Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3D24A0DE2111EF8902CD9B762E951A.roa
File: 0D3D24A0DE2111EF8902CD9B762E951A.roa (raw, json)
Hash identifier: FOGXTehTkBua+hCX6QOEnBvhMn/gRqW2Vg4t2U9hYFE=
Subject key identifier: 72:27:98:00:56:C7:CE:07:25:69:40:E8:51:8C:07:EA:49:4F:D3:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3D24A0DE2111EF8902CD9B762E951A.roa
Signing time: Wed 29 Jan 2025 09:11:41 +0000
ROA not before: Wed 29 Jan 2025 09:11:37 +0000
ROA not after: Wed 05 Mar 2025 09:11:37 +0000
asID: 203020
IP address blocks: 154.205.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85330 (0x14d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:11:37 2025 GMT
Not After : Mar 5 09:11:37 2025 GMT
Subject: CN=6799f0cd-749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:a2:99:e1:16:4f:dd:45:92:a7:03:2d:64:
ed:5b:1c:04:c9:ba:6e:a2:b4:b1:54:17:0c:7a:2a:
03:e4:2c:61:67:91:ac:31:94:2b:5f:db:97:37:38:
4b:a6:c4:52:40:26:39:7d:f1:24:80:f8:9e:45:5a:
b5:52:bc:53:49:58:ff:af:d2:48:ac:bd:3d:b7:b3:
c7:82:43:b4:a0:a2:32:8d:cf:cc:8f:ee:35:d3:50:
c9:24:cb:dc:ff:bf:3f:f4:f6:af:19:a3:4b:39:f2:
0a:52:ab:9c:f3:c5:90:ad:d8:47:8c:3a:b4:d7:0f:
85:b5:30:22:b9:83:b6:ff:4b:bb:d3:aa:4f:81:a7:
21:31:b6:8d:d1:a6:70:3c:10:eb:62:e2:31:b7:00:
b7:91:74:ea:ce:7d:e4:3a:83:96:c2:a5:aa:13:12:
28:86:57:be:2e:b8:2e:f2:90:25:5a:88:65:e7:0c:
70:9c:fa:cf:54:a5:fe:98:6d:31:84:e7:d2:fc:74:
f2:71:fc:2f:45:78:96:70:c3:ad:f5:17:4c:48:97:
86:89:1a:93:1f:97:d5:75:a4:ce:28:10:3d:56:90:
7f:c1:c4:b6:43:f3:24:e1:22:6b:47:cf:59:bc:5f:
95:df:6c:2f:5f:33:44:47:ba:17:34:23:91:9e:10:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:98:00:56:C7:CE:07:25:69:40:E8:51:8C:07:EA:49:4F:D3:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3D24A0DE2111EF8902CD9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.174.0/23
Signature Algorithm: sha256WithRSAEncryption
18:ff:cf:aa:1c:43:e9:a0:61:49:0b:d3:f5:11:da:c1:91:f3:
4e:3b:0e:ae:05:6f:45:e8:1e:d5:ec:4a:bb:b0:21:d2:0d:be:
85:0b:95:e7:b8:71:e4:6c:96:d7:9a:b5:b0:73:4a:ed:ba:15:
1b:71:ad:e9:7e:9d:65:0f:2f:64:e6:76:ec:4f:da:00:8f:e8:
58:6a:f7:a3:2b:1d:5b:c6:2c:23:3d:3e:a4:b1:b8:85:0b:31:
d4:9e:60:38:52:e6:2c:61:a1:20:2e:ad:0d:b0:75:35:ef:ec:
b8:59:89:51:4b:51:d7:68:15:d4:b9:53:13:1d:00:94:54:00:
a1:fb:14:4b:6d:bc:60:4b:6f:9b:fc:76:2d:ac:29:dc:95:3d:
1d:b0:81:ed:cd:a2:48:39:bd:67:90:64:d0:3d:2e:03:5d:73:
4f:dc:5f:de:d1:54:25:c2:df:31:bb:c4:d5:3c:39:e7:4b:9e:
ef:99:83:00:bc:2d:40:cb:ff:61:e4:e5:e7:ea:f3:b0:b2:25:
3a:f5:94:13:41:d7:cf:a1:a5:c2:19:85:30:31:6f:d4:35:37:
86:4b:3b:06:45:b2:49:01:fc:22:ae:77:30:71:22:c8:3b:ee:
42:ad:d6:c6:17:2b:7b:15:00:cc:12:c5:d9:46:99:97:16:85:
70:3f:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:00 2025 by rpki-client