Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0F9B5CBED711EFA7DF1C4A762E951A.roa
File: EE0F9B5CBED711EFA7DF1C4A762E951A.roa (raw, json)
Hash identifier: QV0GhnF1oRiNSDDU9GPD/lLoXf5BJA0x6n+6ZykdoGo=
Subject key identifier: BE:24:EC:F8:D5:E8:B7:26:6E:22:5F:77:DB:A8:02:A2:38:5A:5F:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0F9B5CBED711EFA7DF1C4A762E951A.roa
Signing time: Fri 20 Dec 2024 13:40:09 +0000
ROA not before: Fri 20 Dec 2024 13:40:06 +0000
ROA not after: Sun 02 Feb 2025 13:40:06 +0000
asID: 44559
IP address blocks: 154.209.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72950 (0x11cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:40:06 2024 GMT
Not After : Feb 2 13:40:06 2025 GMT
Subject: CN=676573b9-386e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:13:68:d9:dd:22:4d:35:cf:04:93:c3:5e:
1b:cc:e9:41:4b:3e:47:02:e1:29:88:12:f2:80:43:
02:ca:c8:0f:a6:01:ea:a0:0d:1b:41:9f:cb:ca:33:
57:c2:00:e9:83:9d:8c:2b:ec:87:fd:44:97:84:71:
95:b1:70:00:fe:2a:9b:63:b8:14:0c:fa:69:ce:2f:
77:fb:f1:02:28:02:0a:74:9d:ff:e2:44:a4:64:bd:
66:8c:52:91:ea:e8:7a:77:f7:3b:f6:cc:25:83:44:
75:6c:20:64:34:09:5c:a4:f1:1f:be:d2:d8:e7:c2:
ec:ba:b9:af:2e:6a:60:8c:96:71:02:f4:05:40:30:
76:09:d2:7d:80:cd:b9:03:26:42:d1:64:e4:12:97:
24:7e:bf:6e:6e:9e:39:26:6e:2a:2f:51:21:14:86:
4f:fa:af:1f:21:18:6f:fa:20:b3:f9:be:bd:a4:fb:
fe:62:f9:b1:49:1e:81:ce:aa:04:9c:f4:cd:69:67:
8d:bd:47:2e:45:4c:de:07:65:eb:72:53:e4:14:36:
9a:e3:d6:df:75:77:00:10:12:7c:20:73:8f:08:d7:
b4:d1:29:ac:9e:7a:a5:39:fd:6c:9b:3a:96:26:6e:
be:dc:56:c3:bd:34:42:5e:3f:b3:35:2f:c8:bc:55:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:24:EC:F8:D5:E8:B7:26:6E:22:5F:77:DB:A8:02:A2:38:5A:5F:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE0F9B5CBED711EFA7DF1C4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
74:77:18:ef:da:d2:d4:2b:a8:c5:35:63:dc:e0:41:b6:2e:eb:
45:07:4f:47:11:e6:da:ed:03:68:54:57:7d:fc:83:4a:92:1d:
d0:a1:a6:f0:c8:a6:c3:81:6f:57:d3:7e:9f:35:93:f3:e7:bb:
bb:a3:cd:f3:30:c1:c3:dc:e6:d3:b8:cc:1c:c8:7c:4b:2e:27:
88:e7:bc:1f:ef:ec:2e:b7:4a:08:2f:46:7e:fd:83:43:f2:12:
83:dc:eb:21:22:01:57:ba:98:53:1f:83:31:c8:c3:13:32:27:
64:25:f3:b8:7e:1a:2a:41:a3:31:23:bd:56:07:e4:bb:06:c9:
06:92:f5:81:f4:ae:f2:0d:a1:23:c5:dd:a1:d0:cc:54:42:ed:
35:c9:03:e2:f9:44:3e:12:0e:73:d1:07:e3:8c:18:0a:c7:d2:
49:b3:08:80:c6:96:0e:7d:89:c4:09:7a:b6:6b:fb:dd:0d:0a:
2b:a1:7c:25:1e:08:1f:a5:95:65:3d:5c:54:c8:af:98:cc:a7:
e7:d9:1d:a5:ed:e2:df:7f:66:28:3a:f4:d6:c0:24:4d:57:6b:
d3:24:24:36:85:14:25:04:3b:28:f5:e8:31:de:0e:64:e9:67:
55:fa:01:14:2f:04:ae:b1:60:1e:60:2c:95:c3:73:60:b6:28:
9a:5c:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:52 2025 by rpki-client