Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41D58BABEA811EF8D1B4BA5762E951A.roa
File: F41D58BABEA811EF8D1B4BA5762E951A.roa (raw, json)
Hash identifier: vf0qHSxHvmgT2C2YvJfaFXtEs29rA5+KJSVytDSvep8=
Subject key identifier: C1:CA:DD:FE:AD:8B:04:A7:CA:33:43:26:7A:7A:8A:F1:05:11:B2:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41D58BABEA811EF8D1B4BA5762E951A.roa
Signing time: Fri 20 Dec 2024 08:03:53 +0000
ROA not before: Fri 20 Dec 2024 08:03:49 +0000
ROA not after: Thu 20 Mar 2025 08:03:49 +0000
asID: 328608
IP address blocks: 154.214.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72824 (0x11c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:03:49 2024 GMT
Not After : Mar 20 08:03:49 2025 GMT
Subject: CN=676524e9-b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:cf:0d:ae:1d:e4:30:d0:40:7e:c4:f6:f7:
fc:e5:33:19:9e:4a:62:56:bc:48:c5:b9:9e:13:22:
0e:f8:6c:26:97:11:81:ad:c4:f3:e5:d7:fb:3d:45:
4c:9d:2f:da:d4:13:26:23:5c:3e:51:d0:a6:eb:14:
47:b8:e4:6b:6a:22:6e:1c:0b:12:73:b8:54:0f:c5:
6f:0b:d3:27:b7:bc:50:99:ab:2c:02:74:8d:2d:bf:
d8:8b:8b:4c:9a:4f:31:bb:0e:e3:44:88:bd:45:b3:
fe:65:1a:98:c4:6c:0e:66:76:7d:0c:e7:11:93:36:
e9:b0:f2:f5:21:b3:53:f6:3e:b2:e4:2b:00:9e:c1:
6b:d5:d7:c0:e3:d8:38:27:fa:12:7b:b1:50:3f:67:
27:28:ee:66:26:f9:9e:c1:3f:e2:e8:7c:21:d9:62:
78:84:b7:00:58:06:f4:6a:0c:1c:b5:87:f1:dc:a0:
02:d7:81:1c:97:0b:9a:57:14:c0:4e:94:ff:93:29:
af:5e:f3:eb:8b:9d:70:2b:5a:09:e2:5b:81:f7:f8:
28:8a:5f:4f:4a:41:f2:f6:ee:f0:f9:a1:1a:14:53:
78:8b:57:44:56:cf:eb:90:3b:7f:a3:cb:3c:57:b1:
3a:74:52:5b:1e:59:3e:51:16:79:2e:22:ee:f1:f2:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:DD:FE:AD:8B:04:A7:CA:33:43:26:7A:7A:8A:F1:05:11:B2:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F41D58BABEA811EF8D1B4BA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.222.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ec:53:ba:4b:41:79:fc:73:0b:28:92:c1:0f:b3:dd:df:de:
f2:77:67:9c:ff:39:1f:9f:95:6a:9b:db:0b:69:8e:a7:1e:46:
18:38:c7:70:d8:7a:bd:09:54:e8:6f:bf:6d:b1:ae:66:51:fd:
6e:1c:a6:6a:e0:6e:d6:d3:b3:84:6f:b5:fa:34:74:84:32:ec:
98:e8:8b:5e:90:e7:29:67:11:9c:ed:55:74:c8:d9:fe:91:82:
ed:b7:71:f0:35:c8:6d:05:d2:4f:73:f8:80:16:9d:81:46:e6:
23:41:bb:05:01:e7:1a:eb:fe:3b:6b:a6:9f:8f:74:39:83:55:
1d:97:4a:28:23:c8:c1:03:1a:90:dd:3b:9e:fa:54:13:9a:83:
56:8d:c0:ee:be:fe:ab:1e:46:75:5e:24:70:58:e6:d5:2b:15:
a1:1d:5e:aa:14:4c:b4:83:2e:12:e5:95:8a:f1:0b:75:e5:e2:
38:67:74:20:6b:fc:41:ed:ab:82:8c:28:f6:73:88:d5:7e:c5:
da:81:f0:96:52:9f:92:71:ca:a4:8e:fa:c4:e3:33:5e:1f:20:
d6:9f:fe:36:3c:8d:78:36:ed:85:36:24:57:8a:55:3c:40:00:
49:ca:61:f9:bc:38:9f:d2:87:38:9c:e5:60:01:d9:ab:f4:dd:
5e:06:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:33 2025 by rpki-client