Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFBC6BC6BEB611EF91A5AF7C762E951A.roa
File: FFBC6BC6BEB611EF91A5AF7C762E951A.roa (raw, json)
Hash identifier: UahQL03vwFvkX0vx0RcBhkc/YVTUH5WmXSGFfne3iKw=
Subject key identifier: E5:B7:75:74:40:CD:C8:DD:B8:91:F6:99:4F:CA:6F:9B:3C:64:DF:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFBC6BC6BEB611EF91A5AF7C762E951A.roa
Signing time: Fri 20 Dec 2024 09:44:26 +0000
ROA not before: Fri 20 Dec 2024 09:44:22 +0000
ROA not after: Sun 02 Feb 2025 09:44:22 +0000
asID: 202656
IP address blocks: 154.221.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72902 (0x11cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:44:22 2024 GMT
Not After : Feb 2 09:44:22 2025 GMT
Subject: CN=67653c79-3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:08:b2:32:45:1d:7b:19:17:1c:83:0d:4b:
8c:8b:a0:c4:74:e0:72:9b:11:0d:8c:72:f1:de:3b:
72:dc:d5:90:1d:0b:19:f3:4a:51:3c:42:0b:a6:12:
84:da:2e:81:e3:f3:ac:1b:43:01:7b:19:ee:96:ce:
ca:54:be:c7:01:e6:03:c6:85:ae:a7:dd:4c:95:f3:
52:b3:fe:ba:54:38:56:8c:fc:a0:a8:9a:cb:c9:ed:
3c:ae:06:68:3d:f3:d1:62:9e:9e:32:3f:a7:3e:cc:
84:54:7d:55:5b:6c:b4:c2:fb:94:be:fe:84:a4:8f:
40:a0:4f:6f:69:80:ff:c7:24:4d:db:e8:25:4e:92:
df:5d:4c:95:61:fc:18:2f:56:e3:b2:1c:a1:a4:b9:
59:c2:bd:1e:61:60:a9:ab:6e:2c:aa:77:bb:1d:1c:
d4:f8:cc:a2:5a:39:2c:a7:a5:80:6d:65:61:93:b3:
61:3d:ac:15:9e:c1:95:39:da:a2:ae:5b:d7:f4:c2:
f8:3b:2c:ef:ae:77:e2:0d:ef:6d:d3:25:86:d7:5a:
fb:9d:55:86:9d:5c:e6:8a:89:b6:1c:55:38:bd:6c:
d6:c2:da:e1:9d:03:b8:e3:ec:9f:00:c2:c7:14:eb:
c0:5b:81:fb:41:78:60:58:56:1f:cd:52:b7:38:83:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:75:74:40:CD:C8:DD:B8:91:F6:99:4F:CA:6F:9B:3C:64:DF:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFBC6BC6BEB611EF91A5AF7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:04:5d:09:c5:7b:ba:aa:50:09:62:5b:6e:37:7b:da:76:34:
a4:2a:68:a4:fa:bf:a1:78:d0:f9:d4:40:84:04:8d:2d:4a:ee:
55:37:88:4f:66:88:84:b4:b6:cb:9b:d1:1a:c7:37:cb:84:27:
16:5d:d2:64:94:14:b3:b0:89:42:2b:c7:52:cf:f4:6c:85:1f:
bc:0d:82:ee:e4:88:e0:17:08:e8:13:bf:fb:9f:fe:2f:8f:7e:
45:4f:25:7e:58:51:f3:06:74:a2:05:1c:86:b3:17:6c:bb:b5:
da:27:ac:6d:68:c9:86:f4:9e:7e:67:47:5f:be:9b:23:44:de:
7f:5e:df:c1:3f:43:16:7f:c7:d0:c2:2f:c9:75:a7:46:ab:78:
28:96:41:39:f7:70:78:0d:01:68:c1:70:f4:c3:91:59:da:0d:
f7:9d:79:e9:e2:3c:54:3a:9b:23:bd:4e:de:db:aa:64:02:fc:
66:5b:b8:7c:50:ca:b3:45:1a:f2:d5:4b:b1:03:0d:10:fd:0f:
f9:4a:3a:9c:2e:8e:e4:f5:ec:a3:24:02:1e:37:73:49:95:0e:
f0:02:9d:df:10:d6:7d:fa:a7:0b:6c:8b:ef:22:10:f2:d7:7c:
e2:7d:6e:7c:c4:05:f3:76:3d:ee:91:15:4a:89:1a:1e:cc:71:
26:4f:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:29 2025 by rpki-client