Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBBF80EC2A311EF835A3155762E951A.roa
File: CCBBF80EC2A311EF835A3155762E951A.roa (raw, json)
Hash identifier: YpsktJuckvOkPX86QeepvVl6+32lGZ8ALnMbNzysoo4=
Subject key identifier: E2:C8:71:93:5C:52:A1:CD:D0:5E:91:E9:89:1C:F7:A4:45:8A:5B:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012550
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBBF80EC2A311EF835A3155762E951A.roa
Signing time: Wed 25 Dec 2024 09:37:04 +0000
ROA not before: Wed 25 Dec 2024 09:37:01 +0000
ROA not after: Thu 13 Feb 2025 09:37:01 +0000
asID: 138915
IP address blocks: 154.203.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75088 (0x12550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:37:01 2024 GMT
Not After : Feb 13 09:37:01 2025 GMT
Subject: CN=676bd240-4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:e4:ca:41:fa:18:70:d7:ef:8d:23:d6:50:
f6:03:08:59:ab:37:82:ab:8c:95:25:76:a1:cf:a2:
0d:01:0d:87:72:d8:df:8b:69:65:59:3a:c8:9b:d5:
d7:21:74:2e:b7:c8:42:ac:ef:e7:60:34:29:ab:7e:
13:8d:59:b5:db:60:db:be:a9:51:3b:3e:46:e0:04:
d3:a5:9b:79:aa:ec:91:ee:00:1e:5d:46:2d:61:ef:
3c:af:68:e2:d1:cc:19:75:99:e6:61:03:f1:c1:be:
ba:d7:e4:f8:9d:44:74:87:17:17:e8:c2:ae:da:1b:
67:9d:b0:a1:04:f3:89:45:ae:a1:a8:7f:f0:72:c2:
7f:31:80:a2:b3:38:a1:6d:e3:dc:03:cc:61:0a:54:
83:33:53:fc:0f:97:c8:f6:bd:39:0e:fb:db:ae:c6:
58:d2:a0:31:dc:a6:5b:72:b5:e2:d9:bc:59:92:da:
34:fe:4f:08:2f:ac:8f:d0:6f:7c:27:1f:13:dd:ad:
89:6b:6b:88:5d:8c:e9:a9:b1:13:55:b3:ad:02:16:
6f:1b:f8:9c:ad:5f:34:21:11:ab:b2:b9:7d:58:49:
34:d2:79:0d:53:ac:af:41:70:c7:58:48:e1:8d:5b:
be:10:09:0d:da:a8:1f:c4:cc:fd:bc:9d:3c:9c:4b:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:71:93:5C:52:A1:CD:D0:5E:91:E9:89:1C:F7:A4:45:8A:5B:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBBF80EC2A311EF835A3155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0d:7d:d8:13:ca:04:4c:2d:cc:5c:2a:44:53:bf:4e:8f:94:
9e:1e:95:84:81:df:58:59:1a:51:be:cc:1c:63:65:60:a9:56:
a0:20:6d:47:5b:a5:d9:b6:42:7f:2a:30:c9:f0:7c:35:c9:cc:
d7:77:89:46:bd:e5:5a:b5:93:d0:9b:d5:35:84:e7:bc:3e:6b:
95:b1:7c:8c:62:66:2e:7e:69:c2:cc:c6:1a:cb:82:49:5e:3f:
86:71:ed:3b:b3:d6:e1:f7:70:88:b5:f2:51:de:a6:39:2a:69:
9c:c7:40:dd:a9:2e:af:5a:11:f2:7f:65:5f:4c:f7:c7:a0:d1:
9b:5f:b3:b4:94:86:ca:5f:41:93:fb:07:f6:89:7a:26:f9:7e:
e0:b5:76:13:7b:b5:77:ba:6e:79:d4:a9:af:a2:51:2d:56:ef:
66:34:c5:cf:b1:eb:7f:d7:3b:22:52:bf:c1:da:91:13:98:f4:
4c:4e:46:1b:c6:b8:c9:d8:96:79:39:af:10:9c:44:a0:b9:0a:
ac:ad:97:5e:d7:bd:04:76:08:bb:b0:c0:d1:8d:5e:a9:ff:ad:
6a:4b:8b:7f:23:77:b1:5b:9f:9f:c3:f3:8f:e5:02:7a:bf:66:
a0:ca:2a:64:de:2a:b6:cc:f1:a7:b3:80:ba:ac:ed:90:51:e9:
f8:b9:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:20 2025 by rpki-client