Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAF290CB21311EFAA88C57F762E951A.roa
File: AFAF290CB21311EFAA88C57F762E951A.roa (raw, json)
Hash identifier: XN+UTAdCOAr4xN4J3/SB0GT118040EFyd3IkRHjYMWA=
Subject key identifier: CC:2F:62:01:6C:40:21:DD:B4:F9:CD:31:F1:8D:9B:DC:8B:CA:BA:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAF290CB21311EFAA88C57F762E951A.roa
Signing time: Wed 04 Dec 2024 07:45:09 +0000
ROA not before: Wed 04 Dec 2024 07:45:06 +0000
ROA not after: Sat 01 Feb 2025 07:45:06 +0000
asID: 139490
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71624 (0x117c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:45:06 2024 GMT
Not After : Feb 1 07:45:06 2025 GMT
Subject: CN=67500885-2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:13:37:04:72:31:7b:f2:a9:87:00:06:36:
32:c3:4d:6f:db:5e:5e:4d:a5:8c:c1:01:7c:39:cc:
fd:40:23:bb:f9:b0:29:d4:e8:25:91:e7:7d:28:99:
26:04:8f:50:b9:41:f3:ec:5e:f1:12:dc:dc:46:c1:
0c:dd:4e:49:57:3a:ac:fa:61:a6:76:55:55:40:62:
9a:e2:22:80:3d:9b:b6:a5:fd:43:7d:e0:c5:c0:ba:
15:b0:58:5d:b0:a9:1a:11:5f:80:58:9d:02:1a:5b:
9f:bf:4b:ad:6c:dc:51:b2:d9:a3:4d:44:3e:ea:66:
30:cd:20:1b:6a:6a:6a:2e:40:50:3c:86:5b:1e:4a:
35:cb:56:c4:d5:98:29:65:9e:0c:90:6a:dc:54:6c:
ef:6d:dd:94:c9:79:9f:a5:b6:f7:8d:3d:6e:2a:ef:
ac:48:b8:98:48:9c:01:9c:74:41:47:79:66:04:d5:
99:5f:45:cd:e5:df:4e:09:92:e1:3e:b8:52:0f:49:
80:18:14:65:71:7d:ba:c1:b3:42:b3:9e:26:76:46:
a9:d0:2f:43:0c:29:75:03:ba:19:c3:bd:bf:4c:bd:
fc:0e:88:bc:7f:c6:b9:b6:03:0b:d1:81:ff:78:5b:
fd:eb:43:6b:88:f9:1a:49:83:5a:45:b6:35:a9:9d:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:62:01:6C:40:21:DD:B4:F9:CD:31:F1:8D:9B:DC:8B:CA:BA:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFAF290CB21311EFAA88C57F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2e:6b:44:92:31:d5:63:b1:8a:87:5b:c4:26:bf:15:86:28:
dd:bb:af:2b:7d:42:00:b8:16:a5:61:44:0b:c2:c5:cb:c8:75:
64:13:15:0e:73:c7:10:85:3e:2c:78:47:08:4f:15:1f:fb:bc:
db:ce:df:67:93:df:e7:41:5a:6c:52:68:55:36:19:82:a7:2a:
49:fb:93:c4:11:42:f7:5b:e9:4e:47:21:07:37:cb:71:5f:a3:
b3:8e:75:26:40:28:91:c8:35:73:31:34:f3:4f:f7:94:7c:24:
2e:98:2f:ba:2b:fe:09:87:68:e3:a5:67:7b:7e:92:31:88:09:
61:70:1b:2c:bf:b6:ce:7d:65:4a:a3:9c:1c:2d:2e:d6:28:62:
c5:f1:39:a4:0e:83:d2:3e:38:4c:52:e7:c2:ca:1f:d1:3d:8a:
26:f4:e2:d4:c9:d7:ba:93:73:f5:e5:29:ac:97:a0:19:8d:1d:
6a:cf:81:90:8b:c5:27:0b:7e:be:0d:8f:ea:db:b3:58:f4:a4:
21:91:0d:69:5f:5f:22:5b:b8:c7:04:1d:19:e4:fc:2d:2c:3d:
bf:99:44:d1:99:88:c6:d5:ad:9c:58:2a:b1:d5:cf:da:cf:78:
d1:80:7f:40:91:1f:24:81:19:07:82:bc:b3:69:38:7c:3a:9d:
11:4e:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:17 2025 by rpki-client