Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEE365CDB1A11EFBE88BEAF762E951A.roa
File: 9CEE365CDB1A11EFBE88BEAF762E951A.roa (raw, json)
Hash identifier: Hi2YQQInuHfUpxF2xQ9jyLd1xTbNePEUI1iM0Kawbhc=
Subject key identifier: DE:26:43:A4:72:3D:8F:91:68:6C:34:81:A1:D1:3F:11:53:76:91:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014956
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEE365CDB1A11EFBE88BEAF762E951A.roa
Signing time: Sat 25 Jan 2025 12:48:02 +0000
ROA not before: Sat 25 Jan 2025 12:47:58 +0000
ROA not after: Mon 03 Mar 2025 12:47:58 +0000
asID: 202656
IP address blocks: 154.219.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84310 (0x14956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:47:58 2025 GMT
Not After : Mar 3 12:47:58 2025 GMT
Subject: CN=6794dd82-8add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:2b:85:eb:e6:58:d5:7a:ee:9f:fc:ed:6e:
fb:96:4f:35:48:1c:a4:ff:2b:0a:96:98:95:2c:7c:
9d:7c:29:b5:24:4f:26:d4:12:63:69:b0:dd:b5:b1:
fc:53:fc:09:c0:8a:4c:d1:f1:48:26:28:cf:88:7a:
ce:24:ea:36:1b:57:d2:f2:9b:78:71:d6:0b:0c:8a:
30:f4:e8:a5:8e:16:3d:9e:2f:cd:39:fd:61:7e:bd:
8c:f3:59:85:68:84:54:a7:38:d7:fc:4d:68:c3:54:
e0:dc:6e:02:51:4f:1f:16:15:c9:94:0f:22:d8:1c:
05:a3:e4:cf:92:e2:f1:26:7e:aa:10:d4:6c:7d:45:
d2:7c:8a:7b:ba:c9:1e:1e:45:da:90:64:19:11:70:
d9:40:3d:4e:81:34:0f:90:ae:72:fc:4c:2b:b1:53:
cb:46:5c:d0:2d:5a:e5:0f:df:43:61:2f:7a:18:53:
e9:e9:53:ac:20:57:89:b9:9c:40:99:2f:1c:93:e6:
65:98:d7:30:e6:a1:4a:7c:a7:b6:d2:7d:d8:58:ed:
15:da:8e:c2:88:65:b4:84:fa:92:27:56:2b:ee:95:
db:01:d8:ed:c1:76:73:16:94:79:3c:b5:ee:c8:f2:
25:4d:65:4f:ed:b3:a4:64:b5:e0:3b:bd:67:d3:0b:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:43:A4:72:3D:8F:91:68:6C:34:81:A1:D1:3F:11:53:76:91:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEE365CDB1A11EFBE88BEAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:47:ef:99:ec:c6:ac:7b:f4:6d:14:0c:d5:2b:00:1f:7e:dd:
bc:10:6b:71:d1:a2:17:f0:25:27:c4:58:b0:0c:09:2f:6b:e6:
a1:96:4e:ec:37:06:cf:d8:ad:cb:5f:0c:ca:28:62:4c:89:c2:
ae:c6:9f:83:fc:8c:08:cc:9b:1d:63:fb:da:36:97:b6:57:18:
0b:e1:ad:d1:26:8e:af:5c:cd:8b:a2:9a:dc:85:64:1a:9e:da:
cc:16:0c:c8:c5:1b:c5:1a:9e:b8:8f:11:2e:f5:53:67:be:07:
06:5e:a4:99:81:c3:a0:e1:89:19:3d:51:af:21:f1:60:12:77:
5f:c9:54:df:b3:a7:ce:c8:17:20:05:b4:09:a5:af:8e:96:18:
7d:c2:02:2c:6d:ae:42:f1:75:1c:6b:3e:b2:b7:b0:e3:76:6f:
cf:12:35:e4:cf:97:d9:42:cf:b1:72:f5:c3:9c:dd:af:b8:68:
80:9b:f6:c0:36:fe:7c:7a:c1:f3:f6:72:f5:f0:89:0e:7c:1b:
e5:63:42:f1:ec:5b:56:e7:db:bd:49:67:6c:ca:4a:7e:3d:20:
31:d6:d1:35:87:ed:8b:61:31:fc:00:01:f8:d3:ea:49:9f:d9:
5c:06:32:b1:48:61:42:20:a2:eb:b0:41:62:73:89:cc:92:e5:
64:92:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:37 2025 by rpki-client