Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA4B068DA2C11EF8227375F762E951A.roa
File: 0EA4B068DA2C11EF8227375F762E951A.roa (raw, json)
Hash identifier: 72y0M1JUFA55a/y2g7fN2Ho9pzXe99//oaRXMlW3yYw=
Subject key identifier: 12:FE:F8:41:DF:C0:F5:32:5B:D8:BF:88:13:4F:9B:14:5E:09:42:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014460
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA4B068DA2C11EF8227375F762E951A.roa
Signing time: Fri 24 Jan 2025 08:20:23 +0000
ROA not before: Fri 24 Jan 2025 08:20:19 +0000
ROA not after: Wed 05 Mar 2025 08:20:19 +0000
asID: 202656
IP address blocks: 154.221.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83040 (0x14460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:20:19 2025 GMT
Not After : Mar 5 08:20:19 2025 GMT
Subject: CN=67934d47-580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:79:9a:1c:cb:79:b8:06:87:3f:67:ac:58:
ce:9d:55:af:6d:56:cf:b4:17:77:15:0d:d4:e4:cf:
67:64:30:e5:8f:f9:ec:38:1c:3d:52:2c:6f:b3:2c:
2e:43:6e:34:38:1b:e0:35:ac:04:35:ef:e5:25:2e:
31:25:4c:c3:9f:d2:29:c0:09:72:3e:a3:30:e6:28:
b5:02:b1:25:40:ac:03:e4:71:41:d7:29:3e:5e:3f:
25:35:5f:c5:12:d5:6e:3f:85:71:a0:ef:6f:23:9d:
21:ac:b0:82:3d:18:f9:98:df:3c:9b:8b:17:cf:36:
88:00:63:09:5b:a1:e4:1c:9d:ed:29:81:e9:69:b4:
19:ba:68:1b:2e:39:bb:33:c7:bf:d7:e8:2e:ba:5c:
f4:93:fb:ba:33:d5:30:62:62:1a:4f:af:42:0c:54:
44:b9:73:b8:30:ea:25:9e:8c:cf:84:fe:bd:14:54:
eb:77:66:3c:14:6e:77:b8:4d:8d:cc:aa:57:88:8a:
61:66:95:1c:f9:25:04:ba:ec:e2:2a:b2:98:54:50:
f4:af:ff:d6:d4:fd:e0:b3:cf:bf:b3:06:db:fd:19:
6d:0a:af:ba:fc:1f:17:a7:37:d2:42:25:4f:7d:27:
bc:b5:c0:68:26:f0:18:c8:6b:3c:89:41:36:a2:80:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:F8:41:DF:C0:F5:32:5B:D8:BF:88:13:4F:9B:14:5E:09:42:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA4B068DA2C11EF8227375F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.57.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a8:c4:b5:da:f0:16:52:00:df:85:15:ec:d2:b1:eb:34:80:
2e:4e:f4:01:92:78:ea:5d:5c:e2:cd:14:18:78:09:39:e3:c9:
2b:c2:9c:83:37:71:e8:75:31:4d:c4:7e:59:c0:6f:6e:ba:93:
cc:a4:38:ec:68:74:4b:d3:01:8f:02:db:db:2d:8b:4e:bb:e4:
1d:5e:9f:7b:6e:43:d7:38:84:5c:5a:2b:72:fe:97:b1:28:2c:
28:7e:63:77:e2:59:54:bc:95:01:59:75:9c:9d:16:cc:26:69:
e0:e4:1c:0b:03:30:ac:6c:30:94:87:18:7b:db:5a:4c:17:30:
5d:42:3b:c1:5d:8d:56:7d:6d:9a:a0:ce:f1:9a:86:78:de:33:
ee:48:f0:e1:1d:d7:4b:45:c4:eb:c5:74:85:33:20:0e:71:8e:
7a:1e:dd:da:71:6f:a6:16:53:6b:9c:b9:97:8d:f5:aa:70:03:
7a:58:d7:3b:63:59:b7:68:49:78:88:eb:ef:08:fa:df:e3:1f:
b1:08:c8:a0:2f:49:bf:98:2b:72:64:b1:f9:3a:cf:a0:9f:7d:
9b:91:78:24:0d:1c:44:a9:2b:26:7b:29:32:4c:52:3c:e2:33:
af:d8:b4:66:83:64:7a:bd:c9:11:98:a5:5a:f6:2a:cd:9f:d9:
29:87:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:12 2025 by rpki-client