Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFFCE7CBEA811EF801B65A3762E951A.roa
File: ACFFCE7CBEA811EF801B65A3762E951A.roa (raw, json)
Hash identifier: 9pQ35qF3i4DoztreOrvk5bLGoJ8K3PCquwvbdGuIBg0=
Subject key identifier: FB:A3:62:A3:5F:ED:DD:69:DB:B9:55:25:27:FA:6C:F0:11:10:86:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFFCE7CBEA811EF801B65A3762E951A.roa
Signing time: Fri 20 Dec 2024 08:01:54 +0000
ROA not before: Fri 20 Dec 2024 08:01:50 +0000
ROA not after: Thu 20 Mar 2025 08:01:50 +0000
asID: 328608
IP address blocks: 154.214.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72820 (0x11c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:01:50 2024 GMT
Not After : Mar 20 08:01:50 2025 GMT
Subject: CN=67652472-06bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:3e:b8:51:b3:c9:45:49:79:93:4e:65:62:
45:ed:91:8f:d3:4f:9a:d1:42:d8:55:02:3b:14:34:
af:87:13:ac:cc:58:ea:cb:32:35:65:8e:85:c0:7e:
c9:6a:90:8f:78:b7:28:3e:e6:bb:dd:09:52:64:51:
79:d5:dd:ae:4a:a8:e5:19:c3:c7:fe:32:e1:de:ec:
a9:d3:60:b5:1a:3c:12:39:29:02:5e:5a:98:64:54:
d6:8d:85:c5:ac:2f:2d:00:27:c8:2c:07:0e:47:9d:
63:e6:a0:fd:90:30:fd:fd:1a:11:a7:34:97:1a:b5:
67:db:04:6a:fa:57:36:e1:6c:3e:a3:44:3f:94:41:
25:b7:ca:ee:f9:a4:64:00:7a:6d:f4:6f:b8:0f:83:
a4:60:4d:32:81:65:d5:b3:0d:2a:85:2f:53:52:ac:
55:2d:f9:ef:6f:57:0e:49:c1:f0:11:33:2c:cf:85:
97:ed:f7:61:7d:f3:d6:c3:e9:ba:da:6f:c9:2e:03:
73:ea:d2:02:06:66:fb:d6:3b:0b:7b:00:1f:b7:18:
f8:4d:88:b2:25:03:2a:6f:44:23:34:b8:a3:68:22:
0b:a9:c6:21:b8:27:24:95:6e:17:21:8a:da:97:67:
ca:a8:70:db:e1:4a:e2:cb:2c:7e:0a:78:b3:34:b4:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:62:A3:5F:ED:DD:69:DB:B9:55:25:27:FA:6C:F0:11:10:86:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACFFCE7CBEA811EF801B65A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5c:d7:38:12:ba:f2:5f:e6:3c:55:58:a7:4b:09:98:84:54:
77:0c:7b:99:54:c3:38:34:b0:53:84:e5:39:69:a8:89:40:8e:
c5:3c:9d:10:3e:1b:13:b6:cb:49:1f:40:11:bc:39:ac:fb:be:
39:e0:8d:c1:e1:66:20:d0:7e:a0:8e:bb:54:2d:71:ca:c0:f5:
19:52:2a:2b:d7:b7:ac:2a:89:13:e6:26:02:e9:89:dd:8a:0d:
a7:66:e1:6c:64:81:de:74:b9:2a:5b:65:7f:a2:a9:78:6f:e4:
63:3a:2e:dd:fd:52:95:50:39:e6:c8:76:1f:d9:78:7c:c8:76:
c2:77:fe:b2:24:69:1b:54:ca:6d:73:5a:f6:eb:a8:8c:f9:a1:
56:0e:77:e3:80:20:de:54:99:dd:fa:b2:7e:09:61:a8:cc:97:
12:25:36:ac:b8:68:50:5d:60:84:9e:de:ac:ce:e4:15:f2:f5:
2f:8e:6c:a5:74:67:9d:24:02:98:53:75:a0:19:78:b5:3d:2d:
2c:a4:0c:57:78:e8:d3:24:ad:59:12:ca:39:1d:cb:1b:fc:45:
9d:e2:8e:9e:e4:a5:9e:e6:12:a6:71:52:af:ec:4a:42:b0:66:
26:95:e0:7e:bb:2f:a1:40:10:fb:92:70:dd:4a:b7:87:c7:61:
9e:e8:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:23 2025 by rpki-client