Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89004BD2BEA811EF942323A3762E951A.roa
File: 89004BD2BEA811EF942323A3762E951A.roa (raw, json)
Hash identifier: JnNA1geLkuNp/PMckXtj6izd+BQCFmitnjz23JebYa8=
Subject key identifier: 6D:69:6E:1F:C0:B1:DE:06:76:E7:0B:E2:75:F0:61:F1:49:F6:5E:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89004BD2BEA811EF942323A3762E951A.roa
Signing time: Fri 20 Dec 2024 08:00:53 +0000
ROA not before: Fri 20 Dec 2024 08:00:50 +0000
ROA not after: Thu 20 Mar 2025 08:00:50 +0000
asID: 328608
IP address blocks: 154.214.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72818 (0x11c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:00:50 2024 GMT
Not After : Mar 20 08:00:50 2025 GMT
Subject: CN=67652435-7370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:3a:a7:4c:64:b9:ff:1a:ac:cd:27:9b:f5:
ea:43:3e:ad:4f:45:07:4d:9c:b6:5b:b1:14:9e:e6:
bf:cb:9f:26:c1:f9:38:f0:49:44:b0:3f:6a:0a:bd:
af:00:87:45:58:65:24:27:a9:73:e5:56:66:99:50:
77:12:80:62:3a:1a:16:7a:9f:d8:0f:b9:a5:f7:39:
47:3d:73:84:35:8c:43:52:d1:21:6b:70:db:02:19:
09:ce:f1:c1:fd:cb:9c:56:9b:13:67:e4:1b:ee:06:
38:99:9a:db:31:bc:e8:7a:b4:b5:28:e2:13:88:aa:
69:c2:f9:62:5b:76:69:63:2c:d2:18:72:67:9f:cd:
90:37:cb:fd:97:5d:c2:bf:77:c9:e4:94:22:f1:cd:
f3:6f:07:95:f6:9e:bf:d0:11:74:34:3a:ff:e8:db:
92:1c:7a:83:d0:59:94:59:71:99:c7:ba:90:36:34:
fd:3e:ba:c2:7f:96:2b:ef:1f:23:ea:53:da:c5:0a:
7c:c0:eb:b1:4a:b9:bb:ae:6f:dd:fd:f3:f2:84:f8:
d8:e7:36:2c:63:2d:7c:67:aa:74:41:71:1f:96:81:
80:f6:d3:1a:67:61:9c:00:41:24:5f:53:d9:db:c1:
ba:02:6a:e1:83:eb:37:ae:4d:98:3d:22:e5:df:2d:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:6E:1F:C0:B1:DE:06:76:E7:0B:E2:75:F0:61:F1:49:F6:5E:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89004BD2BEA811EF942323A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.217.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6d:38:e0:86:19:b1:22:f6:f7:7a:11:f6:8b:8b:39:0e:bc:
f3:28:ad:75:b1:21:aa:da:68:f0:e9:ff:c4:0d:f4:37:6c:72:
03:d4:c6:b8:d1:eb:79:29:22:54:52:be:59:8b:e1:68:d9:2e:
d4:d6:20:bb:ca:35:67:70:d2:70:31:b5:57:0d:39:dc:20:e8:
c4:20:3c:60:a0:da:ad:f8:7a:42:07:43:11:c1:ba:b0:f4:99:
2b:c5:84:71:c7:9d:77:1b:b0:41:4e:f6:d6:8d:e4:bd:05:7f:
5b:fe:c3:cc:f7:4a:1a:14:b3:b8:b8:6d:90:53:59:fa:0d:8f:
bc:25:88:ee:0a:52:f8:7f:e5:24:df:83:28:34:a3:f7:d5:36:
b8:7d:d4:0e:be:04:74:57:84:55:7c:8d:f7:f8:ad:90:11:dc:
30:a3:e5:3b:24:70:51:b8:92:05:78:cb:2b:c0:b8:e6:9d:78:
99:90:d4:15:53:8e:13:65:ed:b1:bc:a9:58:9d:ae:94:1e:b6:
62:bf:f0:21:5e:3a:e1:4a:f6:60:ca:0d:1d:1d:29:a8:9d:22:
9f:d1:83:16:e3:3f:80:9a:d3:f4:98:58:7d:7e:d1:ac:71:8c:
4d:07:56:2a:07:c7:08:9c:52:91:61:ec:5c:86:e9:2d:4d:14:
43:ad:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:21 2025 by rpki-client