Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088060A2DB3411EF99C38059762E951A.roa
File: 088060A2DB3411EF99C38059762E951A.roa (raw, json)
Hash identifier: OkQmF0hnwWld2KnPKLZplgeazyI4+6Hh1EX+ZewK0AA=
Subject key identifier: 50:91:1A:BB:C7:F7:E7:B7:0D:F7:B3:08:3D:93:50:76:9A:20:9B:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088060A2DB3411EF99C38059762E951A.roa
Signing time: Sat 25 Jan 2025 15:50:00 +0000
ROA not before: Sat 25 Jan 2025 15:49:56 +0000
ROA not after: Fri 07 Mar 2025 15:49:56 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84498 (0x14a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:49:56 2025 GMT
Not After : Mar 7 15:49:56 2025 GMT
Subject: CN=67950828-9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:ea:47:f9:39:ce:3e:f8:a3:6a:77:df:df:
86:79:85:39:64:6c:09:d6:ec:0b:9d:92:11:bc:04:
57:57:11:6d:d4:29:88:e9:37:12:30:68:44:e6:32:
4b:1d:08:85:ad:11:4a:e8:f0:4b:f7:57:62:aa:94:
45:2f:6d:03:30:a6:2a:8b:c3:b2:8b:53:9b:c2:71:
21:4b:de:37:a2:66:07:95:c8:20:42:ba:00:f7:d6:
c6:22:72:c1:9e:18:53:82:94:06:3a:ef:af:9e:bf:
db:ad:ff:bf:a7:e0:05:8e:1e:af:e6:d1:6c:56:e8:
b3:f4:39:d8:81:30:a8:50:86:7f:8b:13:48:83:f4:
af:48:d7:ad:4c:82:23:e3:9a:95:8e:a2:e9:bd:b6:
b2:1c:a4:20:57:f1:1d:75:0c:94:de:8b:10:75:8e:
72:89:58:8a:59:db:de:78:17:b2:40:0e:dd:1e:4a:
f1:3f:dc:18:b5:f5:eb:6c:6b:61:29:a8:69:69:2f:
2c:f4:6b:28:0a:32:86:06:38:96:d6:1d:63:37:03:
32:6e:63:c1:8a:c5:d3:12:af:85:cf:b9:12:2a:14:
c4:f7:a3:7d:2f:84:e4:05:fc:2e:bf:28:c4:72:44:
5e:b2:a3:47:a3:a2:6e:5e:26:f6:62:31:74:08:50:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:1A:BB:C7:F7:E7:B7:0D:F7:B3:08:3D:93:50:76:9A:20:9B:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088060A2DB3411EF99C38059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:84:65:68:8f:3c:9a:f8:ef:8a:fe:14:9f:fa:b6:8b:e2:f9:
f2:e2:db:b4:9e:05:8a:d5:67:70:a5:55:86:65:11:2a:f7:b6:
27:c2:1b:47:65:11:8f:09:53:9b:22:45:3a:a8:9b:ab:3c:a0:
05:6b:f8:68:8c:10:c8:ed:5f:24:b2:f4:89:b0:69:3b:aa:5b:
93:09:a6:32:0d:be:e5:bb:a7:18:59:9a:f0:6f:34:91:2f:17:
eb:10:54:7e:7c:ca:38:88:d6:ba:03:7f:03:b5:f7:93:fb:20:
9c:a5:13:15:b0:74:84:f8:c3:e7:3b:ec:d3:df:e2:d3:4a:82:
c7:31:5f:60:16:dd:63:43:32:bb:c4:3b:fd:21:0f:87:f2:14:
65:6f:bb:5c:09:52:33:bc:c4:9f:98:64:1f:35:ca:d4:c0:71:
9f:88:70:58:02:df:bf:1e:16:3d:c8:bc:38:16:3b:cd:6d:f0:
0b:c1:31:0a:86:73:11:82:f2:ef:3a:3b:c9:60:0e:43:3e:6b:
56:ac:87:dd:a9:1e:6d:93:35:2c:ec:d9:a4:d3:7f:49:8c:fc:
56:f3:06:eb:fa:de:89:62:a4:0e:da:c6:06:e0:09:7a:0e:d9:
45:2f:f9:02:ae:00:34:36:85:f4:98:f2:f1:0e:b6:ca:72:fa:
f7:e7:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:17 2025 by rpki-client