Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFB43EEB92311EFA8F08C6E762E951A.roa
File: 4AFB43EEB92311EFA8F08C6E762E951A.roa (raw, json)
Hash identifier: LBNJ5ulDO4buLJe4/LIS40HaPJtVEBtAYH5y0q1Bvv8=
Subject key identifier: C8:33:7A:29:21:D0:7A:2C:E7:5D:CB:91:CF:B3:3B:B4:6B:E7:19:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011AEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFB43EEB92311EFA8F08C6E762E951A.roa
Signing time: Fri 13 Dec 2024 07:24:30 +0000
ROA not before: Fri 13 Dec 2024 07:24:27 +0000
ROA not after: Sat 13 Dec 2025 07:24:27 +0000
asID: 137962
IP address blocks: 154.216.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72427 (0x11aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 13 07:24:27 2024 GMT
Not After : Dec 13 07:24:27 2025 GMT
Subject: CN=675be12e-f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:62:74:9c:55:e5:1c:63:41:9a:37:ee:56:d4:
26:91:e2:b7:78:80:be:64:16:9e:d7:8d:c8:bf:2e:
48:19:87:49:8a:5b:ab:6c:81:9c:a8:ab:9b:4e:d5:
b3:2f:32:cc:82:47:fe:57:fb:f7:38:65:e2:f8:3f:
2a:d8:e6:2f:8f:87:ec:97:51:1e:80:52:ac:53:df:
de:19:86:39:7f:78:83:f4:77:3b:97:4f:6a:3b:fa:
53:85:e6:a0:b7:d1:27:24:e5:f9:27:56:cc:b1:49:
52:61:cb:43:6a:ca:e2:1b:32:dd:2d:43:e7:85:35:
37:69:a3:92:36:c7:3c:e8:e4:3b:73:2d:ad:81:5f:
c3:cf:d6:dd:3e:e2:fa:1e:f9:94:d5:77:ee:66:a4:
63:b3:39:8b:65:76:66:c4:98:d0:e8:80:23:92:4b:
23:f5:a6:37:93:6b:ae:b3:ba:0c:73:70:82:47:c3:
88:cf:17:80:30:1d:ca:2d:55:ea:cf:f7:be:cc:48:
84:9c:cd:e2:df:56:6b:68:77:13:1e:4c:bb:98:ab:
ef:cb:64:47:6c:18:48:fc:aa:56:d9:85:7d:ef:b9:
c3:84:d5:f3:2f:ab:0d:b9:8f:67:39:a6:b1:a1:b6:
66:3a:3c:7a:21:d4:4e:ed:94:7a:ae:32:18:6a:99:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:33:7A:29:21:D0:7A:2C:E7:5D:CB:91:CF:B3:3B:B4:6B:E7:19:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AFB43EEB92311EFA8F08C6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:62:ad:4b:a2:96:b6:37:a2:ae:58:a3:75:c4:2e:f0:8d:
e0:8c:ce:bd:a1:8d:31:28:da:da:af:62:41:0c:32:49:b0:9d:
a1:60:19:a4:53:fa:87:16:57:32:50:f3:1b:d1:24:0c:e9:48:
f6:e0:d6:ca:3c:96:ea:f1:f0:24:48:04:4d:3c:22:b3:89:52:
c7:f4:14:23:0f:13:40:59:4b:07:12:80:90:7b:27:ec:23:12:
b6:7a:05:47:f6:d2:41:29:ae:df:68:7d:6c:42:0f:4f:b8:fe:
20:e4:fb:0c:c5:22:29:0c:56:b6:c4:b8:2d:f6:8d:3b:18:4b:
98:2a:bc:61:78:42:18:2e:f4:cb:d8:c0:b1:8f:28:0d:e8:19:
5a:c1:56:40:b9:86:41:3a:fe:91:d9:a4:78:97:04:77:62:29:
57:32:40:2e:a1:c8:71:31:42:87:07:4f:87:6f:23:19:19:f7:
67:61:bc:05:ff:05:61:fe:71:7e:df:a9:b3:34:c9:65:91:08:
b4:91:04:1c:1b:32:5d:73:a3:a1:e7:80:75:c9:77:ee:4d:e9:
0f:e4:ae:c4:e6:2d:99:2d:dc:2a:82:ca:2d:13:69:1e:ce:53:
2b:b4:90:b9:22:54:48:3a:ff:9b:78:77:e9:47:34:c2:56:cb:
32:5a:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:15 2025 by rpki-client