Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6A4758BFA011EF9CCBD9B6762E951A.roa
File: FE6A4758BFA011EF9CCBD9B6762E951A.roa (raw, json)
Hash identifier: 4wPq71eXg9zNhQBoSJtTpkPM9Xw17AHsw8DS7LlIh2I=
Subject key identifier: 04:2E:4A:CC:DF:A9:CA:A4:D4:50:D9:C4:F4:34:5D:A2:EE:BD:58:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6A4758BFA011EF9CCBD9B6762E951A.roa
Signing time: Sat 21 Dec 2024 13:39:26 +0000
ROA not before: Sat 21 Dec 2024 13:39:22 +0000
ROA not after: Thu 27 Mar 2025 13:39:22 +0000
asID: 29802
IP address blocks: 154.202.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73091 (0x11d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 13:39:22 2024 GMT
Not After : Mar 27 13:39:22 2025 GMT
Subject: CN=6766c50d-d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:57:89:78:e2:d8:4b:8c:12:e5:8b:f3:24:
72:ad:cb:12:28:6d:8c:a3:13:0b:71:52:fb:dd:bc:
e2:2b:a1:6c:59:31:4f:ce:e1:99:16:20:be:6b:ff:
7d:e9:63:f7:8a:05:b0:14:d8:ef:91:75:62:22:e5:
61:39:a2:ba:2a:00:59:f9:ee:89:d1:2e:b9:54:22:
17:d1:0e:6e:71:d6:2e:fc:cb:e4:94:6e:58:b3:85:
57:db:f6:45:6d:91:6a:c0:e7:6c:c8:46:e6:cf:19:
c4:7f:d1:eb:9c:68:f4:3e:b0:d0:25:fd:9b:32:ef:
6a:8b:22:7e:57:67:6a:de:d1:e4:2d:fa:76:44:d0:
7a:c4:1c:b3:19:0d:07:80:21:ef:30:0f:f6:18:03:
32:f9:f4:db:ba:b2:9a:2a:48:d8:b2:a6:c3:9c:67:
73:85:05:ef:4c:59:56:a1:99:ce:71:e4:b2:a6:13:
0b:61:9a:03:cf:1c:5a:92:92:67:12:85:cb:f4:f0:
c9:93:9e:e6:bd:e2:fd:55:64:b0:c5:6a:77:06:a3:
2d:b1:06:eb:e3:cf:95:16:19:a5:02:3a:3a:37:29:
09:f1:96:f5:d4:f3:13:cb:cc:93:3b:34:75:e2:cf:
1c:4b:e0:2e:b8:4f:79:60:04:cc:fb:a2:0a:d0:7a:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:4A:CC:DF:A9:CA:A4:D4:50:D9:C4:F4:34:5D:A2:EE:BD:58:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6A4758BFA011EF9CCBD9B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b5:45:87:ac:fe:53:d2:76:5e:d8:fe:63:50:10:78:f3:bb:
8d:95:93:c4:41:b2:92:76:32:ba:4f:cb:0c:a8:62:bc:4b:a5:
f2:b2:e4:ab:76:98:61:9e:f9:bb:64:b8:da:7d:f5:50:c5:9d:
ec:38:68:18:5a:1b:db:5c:4a:1b:c6:e0:59:aa:2c:e3:e9:87:
f0:bb:07:6c:27:0b:46:46:24:9d:76:af:d0:15:01:ba:0a:d8:
81:b0:ce:71:79:1a:7d:de:89:fe:9d:c1:29:00:44:15:59:8c:
1d:95:80:3a:b0:90:7b:99:81:ed:26:ec:be:92:29:39:85:b4:
d5:75:25:8a:96:f5:77:23:1c:bf:be:7f:11:b4:b4:f7:0e:7b:
de:b8:60:f7:c5:00:d0:e2:ab:1c:e4:ff:2f:eb:b6:0f:63:b9:
f3:de:ae:37:a4:7a:7a:be:9f:f9:74:c0:db:28:1a:da:fb:cc:
ed:84:bc:33:f3:05:53:32:1a:f9:cf:63:24:b4:bf:7d:1d:1d:
2b:57:b9:23:a0:cf:82:ca:72:6a:7b:c9:86:20:9f:28:bc:38:
1b:52:5d:7e:bb:53:5c:c8:3b:f0:a8:b2:25:a3:e6:11:bb:3a:
87:2c:91:8a:09:13:1e:12:ec:9d:06:23:36:a1:6c:8b:0e:b0:
b5:d2:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:16 2025 by rpki-client