Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A2D78B0D9D911EFA94C82A1762E951A.roa
File: 0A2D78B0D9D911EFA94C82A1762E951A.roa (raw, json)
Hash identifier: 0vylLOcmny6GEN3gYY25RpCruGNgxlNHmoUYXVNbMWs=
Subject key identifier: 64:83:3E:D5:8A:22:EA:5B:12:24:53:DB:4C:87:39:E2:E7:AD:12:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01434B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A2D78B0D9D911EFA94C82A1762E951A.roa
Signing time: Thu 23 Jan 2025 22:26:07 +0000
ROA not before: Fri 24 Jan 2025 22:26:03 +0000
ROA not after: Sat 01 Mar 2025 22:26:03 +0000
asID: 44559
IP address blocks: 154.205.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82763 (0x1434b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:26:03 2025 GMT
Not After : Mar 1 22:26:03 2025 GMT
Subject: CN=6792c1ff-bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:78:12:2c:e9:6a:5f:2a:59:1b:2b:97:03:
2a:7b:77:c9:44:7e:0a:09:01:0e:29:e4:52:19:04:
d4:4f:6a:92:6c:ce:e1:a8:52:08:9c:13:e5:0f:be:
d4:91:65:ea:a9:51:5c:1b:d0:c2:50:d8:f3:67:43:
5b:47:9b:03:0a:58:f8:86:c8:99:2d:7c:7f:98:c6:
50:59:bf:0a:f9:81:34:96:22:a8:04:80:4e:8e:ca:
41:97:87:33:e5:c8:80:4c:b4:00:55:43:cc:0f:47:
07:7a:46:4b:b1:b5:2d:ae:de:5c:6f:76:97:c9:ea:
28:2a:36:03:ca:f7:d5:98:2b:af:0f:4a:3a:b6:2f:
ad:24:c3:b8:6a:c8:9e:4d:8c:a2:ee:e2:ab:a6:98:
71:8a:07:80:0a:77:8a:b7:1b:f2:5e:0a:00:5e:64:
a7:5b:f9:42:1c:66:ec:1a:f5:e8:9a:52:10:23:87:
ef:a7:da:2a:45:35:06:e3:87:97:35:6d:8c:15:74:
f3:56:41:47:62:4e:07:ca:da:09:96:62:89:d0:a5:
e3:b5:aa:58:28:4b:3e:22:f4:cf:8e:1f:b4:b4:c2:
40:75:9f:1d:68:0f:dc:ea:1f:04:e8:70:e5:b2:a7:
36:88:62:a8:f8:ed:ed:9e:a3:84:b7:ab:e4:bb:27:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:83:3E:D5:8A:22:EA:5B:12:24:53:DB:4C:87:39:E2:E7:AD:12:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A2D78B0D9D911EFA94C82A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.236.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a5:3d:8d:19:29:d5:ed:24:ae:bd:f7:ff:de:da:52:41:75:
ba:96:21:3e:92:57:d2:55:c6:e6:7b:7d:c9:27:6e:55:ae:a1:
0c:28:38:7e:11:50:aa:52:c1:64:42:b3:58:06:8f:cb:fb:b7:
10:30:bb:11:e7:33:8c:6c:ad:83:68:f2:04:71:a9:8a:be:bc:
35:4d:ab:b5:bd:b5:3a:48:43:89:4f:c2:94:68:b9:3a:2a:99:
9a:67:fb:91:31:69:75:3c:30:73:b3:35:bc:55:02:ff:4d:19:
77:48:53:d4:2e:1b:aa:b0:fb:6e:e3:1d:1e:e6:63:ab:ca:36:
c2:ab:bc:4e:a5:85:c0:a8:ea:c0:25:d9:30:b5:6e:8c:b6:fc:
90:5d:c1:05:0e:57:61:3f:ec:f4:c5:d8:71:38:5c:58:a4:dd:
89:88:cd:1c:c9:60:da:68:11:09:67:9a:2d:68:89:62:11:38:
ff:2e:b7:21:64:6f:c8:ea:fa:31:cc:90:b7:cd:7c:5a:59:c0:
6b:86:37:ef:54:60:ea:39:37:13:b9:ae:83:65:ff:03:88:2b:
c0:10:69:be:16:f4:17:f1:58:5d:0a:66:51:5d:c9:4f:c4:2c:
98:e0:d4:83:89:46:d7:6a:c1:f8:f5:e4:db:e9:36:7f:12:bf:
6d:4a:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:42 2025 by rpki-client