Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08827C90C35911EFA0740F53762E951A.roa
File: 08827C90C35911EFA0740F53762E951A.roa (raw, json)
Hash identifier: PjHfn2NPy7T51JOfzCAmAup65YtmBfJ6WtFYkHCgcO8=
Subject key identifier: 9A:FA:8E:38:77:A0:D7:1C:AA:78:56:AD:47:14:15:ED:6F:FC:6E:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08827C90C35911EFA0740F53762E951A.roa
Signing time: Thu 26 Dec 2024 07:14:23 +0000
ROA not before: Thu 26 Dec 2024 07:14:20 +0000
ROA not after: Sun 09 Feb 2025 07:14:20 +0000
asID: 138915
IP address blocks: 154.223.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75249 (0x125f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:14:20 2024 GMT
Not After : Feb 9 07:14:20 2025 GMT
Subject: CN=676d024f-cf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:8a:4b:92:ca:e4:5b:cc:ce:75:89:03:d5:
e5:b2:54:b2:4e:02:81:b5:a1:fb:22:d2:8a:b2:9e:
5d:0b:9e:fb:8e:e3:cf:2c:03:09:fe:5f:1e:d5:03:
91:4e:bb:08:26:c0:fd:22:95:40:be:73:56:0d:b7:
a2:98:10:ff:8d:d4:57:d1:4d:99:d5:30:60:83:04:
4e:48:6e:01:5d:ff:b5:aa:4c:e0:67:90:35:25:57:
69:c8:62:6f:73:89:71:0c:9a:1d:50:23:d9:ca:75:
a1:3e:e4:ab:78:8b:3c:d4:11:21:23:65:6c:8d:4e:
fb:2b:16:a2:77:7c:27:d2:55:7e:ec:42:54:4d:74:
cc:77:bc:8c:26:a3:ea:68:76:4f:0e:35:2d:01:23:
04:af:3e:d6:d9:d8:b5:a3:d9:0b:d7:01:69:09:bb:
c1:dd:17:c2:0e:67:df:22:ba:90:6c:97:0f:12:6e:
0c:7c:09:76:26:97:cf:1a:bc:93:f1:be:86:1a:7f:
ce:18:bb:66:0b:9d:f6:50:2c:11:88:0a:7a:9d:c7:
b6:fd:89:3b:89:28:eb:9f:8e:e5:51:66:d2:f0:ca:
91:f3:09:e4:9a:cd:0d:24:a9:6d:b7:a9:be:9a:ea:
28:de:70:bf:48:e4:8c:64:9b:40:1c:6e:4c:c4:87:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:8E:38:77:A0:D7:1C:AA:78:56:AD:47:14:15:ED:6F:FC:6E:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08827C90C35911EFA0740F53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:5f:3e:d3:63:1e:e2:0b:9f:77:72:5d:4e:ff:1e:53:15:cf:
a7:36:1e:63:85:b3:98:16:1e:14:43:a8:6d:2a:35:f5:46:4a:
4e:8f:dd:96:fa:51:d6:6c:2a:18:f0:ca:10:b6:ac:cc:b1:8a:
9b:4a:02:12:3f:10:6e:96:38:71:c2:dc:ec:0b:09:05:52:a9:
81:f3:5d:23:f8:d3:ee:60:d3:3f:58:c0:c4:6a:a7:34:c9:1b:
2d:5e:36:ea:7f:f6:c1:ea:53:85:27:41:ad:43:3a:1c:58:29:
16:f1:94:fa:9d:28:19:80:5e:a0:10:f2:61:0a:43:2f:66:49:
4b:29:0b:fe:bb:ac:8c:fc:62:86:64:7d:65:46:d6:7a:6f:82:
bb:f2:1e:5d:bf:be:70:f7:84:00:14:6f:22:c0:65:e8:13:32:
74:af:14:ce:09:e0:c7:61:5f:24:a8:77:b7:0e:60:9f:62:07:
53:d2:b3:d9:e7:df:26:d9:aa:03:c3:b6:63:53:e4:fe:c2:59:
a5:4f:e2:c9:62:27:50:c2:48:b5:25:f0:4d:50:8a:2a:05:e9:
03:74:ae:93:fe:27:b6:98:c2:2e:39:38:1d:18:c6:af:67:35:
34:2e:cd:5f:b5:e9:81:bc:d9:b3:d8:72:b4:2a:d3:1b:c0:b1:
21:28:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:23 2025 by rpki-client