Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1CE27F6C47511EFA153BE64762E951A.roa
File: F1CE27F6C47511EFA153BE64762E951A.roa (raw, json)
Hash identifier: rMI127lrEIWuBbbvX2vNdzBgTl05QRWxhTH4F22dBko=
Subject key identifier: 66:96:E1:2C:7D:EA:50:AB:6A:E7:E1:CA:B3:EF:A6:60:F5:47:BF:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012ACA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1CE27F6C47511EFA153BE64762E951A.roa
Signing time: Fri 27 Dec 2024 17:13:52 +0000
ROA not before: Fri 27 Dec 2024 17:13:47 +0000
ROA not after: Sat 01 Feb 2025 17:13:47 +0000
asID: 203020
IP address blocks: 154.200.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76490 (0x12aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 27 17:13:47 2024 GMT
Not After : Feb 1 17:13:47 2025 GMT
Subject: CN=676ee050-c985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:20:a6:1a:77:bf:06:a1:be:0e:3b:35:7b:
4e:6b:fe:43:a4:7b:6a:d9:5d:92:6c:99:a7:8d:77:
1e:16:da:22:5f:8c:37:0a:41:36:a5:bf:1a:61:a6:
d5:6a:a1:97:74:11:11:5e:78:72:22:69:0d:cf:9f:
3d:9c:e4:73:a6:3c:f3:19:ae:2a:a7:55:cf:34:ad:
68:03:0b:7e:e9:7f:c9:aa:06:52:67:10:11:b8:cd:
c4:de:3d:33:54:99:7a:16:a7:32:c5:30:86:45:ed:
bf:4c:49:81:8e:cc:c7:ed:61:1f:52:c1:c0:02:6f:
f8:65:0a:ac:13:c5:17:8e:3e:57:8c:5d:1f:70:6e:
89:34:be:a4:dd:62:d5:34:d5:0f:61:f8:5b:47:2e:
ba:e1:4f:61:4d:95:74:c9:76:7f:86:1f:7d:33:47:
c1:54:86:6c:fc:d7:7a:a3:a4:11:08:1d:ac:70:62:
5a:0d:d9:4d:d3:dc:1a:ad:88:8c:1a:a6:2e:f1:f9:
ff:76:4e:3b:93:e2:0d:3a:22:d8:3a:38:3e:34:4c:
09:70:64:37:88:f0:12:9c:05:97:af:32:77:06:8c:
4b:65:0d:ab:ff:e0:68:bf:65:32:e9:3c:7d:bd:ab:
f1:84:23:02:f2:0b:df:26:a4:41:d2:5c:d5:3b:ff:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:E1:2C:7D:EA:50:AB:6A:E7:E1:CA:B3:EF:A6:60:F5:47:BF:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1CE27F6C47511EFA153BE64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f7:43:35:85:69:be:0d:6c:f7:45:5f:88:a6:4e:46:73:10:
d2:c5:ff:67:bb:7a:8e:1e:36:41:81:24:41:27:45:62:86:51:
9d:fe:74:a4:ba:94:26:0c:51:96:6b:ee:34:a4:20:48:80:2c:
fa:95:e9:fb:5e:56:70:4c:37:a3:5e:0f:3b:ee:38:cc:dc:9b:
28:75:84:0a:cc:03:37:e4:6a:1b:82:79:90:68:ad:79:0b:25:
8e:4e:28:54:58:7a:4b:76:63:24:2c:a5:7c:40:b6:54:89:9e:
cf:c2:f7:d8:2a:73:70:dc:81:92:34:c7:25:f8:53:ba:52:57:
04:e6:60:7e:66:4f:f1:94:9f:24:b5:d6:23:77:23:59:0c:5e:
13:2c:9f:da:59:f1:1a:5d:8e:c1:fa:99:bc:24:c5:90:cd:1e:
f6:99:63:b1:96:45:3d:d1:f9:f5:71:1d:b3:8b:28:2f:32:f7:
47:ea:c9:e9:5f:6d:97:52:19:2b:10:f5:c2:28:28:bd:4a:8f:
1d:19:29:2d:bc:ec:61:28:ea:d0:83:d6:2d:ce:54:ee:62:8e:
89:fc:b4:bc:66:f5:72:ab:e4:e5:60:09:a8:b7:cf:dc:19:30:
89:5d:c0:6b:d7:e1:de:9b:57:01:ee:60:5b:bd:f7:7d:d7:85:
fd:04:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:35 2025 by rpki-client