Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B36E6BEB611EFACD4917A762E951A.roa
File: 8A0B36E6BEB611EFACD4917A762E951A.roa (raw, json)
Hash identifier: 1RBpkbVtytK11qulftCZgNX7OaM4ButDm00jVAKUZLI=
Subject key identifier: C1:09:D2:5D:3D:41:4F:90:E9:4B:17:4A:E0:DA:F4:48:BF:D2:B8:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B36E6BEB611EFACD4917A762E951A.roa
Signing time: Fri 20 Dec 2024 09:41:08 +0000
ROA not before: Fri 20 Dec 2024 09:41:04 +0000
ROA not after: Sun 02 Feb 2025 09:41:04 +0000
asID: 202656
IP address blocks: 154.222.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72896 (0x11cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:41:04 2024 GMT
Not After : Feb 2 09:41:04 2025 GMT
Subject: CN=67653bb4-61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:9b:e9:96:73:41:df:d5:91:d4:b6:aa:95:
a7:56:c5:13:11:e4:f5:84:d5:ac:7e:d4:b4:b8:26:
69:42:e0:af:d4:4d:ff:5e:f6:51:2c:e0:ec:96:bd:
df:42:d3:ab:ff:7b:d8:e7:b4:64:26:e8:8e:cb:31:
f8:47:b1:86:aa:ef:40:9b:1e:be:df:e3:89:ce:ec:
f2:46:d9:3a:99:48:fe:e2:c9:58:c4:f5:d6:85:3c:
ff:c8:6f:2b:d3:71:3b:57:10:71:fb:a7:42:70:9e:
2d:c5:a7:d9:87:7c:82:42:ae:d1:28:6d:e2:3b:2f:
6a:01:97:5b:2a:6c:2a:af:c0:db:38:a0:ca:90:59:
7e:86:c1:4d:bc:c9:55:4c:c7:2a:98:bb:44:8a:e5:
69:f1:fd:8a:7a:1f:ea:35:d7:dc:df:25:ed:51:52:
e3:47:8c:e4:97:43:56:7f:b6:50:bf:ec:a9:1b:a7:
b2:00:10:bd:cd:1b:6b:2b:ee:76:7a:e6:19:6f:d1:
fc:ea:e5:31:8a:a5:c7:3a:d5:93:b5:37:82:a7:28:
ad:10:b5:34:27:3f:2c:b6:b5:36:85:b4:0b:54:7b:
3c:cc:b4:f7:cf:07:44:f0:21:dc:e9:0d:9e:17:21:
ed:d6:22:36:03:93:8b:fe:cc:dc:e4:70:8c:ff:7c:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:D2:5D:3D:41:4F:90:E9:4B:17:4A:E0:DA:F4:48:BF:D2:B8:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B36E6BEB611EFACD4917A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.1.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:90:3d:4e:26:fc:f0:7c:92:69:22:fe:3d:7b:ce:c5:41:92:
3f:fa:82:4a:5d:e3:ae:4c:52:9b:16:d9:ab:e1:80:2d:a0:0e:
97:52:56:f3:00:95:7b:82:1b:c6:53:55:be:95:0c:47:fc:bf:
08:0f:f5:94:fb:7a:c7:c5:b8:8e:40:8a:1b:8d:1a:cb:80:c3:
98:c6:a1:9e:eb:c2:c0:14:9a:f9:df:cc:d8:69:a7:86:47:79:
90:d9:32:64:d4:95:63:6f:e6:44:d2:54:15:d3:ff:f2:00:03:
05:3c:dd:1a:12:fe:71:1c:f3:9f:9c:4e:20:fd:a5:d1:90:75:
80:ce:a9:d0:d5:fa:19:81:db:6c:ab:a7:2e:29:e9:9e:44:8d:
be:da:3f:09:41:d9:aa:6a:51:d1:67:92:24:13:13:e0:0d:4b:
b9:33:2a:a1:5d:94:6c:e8:62:9a:02:7a:c6:2d:fc:5f:de:ee:
7b:bd:ca:b0:a0:6f:44:f9:b1:51:48:12:b7:0d:5e:a6:ec:99:
9e:ba:b8:d9:bf:51:9e:18:bb:f7:b0:aa:50:63:d8:c9:f5:4d:
d4:74:4d:27:e1:f3:93:07:1b:be:7d:f5:16:24:a0:f6:c3:95:
5e:6a:3f:00:c8:01:ae:06:97:2f:c5:57:95:b6:f6:b6:57:a7:
a2:7e:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:15 2025 by rpki-client