Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA563C5ADB1E11EF99E0454B762E951A.roa
File: AA563C5ADB1E11EF99E0454B762E951A.roa (raw, json)
Hash identifier: 4GxjYQ2aSBZ3DLvDgW64k9VCXpyMsSvw/XQQIxe4HoI=
Subject key identifier: F2:C7:FB:7A:37:6F:FD:97:4C:D4:51:9D:A6:99:31:41:A4:1A:2D:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA563C5ADB1E11EF99E0454B762E951A.roa
Signing time: Sat 25 Jan 2025 13:17:03 +0000
ROA not before: Sat 25 Jan 2025 13:16:59 +0000
ROA not after: Mon 03 Mar 2025 13:16:59 +0000
asID: 44559
IP address blocks: 154.209.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84336 (0x14970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:16:59 2025 GMT
Not After : Mar 3 13:16:59 2025 GMT
Subject: CN=6794e44e-e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a6:71:01:2e:e6:f2:d4:66:c8:fe:1f:e4:62:
19:7b:20:8a:10:7b:81:a2:25:d7:54:12:e5:1a:31:
80:c8:00:69:b9:85:2b:bb:d4:3a:52:e4:f4:18:22:
fd:3d:46:59:c4:d4:d9:e0:5e:c0:33:4e:b1:b1:2d:
6d:79:67:7d:2a:a3:df:ca:ea:8b:e2:77:58:ec:76:
53:c2:bf:af:97:30:97:26:b7:e5:29:05:c6:e6:7b:
96:00:9b:04:ec:be:95:62:7c:36:61:79:5e:94:6d:
96:2e:48:7a:bb:e8:e2:da:d8:6c:0d:1a:b5:95:59:
61:e1:e0:41:83:d7:6b:90:d9:bf:cc:cf:cd:b8:8d:
e3:db:93:e7:7b:1f:4f:dc:4c:64:9d:70:1b:6e:90:
d5:ed:fb:77:ce:5a:f3:d5:2e:3c:b6:41:d4:93:66:
c2:b6:1b:58:e5:46:7a:f2:00:cf:2a:26:81:2b:bf:
0c:ab:6c:45:e2:09:18:39:5a:0a:ae:8e:53:3e:9a:
eb:0b:ec:04:21:c7:af:00:4e:9b:60:4f:5f:a1:72:
6c:24:ce:ad:80:10:93:28:d2:4b:24:6b:87:82:c1:
51:2e:a9:b7:51:62:8f:2a:a0:52:a8:e8:46:87:e8:
c5:e6:22:da:5e:59:c6:55:a1:62:5f:61:05:87:23:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:FB:7A:37:6F:FD:97:4C:D4:51:9D:A6:99:31:41:A4:1A:2D:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA563C5ADB1E11EF99E0454B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ed:20:97:aa:97:0e:77:b5:eb:68:a9:8c:80:eb:dc:13:3c:
db:58:b7:3c:46:9c:f7:3b:a7:ff:48:f9:78:e9:bf:f0:d7:44:
10:d1:6a:87:9e:03:0e:29:e9:93:27:b8:14:a7:35:d4:e3:67:
29:86:33:f9:30:46:34:ab:61:ba:d9:f3:f1:6b:bb:88:47:1e:
99:6d:85:c9:e4:b4:59:f6:69:c3:0a:ee:39:10:d4:06:2a:b9:
74:e0:b5:40:ac:ef:69:e8:fa:79:42:d1:62:63:2e:01:e6:68:
8c:1a:a7:c1:75:ad:21:07:d2:56:70:e9:67:e0:15:ff:59:60:
ab:96:19:fd:f6:e6:66:c7:e8:73:f8:41:92:66:c9:33:04:dc:
9f:39:3a:a7:ad:a6:f0:da:28:0d:f7:63:c3:f8:b4:0f:db:fb:
86:b8:37:8a:57:1d:ad:19:4d:32:a8:3d:8d:ce:be:be:27:99:
17:dc:d5:e9:3d:35:8a:85:8c:ee:86:18:e2:1d:36:23:f7:80:
2b:65:a4:5f:a1:48:ee:d6:f3:eb:72:cb:1d:cc:4a:e0:67:d5:
fd:df:f2:4d:bd:4d:d5:f1:9d:3a:ef:74:49:bf:64:75:b5:0d:
44:3f:54:e7:a9:13:1c:b5:4f:59:67:ce:1b:00:f4:97:f7:65:
3d:d5:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:49 2025 by rpki-client