Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671CB55EBEA911EF9999B3A7762E951A.roa
File: 671CB55EBEA911EF9999B3A7762E951A.roa (raw, json)
Hash identifier: IF/FITLmOpUajmeu87Me5U8ddRgTzWnYKFT0tHrRRe4=
Subject key identifier: 0C:26:3F:F3:E0:4E:BA:6E:F9:39:9E:5B:F9:71:BD:F1:D8:73:36:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671CB55EBEA911EF9999B3A7762E951A.roa
Signing time: Fri 20 Dec 2024 08:07:06 +0000
ROA not before: Fri 20 Dec 2024 08:07:02 +0000
ROA not after: Thu 20 Mar 2025 08:07:02 +0000
asID: 328608
IP address blocks: 154.214.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72830 (0x11c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:07:02 2024 GMT
Not After : Mar 20 08:07:02 2025 GMT
Subject: CN=676525aa-9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:fb:96:58:50:9d:7c:c9:3a:32:be:f3:60:
87:6f:94:2f:86:fe:aa:41:df:aa:67:c3:4c:ca:8c:
da:2b:1e:6c:d9:74:e5:c7:7e:6a:19:54:91:e7:f3:
18:70:4c:a8:1e:13:fb:e6:f6:12:48:a7:e3:06:ab:
bb:59:33:17:97:35:5e:af:0a:c1:d2:9c:d9:26:80:
b5:89:19:db:d6:1f:69:ad:c7:47:65:fb:0c:20:96:
a1:6a:0b:77:57:67:97:3b:f1:25:db:6c:21:73:99:
e6:4d:d8:ee:09:e7:69:a3:23:83:9a:e4:92:e2:82:
c8:65:d2:d3:33:9a:5c:40:6a:d7:4b:a8:62:64:10:
9f:86:1f:7b:7b:85:13:83:66:4c:24:32:d3:36:23:
1d:cc:69:c3:fa:92:2c:53:ed:66:0b:62:c2:df:9e:
69:49:62:e2:4e:63:f7:e2:d4:eb:05:94:e6:53:34:
4f:a4:d9:aa:49:8e:05:63:b4:5f:46:c9:95:0d:57:
e6:95:ab:26:ae:e2:ff:3e:45:c6:f8:b1:ed:f6:56:
ca:36:96:25:7e:26:03:24:26:83:6d:9c:37:63:45:
bf:75:6c:e6:95:aa:e9:1d:9f:a0:e7:72:62:f7:41:
27:9b:08:c8:0b:19:e5:1b:3e:c0:99:8b:8b:31:a8:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:3F:F3:E0:4E:BA:6E:F9:39:9E:5B:F9:71:BD:F1:D8:73:36:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671CB55EBEA911EF9999B3A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f8:ef:3b:d2:02:74:c3:a7:2f:93:85:5b:e2:47:bb:40:6d:
76:dd:0d:f7:f5:74:0f:ba:ef:13:c3:98:6b:05:8a:d2:75:02:
82:60:ee:2c:fa:43:47:d6:51:b5:23:0e:ab:7a:25:0d:d8:22:
51:e1:17:fe:81:df:4f:30:d2:4a:44:0e:9a:0d:9e:a9:13:c6:
cd:c2:5d:17:1a:ed:b0:3d:82:d3:4a:a4:dd:5a:22:c4:8e:15:
3d:52:3f:b4:ba:ce:3c:8d:02:7a:33:a3:a5:c0:93:c7:80:18:
32:bf:50:fd:96:be:e2:c5:8c:4b:d9:e8:9f:d4:29:81:ed:e1:
1a:fe:e5:b3:d3:6e:5b:64:01:f5:f3:e8:26:99:ac:8c:9f:d8:
72:06:20:8e:01:19:37:c3:1b:7f:8c:43:32:6d:ac:bb:63:9b:
78:f1:28:fd:48:78:91:3f:3e:b2:d0:c2:84:61:da:f4:4b:89:
73:7a:1e:27:93:a9:67:78:e6:b4:63:7e:70:6e:4e:03:b8:56:
53:c6:2d:cd:08:b0:4f:c4:22:1e:84:66:28:e0:2e:66:60:7a:
32:7d:08:f4:b6:29:4c:3b:65:9a:6a:31:2f:ee:98:47:9c:72:
87:b5:1a:65:87:27:f2:e5:b3:2d:db:aa:29:d5:d0:60:d8:34:
d7:b6:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:36:31 2025 by rpki-client