Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF62CD72BB7711EF939EDF93762E951A.roa
File: CF62CD72BB7711EF939EDF93762E951A.roa (raw, json)
Hash identifier: 700W4LxzPn2V0wkzdjSDWPkgNs/tvrp4SWGwRi+PhUM=
Subject key identifier: 58:ED:AB:AC:17:A7:E6:C6:7D:95:22:9A:5D:DE:A3:3D:CA:8A:31:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF62CD72BB7711EF939EDF93762E951A.roa
Signing time: Mon 16 Dec 2024 06:34:33 +0000
ROA not before: Mon 16 Dec 2024 06:34:29 +0000
ROA not after: Tue 04 Mar 2025 06:34:29 +0000
asID: 142403
IP address blocks: 154.211.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72588 (0x11b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:34:29 2024 GMT
Not After : Mar 4 06:34:29 2025 GMT
Subject: CN=675fc9f9-9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:d1:2c:16:db:4b:0e:04:30:cf:2d:80:4d:
57:92:77:76:32:86:15:ec:9e:fe:8c:2d:47:75:3d:
b3:ab:41:6a:8b:9a:34:e5:24:ac:89:0b:6d:73:b8:
06:97:ea:9d:ae:ca:b8:2a:6f:60:fa:f9:11:f0:11:
b3:36:cf:0a:fa:00:0a:13:d3:a9:fe:ad:30:9a:4d:
2e:62:8f:d0:a4:bc:56:4d:2c:e1:be:9c:d3:9c:d1:
a7:48:07:a1:a7:ba:19:62:4d:af:90:e8:64:bc:b2:
62:e8:65:56:95:a0:d8:2a:a2:9a:4c:18:cf:9d:1b:
70:6c:42:da:71:22:04:f9:53:b0:eb:bb:e6:c9:07:
7c:e7:00:0b:e5:85:0e:51:f2:88:22:bb:8e:b8:53:
d2:a9:17:f8:47:62:e6:54:b7:15:b7:83:dc:2f:0c:
e6:0b:de:dd:58:e7:9b:47:e3:4e:cb:30:b4:c0:e7:
74:ed:b1:07:be:23:8f:ae:25:d9:6f:d2:a1:4a:be:
77:3a:0d:28:80:ae:92:51:9c:a2:d1:6d:16:0f:ea:
61:77:72:ad:53:22:84:df:b0:ea:43:f1:ab:35:f9:
a3:22:10:a4:f5:31:57:b5:a0:21:2d:e9:80:bd:17:
d4:f6:37:ce:ba:63:7b:54:00:c8:81:52:39:37:15:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:AB:AC:17:A7:E6:C6:7D:95:22:9A:5D:DE:A3:3D:CA:8A:31:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF62CD72BB7711EF939EDF93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.14.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:af:c9:c2:b5:9f:39:29:4a:8e:92:1e:44:b1:0b:0a:03:92:
d3:6f:70:55:66:cd:28:a6:92:2d:05:c9:5d:04:b1:5d:72:1d:
32:e4:7f:c3:d6:be:28:ee:7b:68:ab:d1:ae:f1:85:c1:57:5b:
b9:eb:59:1d:c0:b4:1d:1b:59:a3:2f:7a:72:4c:66:e9:f3:d6:
e6:d8:d6:f3:aa:44:08:43:11:b0:af:b6:b7:db:28:a7:39:60:
8b:c5:87:f6:36:7f:4b:38:42:1f:82:91:ba:68:d2:28:66:83:
33:3d:c2:c5:71:d0:c3:82:08:7e:9a:db:1a:86:fd:fa:73:e8:
a1:36:7c:63:1a:69:7c:9e:7c:70:57:8f:49:bb:61:97:67:a9:
9a:0a:57:2a:4a:2b:ac:84:1f:d5:f6:d4:87:8f:c9:1d:9f:53:
60:36:3a:27:ed:2a:d4:ec:a2:59:62:0b:cd:80:b8:e6:dc:45:
f7:60:6d:ba:88:82:fb:b7:bc:58:9a:ef:82:d1:41:11:79:69:
2b:8d:c2:66:a5:88:77:0c:38:78:b0:ef:48:6b:19:fc:2e:87:
d0:6d:21:4a:6d:d2:39:f8:94:9a:fc:27:4a:a6:98:3f:85:03:
02:ad:38:58:85:fe:65:38:f4:dd:e7:0e:b9:15:97:6c:39:d7:
76:96:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:52 2025 by rpki-client