Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34ACC330BEA311EF98B16280762E951A.roa
File: 34ACC330BEA311EF98B16280762E951A.roa (raw, json)
Hash identifier: goNcT5zHs9hAqlK9KaGwAvgjrnrjd63tidj22pLkDEQ=
Subject key identifier: 4C:B6:D2:FA:A1:5F:AA:DB:0A:FF:C1:78:D0:62:28:94:CB:DE:E6:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34ACC330BEA311EF98B16280762E951A.roa
Signing time: Fri 20 Dec 2024 07:22:44 +0000
ROA not before: Fri 20 Dec 2024 07:22:41 +0000
ROA not after: Thu 20 Mar 2025 07:22:41 +0000
asID: 47890
IP address blocks: 154.214.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72778 (0x11c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:22:41 2024 GMT
Not After : Mar 20 07:22:41 2025 GMT
Subject: CN=67651b44-d2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:3d:3c:50:96:a2:01:91:cb:c9:00:b0:b2:
5d:a8:f6:a2:ec:c5:1b:ab:4c:ed:90:cd:17:d4:4e:
31:4a:46:1d:f2:0a:9b:76:eb:17:a6:5c:55:a4:bd:
e1:69:1b:a2:04:61:68:80:39:23:59:69:56:bd:66:
7c:19:c9:42:3b:81:65:48:d5:38:5f:a3:18:c5:3a:
5f:a8:20:ba:47:01:f8:81:26:93:0e:0b:0c:af:10:
47:39:f9:89:c6:1c:ee:8b:91:b6:2d:04:44:8a:a4:
17:8c:9f:f8:e1:bf:86:64:cb:9b:a7:cd:42:ab:af:
db:bf:05:11:cc:4b:9f:9b:00:1b:03:58:d0:cc:ec:
e6:e5:89:9a:47:22:92:f2:76:5f:a1:0b:21:74:7d:
a2:42:9f:b0:99:35:3d:73:1d:00:f2:21:42:9f:82:
be:c5:29:17:79:1d:2e:07:5c:7b:35:93:f9:38:0d:
84:b0:e1:96:3a:39:ee:67:4b:57:e7:82:68:74:fa:
d4:fb:18:5e:9f:fe:6d:47:ee:6b:4f:5e:fc:6a:39:
a6:51:f5:21:17:16:a5:aa:55:ba:bd:8a:3e:fa:30:
09:db:70:d0:f5:de:42:1e:c3:72:18:37:ef:9b:d4:
8e:da:73:6e:ec:a1:e0:5c:31:fb:6d:38:e9:5f:f9:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:D2:FA:A1:5F:AA:DB:0A:FF:C1:78:D0:62:28:94:CB:DE:E6:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34ACC330BEA311EF98B16280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.205.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0b:d4:b3:7e:c4:ec:d9:7f:e7:95:9b:2e:42:dd:df:6b:c7:
f2:4b:44:b2:13:de:aa:8f:d7:64:ec:a9:ed:73:bf:3c:70:6a:
92:9d:03:d3:96:a4:b3:21:16:dd:3f:2d:fe:2e:f0:11:cd:ba:
e0:42:1c:96:5f:88:3a:d1:f7:df:41:1f:75:ff:51:c4:e8:c2:
2c:f3:29:58:d5:4d:e7:35:3d:23:cd:e6:4f:ff:fb:30:2b:d6:
5b:52:99:f8:01:1e:29:d2:cb:b9:e0:a2:b8:a5:70:9a:55:27:
ec:18:15:6b:ea:af:47:ed:7d:ef:fe:eb:b2:2f:16:62:c9:21:
68:9b:6b:ea:48:ae:2c:74:2b:72:c3:1c:c2:21:ee:4c:38:ca:
b1:e2:6c:4c:5a:dd:c3:4d:20:57:63:f9:11:0b:5d:0d:1b:f7:
c2:72:5c:04:e2:a3:1f:4e:df:a2:a5:25:a5:7b:a4:f1:46:62:
30:70:29:82:66:53:51:73:29:85:08:65:bd:45:ce:37:9e:5b:
1b:38:7e:e9:0d:e2:c2:d1:f9:5c:43:e9:c8:21:3a:9d:d0:9c:
7e:44:2d:db:4e:a3:5f:ce:14:84:06:ab:5c:2a:fd:67:06:af:
de:6f:47:fd:d7:0f:7a:26:cf:71:d1:b1:0f:31:56:b4:6a:a6:
66:69:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:16 2025 by rpki-client