Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003908A8DB3511EF94873A60762E951A.roa
File: 003908A8DB3511EF94873A60762E951A.roa (raw, json)
Hash identifier: YOQV55i5JVTrruEVGxwcxVGbPoEwZYV1ISwfPai75xQ=
Subject key identifier: 3A:9C:F3:B6:57:2C:18:23:A5:57:CC:9B:03:BF:52:B1:9C:DA:A9:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003908A8DB3511EF94873A60762E951A.roa
Signing time: Sat 25 Jan 2025 15:56:56 +0000
ROA not before: Sat 25 Jan 2025 15:56:52 +0000
ROA not after: Fri 07 Mar 2025 15:56:52 +0000
asID: 138915
IP address blocks: 154.223.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84504 (0x14a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:56:52 2025 GMT
Not After : Mar 7 15:56:52 2025 GMT
Subject: CN=679509c7-6ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:76:7f:71:a2:23:94:e1:85:88:9e:f4:e9:
b8:81:c5:0e:54:35:2e:ec:14:3b:8d:bc:4a:6d:83:
5f:9d:ca:05:29:e6:21:9d:df:30:e5:7e:9c:65:16:
46:aa:b1:28:3c:74:7b:16:20:60:5b:02:65:60:79:
ab:9d:60:e7:55:c0:1b:62:04:38:6d:b5:63:61:0f:
a8:5d:44:4c:5f:5c:69:0b:4c:e1:49:bf:64:56:90:
d7:5f:ec:48:1e:df:4a:f1:09:19:f4:3a:21:4d:0c:
3f:d0:2e:7a:db:74:62:7f:e8:19:34:ab:30:0e:9d:
fb:72:5d:a3:97:3a:00:6b:2a:1d:d7:d7:56:9d:b9:
ca:55:b0:71:4e:2a:8f:9a:a5:da:6b:c4:a0:cc:45:
c0:e8:92:03:b5:28:b0:50:86:1c:0a:9b:bb:a9:6f:
e4:3c:7c:9d:e8:32:da:ec:85:14:03:70:15:9b:89:
51:b5:d7:ac:d6:52:d3:8c:54:6f:cd:5c:8c:76:8a:
4a:f3:0d:23:1b:9b:57:49:71:89:5b:24:0a:10:b8:
d9:c2:c7:8d:3e:e5:41:b5:9f:76:ec:ef:e6:9b:15:
d3:3c:c3:22:f5:0d:b8:ac:09:bf:a4:c4:9e:81:94:
62:ea:f4:18:be:17:ab:48:71:fc:46:c3:29:1e:aa:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:F3:B6:57:2C:18:23:A5:57:CC:9B:03:BF:52:B1:9C:DA:A9:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003908A8DB3511EF94873A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7d:00:ba:de:97:e8:d4:01:fd:4f:d8:0c:81:e2:30:b6:aa:
52:17:ed:6e:66:3f:dd:e3:1f:65:7d:6c:94:a0:a4:24:dc:18:
0e:18:5b:b4:ac:c1:83:64:42:bd:94:5c:15:0d:8e:11:f5:ba:
6b:a0:c4:ca:ec:91:ad:c1:7e:5b:e9:d2:93:b8:42:84:d5:ac:
a2:be:72:05:10:6c:7d:3b:3a:16:3a:67:e0:83:08:fc:4a:c5:
8c:df:d3:0e:e3:fb:64:92:db:00:86:4d:ab:bf:15:a5:cc:5d:
d8:7c:dc:9e:c1:9f:a1:29:95:30:fe:77:8d:15:ea:9e:7a:df:
5f:2f:51:d4:64:f5:07:91:fa:5c:a6:84:4a:a2:26:59:77:e9:
ae:9f:c4:77:a4:31:1d:67:ab:99:86:ea:c4:49:98:da:ef:1d:
01:fc:e8:b9:f6:4b:7c:8c:a2:26:ee:9a:23:f3:74:3d:1c:ed:
01:fc:30:78:08:51:6e:75:23:bd:eb:a6:4a:05:2b:2f:46:1e:
b7:4a:09:44:2d:2c:0f:f7:8e:6d:6f:82:c1:7b:35:f2:39:f1:
bb:8b:53:5b:8b:b6:70:98:0c:fa:fc:28:01:1d:23:2c:42:09:
91:5e:de:4b:10:8d:ee:ae:a9:92:70:2a:5a:2f:03:6f:73:92:
ac:97:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:36 2025 by rpki-client