Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4128CFBEBEA811EFB9A8F7A0762E951A.roa
File: 4128CFBEBEA811EFB9A8F7A0762E951A.roa (raw, json)
Hash identifier: n5zQ7ux+LrjtMMwVeDTzVwCooREa2l7tj1VFPKBg/t0=
Subject key identifier: FE:59:3E:9D:DD:3E:0A:4F:11:CF:AB:4E:2E:9F:43:A8:D5:65:C0:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4128CFBEBEA811EFB9A8F7A0762E951A.roa
Signing time: Fri 20 Dec 2024 07:58:53 +0000
ROA not before: Fri 20 Dec 2024 07:58:49 +0000
ROA not after: Thu 20 Mar 2025 07:58:49 +0000
asID: 2914
IP address blocks: 154.214.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72814 (0x11c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:58:49 2024 GMT
Not After : Mar 20 07:58:49 2025 GMT
Subject: CN=676523bd-b098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:85:04:7c:f9:de:be:1e:05:4e:dc:d8:86:
74:61:be:7f:6a:27:1b:e1:c0:ca:d8:cf:1a:7d:23:
11:7c:19:77:ae:ec:eb:7d:5f:f6:d5:4f:6d:50:ea:
73:b1:31:46:ed:d6:68:b5:b1:6b:ce:14:1b:fd:bd:
1c:79:87:2e:c9:51:05:14:f1:f1:46:db:c8:1e:06:
4b:b1:04:da:40:57:9b:0a:83:a7:f0:45:c5:b4:e1:
2b:30:75:0e:98:6d:b8:02:06:43:8d:e6:c2:b4:49:
71:e6:d7:81:cd:a7:b6:05:d2:f3:61:1a:74:18:97:
06:d2:28:40:dd:5c:1a:38:4f:de:51:c9:b5:9d:97:
ad:fd:b3:67:b6:a8:e1:7b:41:5c:4e:87:24:0f:65:
e6:c5:d3:7b:02:8c:2b:25:5f:38:3a:c6:0a:df:c4:
c3:b6:a3:94:5f:e9:0f:b9:5c:14:42:d0:2e:62:92:
a9:e4:b1:58:21:15:6b:c4:d3:dc:bd:3b:6e:22:1a:
90:13:26:b6:8d:5f:a1:98:58:02:6f:06:43:dc:ca:
e9:f7:9f:5d:69:50:62:67:60:24:c1:95:f1:a4:d2:
4b:bc:e6:45:cc:2f:1c:0d:3d:77:4b:a0:41:ae:8c:
43:0c:73:b4:60:a7:c0:c1:98:13:9c:23:28:d7:ef:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:3E:9D:DD:3E:0A:4F:11:CF:AB:4E:2E:9F:43:A8:D5:65:C0:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4128CFBEBEA811EFB9A8F7A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:7f:1d:eb:39:08:45:42:08:cb:6d:ca:6e:00:ad:6d:1a:cc:
30:e2:de:59:6d:d1:af:de:50:7d:6b:2a:cd:02:be:67:dc:75:
29:f7:68:7c:67:bf:f2:20:f9:00:c7:8f:bd:08:cd:98:44:d3:
ef:96:67:27:df:d6:10:12:94:82:84:ef:2d:50:1c:ea:0e:4f:
b4:40:3a:ca:1d:c4:ae:7f:cd:c6:dc:94:1d:1c:c3:e5:ac:b8:
7e:cd:bc:a4:5e:bb:ea:df:48:b8:87:a8:c8:15:a3:8d:e2:8a:
c0:7e:56:7a:0b:6f:7a:db:69:24:b9:59:86:e5:03:6e:9d:59:
bd:48:20:7f:c7:71:89:19:1b:25:0f:10:96:9a:60:95:39:3a:
d0:92:f1:30:27:ab:b5:33:fa:05:d7:8a:7f:d2:23:41:fe:32:
f1:0f:c9:83:6b:08:27:77:a4:d2:02:f5:e9:ec:69:02:15:05:
db:ca:77:18:06:b7:8a:16:7f:b4:c0:29:14:a2:73:e0:cc:03:
16:dd:0d:3a:4a:ec:e9:26:71:33:89:a3:71:fa:64:17:d5:3f:
66:79:95:18:c1:23:8c:0a:c7:0d:3a:5a:f5:9c:82:2c:c1:23:
4c:f3:1a:73:b0:af:e3:39:a2:37:09:b1:a1:43:b8:39:cc:59:
d8:20:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:26 2025 by rpki-client