Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB775F9CBEA911EF822FD1AB762E951A.roa
File: FB775F9CBEA911EF822FD1AB762E951A.roa (raw, json)
Hash identifier: Mq6KleeUnM54wqq/vlW4wGRd9DJBqGRA0VBFaGMkh9g=
Subject key identifier: 07:EB:27:AF:5E:BA:0B:54:37:BD:EB:78:DA:5C:21:2C:0E:19:C5:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB775F9CBEA911EF822FD1AB762E951A.roa
Signing time: Fri 20 Dec 2024 08:11:15 +0000
ROA not before: Fri 20 Dec 2024 08:11:11 +0000
ROA not after: Thu 20 Mar 2025 08:11:11 +0000
asID: 328608
IP address blocks: 154.214.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72838 (0x11c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:11:11 2024 GMT
Not After : Mar 20 08:11:11 2025 GMT
Subject: CN=676526a3-187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:a6:30:ce:de:3a:eb:ce:f2:6d:3f:e6:35:
e0:11:bb:99:f0:4f:a1:7e:99:63:77:61:01:d4:e5:
1b:71:b7:44:b5:32:3f:ef:85:b3:f7:da:39:96:92:
0d:df:cf:88:3f:5d:46:c7:05:2c:bc:af:f4:dd:cc:
a4:4e:0f:29:0e:be:ff:31:2f:bc:7b:42:d6:55:6e:
c3:b7:51:01:34:fb:d2:60:8d:78:ab:9f:ff:35:ce:
b7:97:a0:11:21:b1:c3:4d:6d:27:d0:76:fc:e0:19:
34:d9:12:dc:5f:76:e6:e7:06:8c:29:01:c3:7c:39:
54:86:eb:85:e4:90:94:4f:c0:89:37:bd:68:f8:19:
9b:46:f6:50:81:8b:10:5c:12:30:6a:84:8a:29:22:
df:16:3a:0e:f9:d9:f1:94:34:85:89:df:ff:f0:c5:
e4:fa:37:78:07:48:b8:cb:8f:b4:10:2e:b3:1a:74:
38:51:ce:07:e5:f8:a1:0f:2a:b6:88:c5:30:ab:92:
9d:7c:7b:d1:7b:e2:20:52:2c:9b:73:55:f1:57:5d:
61:17:3d:ec:59:0e:62:a5:19:c9:c6:eb:65:46:eb:
4d:97:70:dc:c6:ed:f0:a6:f7:10:13:26:46:bb:14:
97:b0:ab:62:61:a3:64:b0:21:13:67:e4:43:c3:f9:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:27:AF:5E:BA:0B:54:37:BD:EB:78:DA:5C:21:2C:0E:19:C5:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB775F9CBEA911EF822FD1AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:c8:ec:bf:7b:87:a8:6d:00:76:04:cb:39:48:be:97:01:be:
d2:29:bb:9d:6f:13:d1:62:d1:61:3b:11:a5:75:a8:99:bb:dc:
23:df:af:6f:44:78:50:91:40:0e:01:fa:1a:70:3a:b1:b7:c4:
ba:24:90:6a:3c:fd:36:2d:7b:de:fa:7d:d8:c7:17:f3:ae:15:
5f:5a:37:ea:c4:18:07:a5:e4:3e:e6:db:01:7b:0f:23:12:7a:
69:40:02:15:c8:5b:11:85:18:89:7a:aa:4c:e9:03:b8:ff:05:
2e:df:67:db:29:ae:d5:41:e6:72:66:65:db:00:d2:65:d7:08:
4d:78:fb:2f:2d:4c:62:55:24:00:1b:32:73:04:55:0c:ac:08:
89:df:29:51:39:7d:7e:8c:96:87:ee:8b:e6:f4:c0:2b:bb:9a:
9a:6f:da:7f:4a:c0:24:68:62:c2:22:1f:fb:28:74:3f:22:8d:
d0:d9:fd:2f:4c:ff:f4:8f:65:72:f5:30:17:6f:32:a6:56:3d:
32:e0:2c:d2:e0:ec:17:57:fe:99:78:39:d0:23:c9:29:79:9e:
bd:43:6a:30:c8:c3:1d:fb:7a:04:7d:87:44:5d:28:d0:bd:d6:
9b:4c:6a:54:bc:cd:f1:b9:e5:4c:bd:01:c3:19:c6:f9:32:eb:
bc:84:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:52 2025 by rpki-client