Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C945D8BED811EFA1B8CD4E762E951A.roa
File: F8C945D8BED811EFA1B8CD4E762E951A.roa (raw, json)
Hash identifier: qKsWqkGfDNpQgpaZaAf4zHCH0UBmH0Evahg4jdf0swM=
Subject key identifier: 09:EF:98:9C:3C:70:2F:B5:FF:5D:51:5E:D3:49:01:66:3D:E5:95:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C945D8BED811EFA1B8CD4E762E951A.roa
Signing time: Fri 20 Dec 2024 13:47:37 +0000
ROA not before: Fri 20 Dec 2024 13:47:33 +0000
ROA not after: Sun 02 Feb 2025 13:47:33 +0000
asID: 48031
IP address blocks: 154.216.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72966 (0x11d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:47:33 2024 GMT
Not After : Feb 2 13:47:33 2025 GMT
Subject: CN=67657579-5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:b2:3c:0e:86:72:0d:c7:44:f8:d1:c0:ee:
66:bb:d8:2b:de:3e:b6:f9:ae:b1:eb:17:fe:c6:7d:
72:64:cf:ea:cb:99:43:0c:39:3b:03:20:00:5a:9f:
af:db:27:93:55:4a:be:9d:70:66:b0:1e:4b:50:3b:
84:85:ef:e5:75:5a:a9:d3:10:ac:81:6f:42:71:83:
b4:c5:8e:ba:65:8d:c8:05:55:18:09:e5:41:8d:b3:
bf:af:ab:35:1e:44:ed:89:c5:77:95:aa:29:8d:b3:
a9:60:80:00:af:de:6f:1c:c0:bc:5a:32:b6:c1:02:
3e:46:6f:81:6a:0e:21:73:50:9f:5c:f9:b7:8d:57:
45:31:f2:e8:b9:e3:cf:f3:9b:9b:f3:e5:b1:79:b6:
7e:95:d3:e2:7f:9e:3a:17:92:00:8a:af:5c:da:cb:
6a:88:92:f9:a7:46:65:cf:8d:39:90:e3:ba:74:aa:
0b:c8:fa:f4:89:32:dd:44:34:48:6b:33:e8:ae:16:
d1:b9:b1:f9:dd:67:8b:15:bc:c5:44:e2:5e:0b:9b:
a6:fa:ee:02:93:b8:b5:ec:6b:a0:cc:3f:81:c9:5a:
0f:bf:89:d9:9a:db:f0:41:46:08:8a:94:16:59:c0:
db:12:17:4c:1e:af:b8:cf:1d:7e:1a:c0:3b:c1:7b:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:98:9C:3C:70:2F:B5:FF:5D:51:5E:D3:49:01:66:3D:E5:95:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C945D8BED811EFA1B8CD4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:87:b8:75:7b:95:da:58:d7:63:f4:d6:b5:4f:36:08:a9:64:
ef:2b:56:77:6d:9b:aa:c8:8d:52:ee:0a:a9:f7:44:ae:81:72:
6a:8f:6f:10:d4:73:e9:d6:20:db:03:89:ef:e9:51:50:8c:7b:
9a:2b:60:5a:b7:a9:e6:f5:45:1b:02:94:5a:00:04:b0:b1:0f:
3f:50:28:f9:ad:75:9e:6e:06:fa:6c:b2:3f:bb:1f:64:6b:40:
98:4c:0a:a9:e5:bf:f2:e8:89:9b:08:ce:6c:9d:14:1d:c4:0d:
9b:35:2f:65:f0:30:a9:c0:d2:af:57:97:8c:40:e4:9c:2b:74:
11:57:1e:26:7e:f9:b9:bf:e7:0f:7c:b7:b0:3c:e2:a0:71:72:
19:36:80:81:2b:bb:66:69:44:93:ca:f5:f7:c0:ee:9f:0a:66:
24:92:ee:e3:b2:cc:b6:44:9e:68:be:bb:27:2d:07:44:5b:2c:
02:ad:16:64:52:03:13:d7:81:2f:45:ab:a5:c2:a7:f3:1b:c4:
b9:80:d9:c8:05:a8:67:31:87:49:70:4a:b6:cf:d5:9d:f0:16:
d8:80:b5:02:06:49:71:c3:e8:f4:98:c8:7c:6f:96:e1:4a:82:
52:6c:cc:7f:3c:09:7d:34:c8:85:7c:9d:8e:2c:e4:bf:96:b3:
41:66:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:03 2025 by rpki-client