Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AC2D88C27311EFADF75BA2762E951A.roa
File: 08AC2D88C27311EFADF75BA2762E951A.roa (raw, json)
Hash identifier: RUNJ5TVM6HCGXQ6zNK2QApfd1/9CqDtZ83EBuLQ58uo=
Subject key identifier: BC:40:58:1E:4A:ED:3E:A0:24:C6:0C:44:80:35:CC:BB:31:F8:AC:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01247A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AC2D88C27311EFADF75BA2762E951A.roa
Signing time: Wed 25 Dec 2024 03:47:59 +0000
ROA not before: Wed 25 Dec 2024 03:47:56 +0000
ROA not after: Wed 10 Dec 2025 03:47:56 +0000
asID: 984
IP address blocks: 154.211.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74874 (0x1247a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:47:56 2024 GMT
Not After : Dec 10 03:47:56 2025 GMT
Subject: CN=676b806f-469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:36:7c:69:76:bb:ee:c6:0f:dd:d5:a4:50:
80:14:b6:ab:47:ec:b3:31:22:65:fd:81:40:22:fb:
60:0e:42:66:2e:9c:1d:63:45:67:d1:be:00:b3:70:
96:7f:5b:b7:f3:14:6f:2a:1c:cd:b5:80:32:37:44:
a4:af:82:74:4e:f3:b0:36:05:15:c2:1e:6e:94:a3:
e8:6a:e8:15:f5:f7:01:24:6d:45:27:cf:37:b9:35:
bf:e5:b3:76:3b:b2:f0:d5:4f:8a:92:ab:54:d8:b7:
2c:90:57:50:9e:36:3b:d9:ae:31:df:11:4e:ff:76:
31:60:07:76:00:3c:60:e2:59:75:ef:78:9b:8c:ea:
f1:77:38:df:a0:93:b3:5d:2e:0b:cd:2e:a5:01:bf:
a4:47:9b:3f:ea:43:6d:22:69:82:6a:4e:4a:3b:b9:
d2:7d:12:08:6b:91:69:8a:b8:6f:a5:c0:3e:88:40:
a8:f1:5b:9c:06:4a:72:8d:86:92:15:3b:be:13:92:
65:48:6e:e8:1a:a4:73:c2:d8:c1:5a:79:37:6b:4b:
be:46:f5:95:d0:6f:fd:df:59:76:3e:99:52:0e:a5:
67:c5:6a:e7:dc:9d:c9:aa:f7:61:1b:3a:79:4e:cb:
92:1b:a4:f8:a7:ea:2a:ad:99:1d:3e:4e:1f:1f:8d:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:58:1E:4A:ED:3E:A0:24:C6:0C:44:80:35:CC:BB:31:F8:AC:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AC2D88C27311EFADF75BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.218.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:80:34:26:79:7e:97:04:4f:f9:01:eb:8f:7d:0f:7c:28:e6:
48:c3:bd:2c:81:9b:09:b4:98:12:07:33:c0:64:e1:e6:9f:ff:
4f:55:de:ae:b3:65:cd:08:4d:8e:86:61:f5:df:b3:47:aa:d6:
c0:54:ee:fe:bc:4c:30:c3:f6:2f:9d:6d:4d:35:97:9c:dd:b8:
d7:67:82:66:5e:2a:95:fc:28:14:45:09:2f:2e:ae:f2:25:ba:
16:d7:6a:e5:4d:fd:49:cd:35:1e:e1:81:6a:d8:08:3f:1d:a5:
0d:34:11:24:88:53:fd:7e:a0:75:3a:b1:a3:2d:22:97:f7:2f:
d7:87:41:22:d3:64:49:b4:69:68:b8:5d:71:23:78:fe:46:59:
95:66:e1:d4:ff:1c:41:7d:6c:75:03:10:8b:71:12:45:17:81:
f8:17:a8:6c:12:b6:7d:ba:b9:0b:4b:13:16:92:e8:0b:b6:39:
38:3f:13:0c:1c:ea:a5:6f:4d:05:13:f1:3a:ed:84:51:df:d8:
6e:a4:f9:6f:f4:27:5b:01:e4:71:01:6c:18:4e:1b:c5:1b:65:
2d:f3:3c:9a:0e:f7:23:60:34:db:de:09:0b:b8:11:5a:80:de:
e5:b3:e9:72:c0:49:57:be:db:d9:15:b9:a6:35:f1:67:d4:ab:
81:32:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:26 2025 by rpki-client