Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B415ABED911EF9AEB1753762E951A.roa
File: 8F9B415ABED911EF9AEB1753762E951A.roa (raw, json)
Hash identifier: GFVEt3bQ9E4G2O1WCtBmyIgI6ro4EPn42oDjOFaw2V0=
Subject key identifier: AF:01:BA:53:86:06:F0:9D:A9:EC:B8:6B:13:D7:98:1F:42:D9:90:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B415ABED911EF9AEB1753762E951A.roa
Signing time: Fri 20 Dec 2024 13:51:50 +0000
ROA not before: Fri 20 Dec 2024 13:51:46 +0000
ROA not after: Sun 02 Feb 2025 13:51:46 +0000
asID: 48031
IP address blocks: 154.222.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72978 (0x11d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:51:46 2024 GMT
Not After : Feb 2 13:51:46 2025 GMT
Subject: CN=67657676-d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:5c:c4:4a:ac:99:b2:64:c6:b6:56:d1:4e:
f7:05:91:59:0f:26:ba:33:81:b5:78:e7:ff:f0:50:
40:b8:dc:03:af:4b:33:5b:90:2b:03:3e:01:93:a6:
37:70:05:0a:16:3e:d6:cd:63:ff:a5:4e:eb:55:7a:
b9:b6:a6:cb:f9:d0:e6:fd:09:e0:57:c7:90:08:74:
79:af:90:12:fe:b3:c4:d5:be:3d:c7:66:0c:57:d2:
dd:a5:8e:b4:82:79:0c:9c:f7:8b:fe:7f:a5:d3:da:
8b:c7:26:6d:e6:68:42:1b:62:99:2d:4c:bb:d3:b1:
1a:72:ea:7d:03:c1:0e:4c:80:13:f1:13:37:03:c9:
94:ad:0d:90:d7:40:1c:15:57:4c:4c:13:f8:4f:3f:
02:e5:cc:2e:36:ca:fa:27:7a:44:06:0a:c5:2f:82:
e9:2e:75:62:63:b2:be:8d:1b:2e:a1:67:95:ed:40:
22:da:ec:c2:52:28:96:47:64:8e:15:ef:e1:6a:d2:
1c:c7:91:c0:fa:f9:f5:97:ab:39:6a:82:e6:ab:50:
4f:6e:1c:da:09:49:4d:1d:9f:cc:14:47:69:7c:8f:
51:01:48:35:be:59:52:a8:a3:7e:5f:2c:84:62:f5:
0e:cb:46:74:e7:70:ea:59:bf:33:7e:3e:eb:59:50:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:01:BA:53:86:06:F0:9D:A9:EC:B8:6B:13:D7:98:1F:42:D9:90:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B415ABED911EF9AEB1753762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:02:0d:6e:83:c4:fd:5b:ed:d7:1a:2a:57:39:bf:79:6c:9b:
8f:22:4b:bf:1a:e4:3e:8d:61:d9:b5:52:42:ec:b7:e1:70:5f:
00:e4:1e:d7:2c:9e:77:6c:9a:ae:5c:9f:2e:54:93:27:af:bf:
18:14:ba:86:a2:ef:38:1c:44:95:cb:e4:60:eb:11:94:b8:99:
36:d6:33:62:3a:d0:6f:e3:8e:85:81:78:3c:ce:10:ee:c7:4f:
3c:66:e1:0e:e3:49:57:6a:ea:19:88:cf:fe:d0:9d:d5:75:e2:
eb:f9:59:05:c3:c2:31:0c:c4:f2:ab:c6:6d:76:48:34:64:db:
0e:9e:a4:36:9e:10:09:bb:b2:7e:32:69:e5:c1:f6:4a:0f:68:
b5:d5:5c:80:fa:78:c2:8c:43:7d:41:92:53:89:a2:bd:28:01:
e6:63:0f:a7:21:13:b3:f9:59:6b:a3:d1:44:11:bf:a9:76:40:
9f:96:79:20:42:41:f9:c9:79:9c:3f:00:0a:57:6f:c4:9f:75:
79:5c:82:ef:89:86:2e:38:a8:77:03:e2:f0:15:0b:95:43:39:
4b:f3:91:fe:f2:11:c8:fc:00:81:c0:c3:bf:e9:6e:54:cf:1a:
99:df:cf:78:b0:61:8c:cc:1e:3c:8f:f2:82:9f:99:e1:7e:39:
88:6c:e8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:17:14 2025 by rpki-client