Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC7590EB5FB11EFA8BFD58F762E951A.roa
File: 0BC7590EB5FB11EFA8BFD58F762E951A.roa (raw, json)
Hash identifier: pFmt2U3/ZyLluRXIQs7Ylu3O1/9uVIEtwqcx2F/uFNU=
Subject key identifier: EA:B4:C6:86:21:A9:D0:48:CD:CC:CB:3F:D3:44:4C:F1:F5:65:DE:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC7590EB5FB11EFA8BFD58F762E951A.roa
Signing time: Mon 09 Dec 2024 06:58:51 +0000
ROA not before: Mon 09 Dec 2024 06:58:47 +0000
ROA not after: Thu 06 Feb 2025 06:58:47 +0000
asID: 149014
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72129 (0x119c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 06:58:47 2024 GMT
Not After : Feb 6 06:58:47 2025 GMT
Subject: CN=6756952b-e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:f5:5d:ce:62:a5:a2:46:69:5e:43:d6:dc:
0f:46:49:76:4d:b0:48:f9:79:65:54:19:f1:00:86:
3b:ef:49:91:2c:1b:b9:5c:d4:86:17:af:35:cd:76:
c5:11:8a:58:8f:18:e0:d2:21:6f:29:2d:ba:23:96:
b9:68:0c:73:57:98:8f:12:e5:2f:38:ea:5f:c6:00:
62:ac:7d:42:f4:3f:40:c3:80:30:74:a8:c2:b7:b0:
c5:89:f7:75:77:2c:01:f7:20:e5:c7:69:7d:a7:11:
6c:27:f9:52:40:b2:d6:da:72:2d:5b:41:fe:4a:4e:
63:c5:e7:05:20:24:50:7a:14:43:fd:17:b0:12:86:
05:f6:f3:fd:22:5e:cd:0d:dd:2a:8b:0d:7d:4a:f8:
2f:ab:94:cc:0d:8b:d7:37:b9:51:69:88:6d:d2:2b:
e4:43:a7:06:06:99:b9:1c:0c:7f:cc:aa:26:e4:15:
f7:aa:0c:a6:3e:73:62:10:b1:8d:40:4f:7f:7e:09:
1a:51:33:e5:31:e5:54:c1:1a:d3:f1:ea:5b:8c:07:
60:73:b5:74:47:42:d5:cb:48:4f:3e:bf:27:d7:c9:
41:03:bf:c7:11:cd:6d:78:07:7c:54:4f:bc:37:66:
7f:54:08:93:1d:c2:2e:0b:48:6c:77:64:16:39:8c:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:C6:86:21:A9:D0:48:CD:CC:CB:3F:D3:44:4C:F1:F5:65:DE:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BC7590EB5FB11EFA8BFD58F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:61:29:59:4c:32:72:9d:d1:31:e3:88:a1:2d:1c:6c:00:da:
77:d2:7a:4c:74:ae:f8:7a:00:e4:af:cb:9a:9c:38:76:17:bd:
aa:55:27:da:9d:1e:99:10:5e:19:d3:8f:d1:a3:bc:02:73:2d:
7f:78:14:11:cc:57:81:17:a6:c7:2e:9b:94:e5:c6:0f:37:80:
ca:03:7c:f3:7f:92:d1:d7:11:6d:27:70:37:03:ba:64:97:3f:
62:a1:19:18:fb:ec:c1:d3:9b:c8:28:94:bf:ed:49:f2:ed:40:
7e:30:20:eb:b9:d6:eb:c9:0d:69:18:63:5a:f5:05:77:ac:8c:
2c:e4:04:90:58:77:60:32:9d:3e:ed:fb:46:be:45:93:3c:00:
dc:f7:fb:f4:6e:80:d4:53:36:30:8a:58:48:74:d0:38:28:9f:
27:1e:f5:2d:a3:c4:24:6f:e6:e0:09:ce:0c:8a:12:b6:9c:eb:
69:2d:5c:4e:3b:29:8a:b0:46:00:52:30:ed:f2:f9:5d:d1:de:
d0:0b:e4:71:15:04:35:73:ef:82:05:4c:6c:ec:70:d6:e8:97:
01:d4:db:12:4e:fb:fd:67:b5:8e:56:73:14:ed:fb:77:18:df:
09:78:94:a3:55:49:b1:5e:ec:39:d7:fd:e7:e5:32:2c:a5:47:
f4:ff:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:26 2025 by rpki-client