Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F79F38BEAA11EFB1CDD5AD762E951A.roa
File: 44F79F38BEAA11EFB1CDD5AD762E951A.roa (raw, json)
Hash identifier: eaPGFV1Gldf8uM6L41DXy1HAzCxmOOeprOIoLZp/O7s=
Subject key identifier: 96:24:0D:9C:EA:4C:24:90:1D:12:1D:F9:93:DE:09:9D:ED:9C:CB:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F79F38BEAA11EFB1CDD5AD762E951A.roa
Signing time: Fri 20 Dec 2024 08:13:18 +0000
ROA not before: Fri 20 Dec 2024 08:13:14 +0000
ROA not after: Thu 20 Mar 2025 08:13:14 +0000
asID: 328608
IP address blocks: 154.214.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72842 (0x11c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:13:14 2024 GMT
Not After : Mar 20 08:13:14 2025 GMT
Subject: CN=6765271e-6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:d7:bb:e8:59:f0:88:35:c9:46:9f:27:f5:
8e:c8:63:f2:ea:2f:14:82:fb:8e:5d:ab:12:67:1b:
b0:81:6b:79:5d:c2:5f:70:0e:ff:c4:34:14:96:f4:
29:05:b7:ab:18:3a:c7:54:e2:c3:c4:be:20:ab:6c:
2c:da:9c:d4:4b:2c:c6:75:6c:aa:9c:47:83:38:6c:
fb:b7:5c:11:6a:0c:50:a4:32:4e:33:71:02:55:98:
24:a4:6f:b6:a5:f6:ae:79:d2:84:b1:24:9f:7d:2c:
01:28:d9:59:7b:d6:35:dc:f6:6b:5b:51:37:ce:23:
d7:eb:1e:f3:fc:54:79:6a:67:c5:b5:98:c3:69:3a:
b8:4a:26:4d:8f:8b:02:ef:88:77:36:51:bb:f2:b8:
d3:c2:88:20:75:e9:21:e6:8e:1f:6d:52:92:74:7a:
a5:94:14:55:fb:dc:f5:bb:42:b6:9f:dd:c3:4a:dd:
ce:23:5d:29:5e:4a:f6:04:31:13:de:1b:37:3b:a6:
4e:0a:c1:ac:8d:1f:62:fd:61:17:a3:6f:09:e6:0b:
15:dd:63:fa:ce:84:15:7f:21:c4:f3:e9:10:b7:b1:
0e:3c:e2:ce:9a:07:a1:7a:fc:7d:84:2c:a0:ff:8b:
91:d2:61:8d:1a:d6:f6:fc:c5:96:58:22:b7:36:ed:
ef:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:0D:9C:EA:4C:24:90:1D:12:1D:F9:93:DE:09:9D:ED:9C:CB:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F79F38BEAA11EFB1CDD5AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.200.0/23
Signature Algorithm: sha256WithRSAEncryption
34:6f:d8:1f:cb:ef:b9:f3:df:d5:33:e5:2b:f7:07:c0:53:df:
24:bc:9d:c4:13:6e:33:60:7a:04:c4:55:6c:5d:50:b8:49:c7:
80:cf:4f:a8:9b:7b:17:d0:a4:79:b3:7f:ad:27:d9:dd:ec:70:
86:53:68:bd:24:8b:a4:8d:c9:86:80:f8:b9:6a:de:32:93:6e:
98:e6:2c:b7:6a:bb:b2:a3:e5:f0:94:53:99:2d:98:c8:09:09:
a8:1c:3a:11:ed:49:60:38:2a:58:dd:49:0e:46:0c:29:95:75:
37:01:77:c0:26:0c:6c:a9:d1:a4:d9:ef:02:c7:a2:ae:e4:15:
e5:83:7e:27:fc:9d:99:34:fb:fe:35:43:ff:67:52:47:0d:1a:
f2:75:b9:55:cf:31:4f:33:bd:73:5a:25:b6:e4:06:ee:ec:25:
c0:28:51:cd:55:6f:cd:9b:7a:30:45:20:18:58:66:7c:47:54:
83:ab:26:a5:89:e3:90:74:6b:93:fa:9b:f7:63:f0:23:f8:bd:
69:23:a6:be:1e:08:89:0e:3e:78:7d:81:25:e7:a7:bd:90:fd:
9c:8d:43:c3:12:88:e9:b5:fd:8a:98:48:95:e8:84:05:8c:d4:
a5:b6:d6:3c:1e:fd:4a:55:4f:78:5a:d1:17:0f:a4:65:45:09:
6c:5d:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:24 2025 by rpki-client