Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF63268C29F11EFB25B24B7762E951A.roa
File: 0CF63268C29F11EFB25B24B7762E951A.roa (raw, json)
Hash identifier: q3c7s5H0eAfsIKbRQr0Te/hECVVPQuyT5avS5bv4UO0=
Subject key identifier: 13:82:C6:CA:63:A4:77:02:21:13:A9:66:87:0B:79:11:D6:22:44:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF63268C29F11EFB25B24B7762E951A.roa
Signing time: Wed 25 Dec 2024 09:03:04 +0000
ROA not before: Wed 25 Dec 2024 09:03:01 +0000
ROA not after: Sun 09 Feb 2025 09:03:01 +0000
asID: 138915
IP address blocks: 154.223.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75046 (0x12526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:03:01 2024 GMT
Not After : Feb 9 09:03:01 2025 GMT
Subject: CN=676bca48-0c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:52:7b:d5:1d:4b:69:3e:f8:85:bb:c4:5a:
8f:38:f5:ff:cb:c4:e1:6a:b6:29:28:06:19:75:f8:
e6:bf:75:d8:a2:4b:ef:b7:0b:ae:ba:dd:9b:34:b9:
1f:3f:8c:19:79:94:54:47:49:e4:1d:86:75:ec:e2:
0b:c9:0f:7c:56:30:5c:b0:8a:96:16:89:00:d7:03:
5d:b0:e9:4c:24:7a:94:b1:3f:4a:ee:8d:20:03:98:
ce:34:4f:a0:ea:96:e7:66:58:70:f2:50:b3:d8:21:
28:46:28:42:0d:53:0d:53:fc:3b:d3:14:d1:7d:9f:
00:27:fa:fe:ff:ad:d7:1d:d0:2b:34:75:e0:b7:85:
74:da:ee:11:e3:c2:8c:4c:ce:b6:b3:7c:a7:42:c9:
75:48:2e:56:a1:2d:d3:d8:ed:b8:a2:32:a2:bc:f7:
b4:88:67:f5:89:6c:02:70:74:bd:71:d4:07:6f:19:
0f:33:4d:17:3a:f5:a1:bd:fa:25:c6:1d:14:c6:fc:
05:9a:aa:4c:85:af:12:11:ce:b8:87:a7:02:37:47:
ad:17:2d:d2:8a:81:eb:ff:b0:69:b1:7c:2d:52:3c:
59:97:98:c8:6e:fc:3b:14:2f:56:23:f9:5a:dd:f4:
02:a1:93:5f:9f:c2:12:2f:c7:d0:46:87:23:c3:5d:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:C6:CA:63:A4:77:02:21:13:A9:66:87:0B:79:11:D6:22:44:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF63268C29F11EFB25B24B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
44:33:4f:11:43:35:09:85:1d:21:34:bd:86:a8:c6:f5:40:ef:
3c:c9:93:f8:02:48:ca:2d:fd:90:6a:19:ca:29:50:ae:f8:bb:
96:69:cf:a2:70:b4:35:8b:ff:87:38:cd:de:37:4a:b1:eb:7e:
46:8f:fd:3c:c8:ee:40:57:00:ad:78:01:f4:e8:44:ce:14:6f:
65:06:14:bc:44:4f:58:a2:fc:4f:7c:f9:29:01:14:ed:30:96:
fe:3a:a3:f4:1a:6b:8f:b2:d7:43:2e:36:df:01:34:b2:89:6c:
9c:76:7f:43:85:75:87:e4:ee:ca:06:86:b2:fe:21:e5:d7:a0:
45:9e:3b:69:bb:a0:25:4d:da:6b:85:a4:e7:4a:35:49:a9:b8:
91:5c:29:97:db:9c:26:2d:a4:37:69:f1:6b:df:5e:93:1b:1d:
cb:99:b1:3c:90:ce:6e:f2:84:f1:d5:91:5f:c2:86:c1:69:cc:
bf:cd:6e:ac:6a:e7:61:94:02:26:4c:ca:3d:76:64:f9:47:ed:
f7:00:d2:18:77:4b:d2:00:7f:ba:4d:ad:9d:39:46:80:b4:3f:
2f:4e:0b:2d:96:c8:b0:7e:da:c3:6b:fd:03:33:58:f6:08:e8:
a9:db:56:37:92:e9:7e:63:a0:78:f8:d1:76:b5:6b:e9:42:86:
ec:3c:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:06:56 2025 by rpki-client