Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2C02DEBED711EF89710346762E951A.roa
File: 7A2C02DEBED711EF89710346762E951A.roa (raw, json)
Hash identifier: rhA291/KrUZKG+Nl41zSIWsZK1RfcQj3HmeGHtIkIkA=
Subject key identifier: D2:41:AB:01:7F:64:1B:40:48:BB:6F:72:2B:BE:9A:E0:79:19:25:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2C02DEBED711EF89710346762E951A.roa
Signing time: Fri 20 Dec 2024 13:36:55 +0000
ROA not before: Fri 20 Dec 2024 13:36:51 +0000
ROA not after: Sun 02 Feb 2025 13:36:51 +0000
asID: 44559
IP address blocks: 154.209.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72944 (0x11cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:36:51 2024 GMT
Not After : Feb 2 13:36:51 2025 GMT
Subject: CN=676572f7-a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:3f:c9:5f:33:79:cb:01:6f:e6:73:6a:90:
08:29:c9:8c:c3:40:8c:aa:c8:10:8a:6d:20:a5:81:
15:d8:cd:a2:cb:e2:94:c3:51:26:ef:02:0e:53:be:
03:83:b4:77:25:8b:45:25:97:31:e8:18:e9:7d:bb:
45:65:19:08:7a:60:9b:af:f2:89:e1:1e:20:a9:2c:
48:39:80:c1:a8:02:18:12:ff:9b:44:74:c3:d8:5b:
d2:7a:46:60:4c:fd:8f:ec:b6:c5:9f:5d:e8:5d:1b:
c7:aa:04:40:a3:9f:7b:db:76:06:ff:02:19:95:b6:
f7:73:9b:dd:23:a9:fd:36:57:75:5a:c0:25:8a:54:
59:49:11:9c:64:2e:6f:6c:ea:96:04:aa:8e:fc:98:
ec:57:fe:6c:ac:fd:f7:96:25:a5:18:9c:51:7e:e4:
65:9f:3b:fd:1c:0b:ba:d1:8b:30:92:91:f5:05:e7:
e5:8d:3f:f8:fd:ba:a1:0d:4f:c0:c8:bf:d2:c9:35:
a5:47:8e:ae:35:12:8a:f1:a1:4a:e9:e9:ec:2f:28:
ba:75:d1:0c:6b:5a:19:2d:fb:3b:34:f2:e6:8e:2d:
8d:e6:b9:5f:d5:9b:80:57:2f:36:81:aa:b4:d1:57:
1d:55:5b:59:55:6b:94:41:49:48:b9:e7:29:99:d3:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:AB:01:7F:64:1B:40:48:BB:6F:72:2B:BE:9A:E0:79:19:25:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A2C02DEBED711EF89710346762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.152.0/21
Signature Algorithm: sha256WithRSAEncryption
81:e3:1b:5e:fb:b5:68:ef:e2:8c:57:45:04:98:49:d1:3b:be:
2b:a6:9b:03:4c:03:7f:2e:a1:ef:a6:15:c1:fe:19:76:ce:35:
90:34:02:d3:21:fa:fe:ce:9a:bf:62:64:31:84:f6:df:c6:d6:
19:68:47:db:51:68:a0:f7:33:7f:96:70:9f:10:c6:22:63:c5:
7a:da:f4:c4:a4:34:ad:dc:b9:78:20:c3:c0:8d:6a:fb:a3:dc:
b2:87:0c:43:77:b7:8f:61:75:b4:92:87:e9:7e:f7:19:6b:87:
e3:81:88:8c:fc:44:31:8e:52:f5:c7:dc:e6:8e:95:45:b0:cb:
8c:9d:80:a3:b9:67:9d:fa:f9:85:b0:06:2f:9e:e1:32:da:75:
ea:93:e6:04:0f:28:dd:51:ac:7c:4c:ee:4b:46:d2:c8:b8:6f:
c2:c1:d3:55:a9:6f:1d:bb:57:89:24:fe:49:b9:94:01:9b:12:
91:5e:32:d3:64:7f:10:b7:e3:c6:aa:95:80:10:36:4a:53:f4:
32:ac:db:83:7a:47:a0:40:9b:de:41:d9:3d:47:00:b0:92:46:
f9:c3:33:74:a1:e8:59:ad:98:b0:df:17:4e:9b:64:b9:8e:81:
a2:db:a9:bc:42:56:ea:0e:cf:be:7b:cc:5e:86:81:61:dc:91:
af:ca:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:52 2025 by rpki-client