Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AA77B0BED811EF8950644C762E951A.roa
File: 86AA77B0BED811EF8950644C762E951A.roa (raw, json)
Hash identifier: m3+oUUTA6UtKKUNu6gwWYIW9cHis8h80dmPi6qGiPYk=
Subject key identifier: 05:4E:7F:25:7A:E2:F1:35:9A:D2:8B:CE:04:92:48:9E:3F:1D:8B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AA77B0BED811EF8950644C762E951A.roa
Signing time: Fri 20 Dec 2024 13:44:25 +0000
ROA not before: Fri 20 Dec 2024 13:44:22 +0000
ROA not after: Sun 02 Feb 2025 13:44:22 +0000
asID: 44559
IP address blocks: 154.209.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72958 (0x11cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:44:22 2024 GMT
Not After : Feb 2 13:44:22 2025 GMT
Subject: CN=676574b9-feff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:03:ea:a0:53:bc:60:98:80:0e:8e:12:cd:
31:05:49:af:61:00:3a:b0:3a:bd:15:cd:26:d3:27:
a4:84:87:40:85:c1:1d:37:7f:ad:ef:75:76:52:f9:
5b:81:ae:70:38:95:f1:2d:8e:06:9d:57:0c:6b:18:
ca:0e:28:7b:72:ea:e3:f6:f4:33:76:e4:11:da:eb:
7f:a7:48:b1:d0:99:11:33:32:f8:84:87:68:f1:e2:
ef:73:d7:51:37:59:a3:b7:0d:85:36:32:23:dc:a8:
4f:c8:bc:5a:f6:29:e7:bc:f8:da:64:ac:bc:42:56:
e0:e5:a6:ed:1e:ae:04:5c:19:28:bf:62:5f:49:f6:
53:08:62:ee:c0:ed:df:c3:30:01:b2:e5:8c:bd:d9:
d0:a6:c1:12:59:d0:c5:58:2d:8b:8e:31:c5:50:57:
4f:c1:40:57:9d:91:2a:bb:d5:ba:d7:23:11:5c:5a:
9a:85:01:cd:ff:69:e0:e2:41:71:38:56:0c:27:88:
a5:18:c6:1c:cc:99:df:6d:c6:eb:c0:bf:06:13:0e:
2c:d3:45:aa:fe:cc:3d:6d:dd:b9:cc:e4:46:6d:98:
31:16:e4:3f:25:1f:33:7e:cf:d4:42:57:33:6f:b6:
39:f8:b7:76:9d:92:67:04:03:06:77:05:be:48:2c:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:7F:25:7A:E2:F1:35:9A:D2:8B:CE:04:92:48:9E:3F:1D:8B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86AA77B0BED811EF8950644C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.132.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ce:7f:2e:45:07:f6:77:f0:4a:ac:ac:74:5d:78:9d:8c:f6:
5c:69:7e:18:6a:77:05:4d:3d:9a:f2:8e:c9:3e:f9:7e:a7:b2:
c9:a2:bd:35:bf:27:14:ac:07:80:5c:95:df:3c:f8:a8:72:69:
44:2d:d1:97:b1:7f:7b:cf:c1:bc:0b:59:54:6f:89:1b:f0:71:
20:4b:f2:b0:c1:0e:c8:d4:a2:6a:6e:40:56:08:88:e1:d8:6f:
34:3f:db:bb:33:7a:c5:cc:4e:af:57:22:51:26:bb:e5:c2:e9:
c9:8d:bb:ea:b0:11:71:3a:bd:e2:c5:a7:39:77:c2:3e:32:53:
06:e4:36:6b:9c:11:10:bb:27:63:05:3a:7c:bd:c0:55:41:26:
1a:d9:75:54:0c:cd:a7:18:00:73:90:06:a8:88:23:dc:16:b9:
31:50:00:ed:5f:b3:2f:77:6d:75:c4:af:8c:92:5f:57:52:72:
6d:4f:8d:04:4e:13:31:77:db:61:6a:4d:c8:eb:27:46:a9:84:
e2:ec:53:27:b7:1a:ee:ef:4b:cf:1a:19:57:0d:8d:ed:46:4e:
1b:32:b9:a2:77:49:2d:79:75:ab:3d:83:36:40:83:b5:5f:ef:
a7:3b:3a:af:49:24:b4:32:6f:10:06:37:a0:2d:73:7f:17:52:
d9:9c:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:28 2025 by rpki-client