Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6930E81CBEA711EF8F56D49A762E951A.roa
File: 6930E81CBEA711EF8F56D49A762E951A.roa (raw, json)
Hash identifier: 4pEu49E5ZSL7WnBrf5BDQLHijRZVIP/1b21X/VDP43k=
Subject key identifier: DE:7E:9A:02:AF:49:91:8A:CE:1B:D9:D3:1F:33:01:59:2B:F7:88:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6930E81CBEA711EF8F56D49A762E951A.roa
Signing time: Fri 20 Dec 2024 07:52:50 +0000
ROA not before: Fri 20 Dec 2024 07:52:47 +0000
ROA not after: Thu 20 Mar 2025 07:52:47 +0000
asID: 2914
IP address blocks: 154.214.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72802 (0x11c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:52:47 2024 GMT
Not After : Mar 20 07:52:47 2025 GMT
Subject: CN=67652252-ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:49:d5:8b:41:ab:3c:95:14:87:b8:12:dc:
0a:ef:88:03:fb:a9:a4:80:3d:ff:88:91:3f:25:4b:
66:a6:a2:54:d7:23:4a:5c:5d:8d:73:0f:86:ec:df:
c1:3d:ae:ad:d0:b7:b8:31:c1:d5:3f:64:06:69:46:
75:1f:a1:82:d7:1b:c6:09:c3:be:40:d6:55:3f:4b:
89:56:6b:7b:e2:a7:f0:0e:7b:c0:7d:da:4a:99:2c:
86:5d:51:59:a9:43:bc:a2:4c:e9:32:62:c8:e9:37:
b7:8a:d5:28:6c:e7:73:d2:8e:06:d9:21:88:32:a1:
0e:f1:8b:66:20:6d:83:70:a7:62:9e:99:04:a8:a0:
91:7d:e8:c9:fe:c9:f5:61:f8:c8:7d:9a:f5:ad:67:
83:24:5b:f8:8f:4b:6e:bf:af:7c:51:d4:f6:c0:9c:
03:6d:88:c0:92:d9:b0:65:1a:3f:29:bd:71:35:5f:
4a:03:8c:0a:64:a3:5a:c0:fa:a0:16:72:ed:a3:31:
76:cc:b5:ac:bb:f8:2d:b7:6b:c3:75:41:8e:b6:e9:
db:34:3b:a4:3c:a1:cd:6f:52:a3:f4:a4:a1:a1:e5:
d3:31:94:dd:8b:5b:ec:b7:31:d7:81:46:17:ab:ed:
dd:f2:13:b1:22:c0:42:db:1a:c2:81:87:73:7e:8b:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:9A:02:AF:49:91:8A:CE:1B:D9:D3:1F:33:01:59:2B:F7:88:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6930E81CBEA711EF8F56D49A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.208.0/23
Signature Algorithm: sha256WithRSAEncryption
47:17:c3:b4:1f:2a:57:87:01:23:67:1b:d2:21:b6:63:53:15:
7f:cf:41:4e:df:ac:0b:6f:89:b0:ed:6c:85:60:1b:d4:2c:23:
d7:4f:4a:c4:f4:e2:23:f5:f1:6e:64:c3:e4:3e:20:70:80:9f:
68:91:fa:91:85:01:e7:11:e0:c9:08:e2:92:42:06:ee:4b:6d:
1a:bb:4d:b4:12:2e:f4:a1:7c:61:ba:25:26:42:b4:54:ee:ff:
68:4d:30:10:fc:5d:d8:f2:5e:5d:47:03:9d:a3:a1:5f:34:28:
52:01:c6:10:de:62:e2:ae:67:e5:31:70:33:55:32:82:fe:41:
70:bb:10:db:46:38:08:84:22:27:d1:9f:9c:be:b3:87:90:e2:
a3:4c:1a:70:0b:05:3e:de:dc:e9:2c:9a:4b:25:f1:91:27:0e:
95:ec:af:09:bf:69:7a:52:e2:7e:2d:99:09:99:c2:a1:a5:b6:
ba:f1:3a:78:d5:3b:00:56:57:2b:14:2e:1a:ca:e3:89:96:83:
70:89:83:61:df:50:af:05:84:62:5d:11:fe:be:3b:26:ec:a4:
c0:5a:97:bb:09:8c:96:38:42:6b:04:8f:d1:26:7a:77:21:09:
fe:42:da:b3:9b:dd:8a:00:db:dd:72:0f:41:d0:e1:7e:f6:91:
d2:ac:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:00 2025 by rpki-client