Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/866178EEDA4E11EF8C39AF49762E951A.roa
File: 866178EEDA4E11EF8C39AF49762E951A.roa (raw, json)
Hash identifier: Xvv1N2hZNJqPa8E5YlQAVtZQQ//xr8iq0XDJwwrvi5s=
Subject key identifier: 70:CC:C0:3D:8F:15:5B:AB:05:04:C4:BC:6E:30:CF:BE:91:FA:9E:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/866178EEDA4E11EF8C39AF49762E951A.roa
Signing time: Fri 24 Jan 2025 12:27:07 +0000
ROA not before: Fri 24 Jan 2025 12:27:03 +0000
ROA not after: Wed 05 Mar 2025 12:27:03 +0000
asID: 44559
IP address blocks: 154.209.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83652 (0x146c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:27:03 2025 GMT
Not After : Mar 5 12:27:03 2025 GMT
Subject: CN=6793871b-b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:55:22:80:53:41:c1:4a:58:9f:a3:40:2f:
5f:64:e4:9c:88:ac:2b:d8:cb:0f:1c:7f:3f:fe:44:
31:03:4d:f4:7f:1f:6f:7d:aa:92:0e:c7:99:37:92:
74:42:bd:d3:17:b6:98:d3:14:63:ac:14:4c:f0:6d:
46:c5:6f:e6:02:d9:39:80:05:a4:96:60:2f:3e:d9:
db:df:84:f0:52:a8:5b:5a:79:cd:fc:62:67:68:0a:
b8:e8:40:26:54:e3:f0:7c:aa:f2:31:e0:af:91:ae:
e9:b8:ab:48:7e:2f:f3:1f:1f:54:fc:85:3d:1d:a9:
32:f4:64:1b:79:03:1b:c8:9a:85:88:23:a2:ba:9b:
79:ac:b7:cf:63:79:a6:f2:56:2b:ea:99:fb:1d:cf:
60:57:b4:90:c1:2c:47:12:51:87:08:4a:5d:9d:6a:
f3:c4:61:60:9b:d5:2e:41:fa:16:8c:38:49:df:3b:
18:4d:00:8f:0d:0c:9f:94:74:eb:75:c4:94:17:93:
45:ec:63:f2:b2:2d:52:f4:3c:1e:02:81:45:d0:8c:
22:2e:a7:a8:e5:8d:8e:66:e8:a2:24:ce:4a:91:20:
e4:b0:c5:c4:61:69:74:9b:2a:aa:c6:15:f8:da:4e:
6f:cc:f7:84:6b:2f:95:25:b2:f2:69:01:38:c4:6d:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:C0:3D:8F:15:5B:AB:05:04:C4:BC:6E:30:CF:BE:91:FA:9E:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/866178EEDA4E11EF8C39AF49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:55:97:d4:a7:ec:3a:de:a3:a1:6e:48:33:da:6b:ca:c1:89:
ca:06:12:fa:f9:04:d2:a1:b2:1a:09:2f:c8:ac:29:e8:ec:8e:
05:9f:5f:ba:d5:fc:9c:c8:ac:fe:bb:54:7d:cf:87:18:af:ad:
1c:17:c8:af:b2:90:0f:f4:f0:13:38:4b:c6:fa:61:a4:6c:e7:
79:2b:74:02:50:5a:57:69:b6:f4:96:2b:b4:4e:da:16:31:be:
d4:4d:18:64:fd:e6:80:1b:cd:78:23:d5:3e:2f:04:8c:e5:42:
62:58:8e:7e:5d:cc:75:70:03:4a:ca:74:ff:0f:c2:fa:d9:23:
51:d8:a7:16:08:66:c8:0d:2c:40:69:a3:fa:04:09:98:a2:c9:
cc:69:19:fb:ad:a9:7c:a8:75:eb:0c:6a:7e:f8:22:b1:a7:48:
f1:e3:d0:1c:5b:51:c1:c7:82:b9:a4:5b:fa:9e:de:51:5c:de:
40:86:7a:bf:42:b5:6c:7d:9f:ee:3c:f2:f6:25:87:3b:fb:6c:
cc:a2:99:f1:1a:e5:bf:23:7d:3c:2a:bb:fc:06:dd:b5:4b:6e:
d6:da:2f:67:34:7c:a4:b7:1b:ba:90:ff:61:44:99:4f:dc:06:
c6:ce:b6:b7:82:df:f5:35:e5:79:ee:9e:d3:70:4c:00:e0:e0:
65:63:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:28 2025 by rpki-client