Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D0EE746ACA311EF88BC70AD762E951A.roa
File: 2D0EE746ACA311EF88BC70AD762E951A.roa (raw, json)
Hash identifier: Ipbdeyu6osu5PrkmdJmfrfzqO/N/oOqnx9yfLWzFXPY=
Subject key identifier: 39:89:44:48:F3:DA:FA:4B:65:8D:81:2E:77:7D:D0:79:39:59:BB:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011440
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D0EE746ACA311EF88BC70AD762E951A.roa
Signing time: Wed 27 Nov 2024 09:37:11 +0000
ROA not before: Wed 27 Nov 2024 09:37:07 +0000
ROA not after: Tue 11 Feb 2025 09:37:07 +0000
asID: 399989
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70720 (0x11440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 09:37:07 2024 GMT
Not After : Feb 11 09:37:07 2025 GMT
Subject: CN=6746e847-def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:fe:85:60:db:ec:d7:96:8f:2e:d5:6e:43:
62:86:a3:58:ca:0b:37:dd:56:3d:4f:27:c8:db:24:
be:fd:65:93:bf:9c:99:2e:82:fb:1a:91:07:20:8a:
07:3b:10:45:67:24:04:f7:1f:b4:eb:f1:48:bc:e2:
b9:d9:95:5e:43:75:2e:dd:f8:01:24:e9:b1:e1:54:
d3:27:31:f5:d7:a6:57:14:00:18:98:93:42:3d:6c:
cf:8e:ef:b2:95:d6:d2:b2:92:45:0e:13:25:83:bf:
be:2c:51:7b:6f:64:13:4e:16:bf:57:db:b5:71:21:
a7:74:8f:45:7d:37:27:f7:3c:e9:d2:6e:27:6c:fb:
76:ee:5b:cd:23:4e:ce:8b:2c:3c:c9:3f:06:5b:4d:
36:52:0e:3c:4c:4f:e9:85:66:c3:7e:a4:81:bc:cd:
04:46:9a:2b:de:8d:e5:7d:e9:f1:31:57:9c:d9:b3:
9d:5b:61:dc:cb:8e:60:74:26:62:d1:5b:ee:42:f7:
8d:72:fb:65:8a:25:f2:3c:47:45:fd:90:36:63:61:
b0:5e:97:04:e5:26:bc:16:2e:74:1b:fa:f5:f3:43:
2b:c9:50:b1:c7:e0:c5:5e:44:a5:85:6f:cc:ad:2e:
6b:6f:c4:6e:20:44:4d:29:52:1d:dc:dd:dd:6d:c6:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:89:44:48:F3:DA:FA:4B:65:8D:81:2E:77:7D:D0:79:39:59:BB:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D0EE746ACA311EF88BC70AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:42:01:c1:9f:2b:57:35:3f:b1:a1:f1:70:68:9a:0c:c3:24:
66:32:70:57:b0:e8:12:36:39:2a:31:6f:58:c5:58:b2:9c:c9:
c9:b0:1d:92:03:e9:5a:b0:4a:29:df:08:33:bd:e1:e5:0d:89:
f6:9a:f0:08:8d:6d:f3:2e:f5:3b:a1:d5:db:9b:13:d1:c9:eb:
de:73:44:1f:48:80:66:c5:7a:6c:12:67:18:13:8e:00:be:5f:
a0:fe:e4:2d:43:36:35:c7:ca:01:fa:65:87:34:92:e3:12:19:
6e:69:b6:f9:c6:18:2b:41:6c:b7:92:d0:b2:b9:31:31:8d:53:
34:98:9e:27:36:83:84:81:b2:19:d8:f0:64:7f:8f:b1:2c:f1:
82:09:e7:aa:c4:bc:f8:5a:ab:b6:c7:8d:cd:41:1c:00:00:dd:
54:6e:bc:a3:2d:6c:7f:b8:08:f9:57:d2:5a:f5:50:2b:24:1f:
66:c5:e9:c5:74:54:81:64:f7:a4:59:9f:36:64:a5:30:73:7d:
4f:d6:6a:69:d6:43:30:ce:5a:e0:a5:42:1c:ab:23:75:20:f6:
a3:a2:33:7c:3f:16:03:fc:37:32:aa:4e:ff:8e:e5:15:d5:22:
ce:7b:fd:5d:5d:3d:9e:f9:fe:f5:dd:36:43:c8:a5:bf:87:43:
09:a9:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:20:52 2025 by rpki-client