa:64:dc:a4:83:a0:0a:0c:16:f4:66:94:8a:f7:49:75:67:1d:
d3:f8:b7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:48 2025 by rpki-client