Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBFE150C27411EFADDB31AE762E951A.roa
File: DBBFE150C27411EFADDB31AE762E951A.roa (raw, json)
Hash identifier: xV4Evb2zPZRKcnTxdn0cipjuampAq+ck+/uvr0ImCpg=
Subject key identifier: F8:D4:81:2F:7E:62:05:28:EE:BC:06:7C:BC:99:B6:C5:D5:CA:08:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01248E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBFE150C27411EFADDB31AE762E951A.roa
Signing time: Wed 25 Dec 2024 04:01:03 +0000
ROA not before: Wed 25 Dec 2024 04:00:59 +0000
ROA not after: Wed 10 Dec 2025 04:00:59 +0000
asID: 984
IP address blocks: 154.211.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74894 (0x1248e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:00:59 2024 GMT
Not After : Dec 10 04:00:59 2025 GMT
Subject: CN=676b837f-f364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:63:d7:76:81:07:8e:85:a8:2c:3c:ea:34:
71:89:0c:b1:b4:95:fc:39:32:4d:de:33:b5:ac:83:
de:24:76:b1:8b:18:e0:4d:87:e1:d0:63:5f:2d:29:
df:4a:0d:96:cd:d5:4a:31:c1:4c:28:a5:d2:13:6d:
a8:1a:d6:50:d9:be:31:73:22:08:70:db:c6:12:84:
54:5b:52:55:eb:59:e0:e0:d6:f0:f8:e1:2d:c9:75:
61:1c:cb:a6:ab:a7:2e:65:30:0c:14:94:65:7f:1a:
43:4d:ac:41:6f:7f:aa:dc:c2:70:42:83:d4:a1:b4:
3d:55:ee:0c:2b:cc:ad:0f:38:b8:c0:a5:fe:94:a3:
cb:3f:02:ab:89:d1:f6:ea:a7:55:8f:4f:8d:bb:46:
e6:f1:41:01:46:67:41:6f:b1:d9:7b:34:96:19:36:
ba:fd:18:99:a6:de:47:ad:e4:6a:a0:77:0e:bf:84:
fe:67:84:84:a5:79:34:58:4d:03:76:71:3b:42:24:
ed:f5:5c:af:50:67:1e:37:de:18:54:43:46:8e:17:
7b:41:55:62:2f:d4:f3:ea:b1:6a:f0:2c:d1:de:74:
a1:f3:9a:db:ed:47:d0:c4:d9:21:77:11:41:eb:72:
47:c2:ff:62:2c:74:6c:c1:19:12:ed:43:0e:87:5a:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:81:2F:7E:62:05:28:EE:BC:06:7C:BC:99:B6:C5:D5:CA:08:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBBFE150C27411EFADDB31AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:77:68:b3:e7:24:da:24:ca:1e:9a:84:24:66:7b:1f:94:09:
ed:f4:29:78:8f:0c:9b:e4:ba:e9:59:e7:b3:06:d6:59:e3:79:
e4:5b:12:7e:3f:da:7c:69:a0:6b:85:54:89:10:3b:4f:74:8a:
a8:c9:03:b9:fb:0e:00:ac:07:a6:9f:b7:ad:5a:e1:82:24:f5:
0f:64:02:d1:31:78:77:2b:29:c7:2c:6c:c4:93:f6:3a:49:a6:
39:97:4e:05:d2:72:86:86:10:b0:cd:2d:b2:68:7e:f7:1f:9a:
65:9d:d8:e5:c5:79:98:82:59:1d:87:45:fa:e0:d3:0a:0c:63:
bf:5d:11:a1:83:9d:b9:c0:09:73:32:ca:db:76:aa:50:02:11:
59:85:26:6b:02:8d:38:53:f3:41:dc:e8:b7:67:8a:a9:10:92:
84:46:4c:8b:65:4b:ac:fc:61:a4:42:cb:40:9b:de:45:8d:7b:
9b:b8:f3:c2:79:f3:10:e6:a9:b3:bf:76:ea:9b:5e:b1:b5:5a:
f2:07:30:30:23:d0:cf:27:27:00:aa:87:cd:04:93:4b:8f:cc:
de:37:63:5a:42:da:1d:89:bc:85:75:42:1d:e2:30:4e:4a:48:
96:20:49:33:79:2b:7a:68:c1:d1:14:5a:4e:46:fe:70:a7:3f:
3d:15:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:45 2025 by rpki-client