Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14479F78DA2F11EF9D5CCA74762E951A.roa
File: 14479F78DA2F11EF9D5CCA74762E951A.roa (raw, json)
Hash identifier: Md2MbQeBibCOL1A/xDTeCcXVzKi2DnvCYs2xI1arghw=
Subject key identifier: 79:1E:91:A8:A4:13:1A:C7:06:13:6A:3E:F9:BF:2F:5D:86:2E:F9:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014483
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14479F78DA2F11EF9D5CCA74762E951A.roa
Signing time: Fri 24 Jan 2025 08:42:01 +0000
ROA not before: Fri 24 Jan 2025 08:41:58 +0000
ROA not after: Wed 05 Mar 2025 08:41:58 +0000
asID: 202656
IP address blocks: 154.220.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83075 (0x14483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:41:58 2025 GMT
Not After : Mar 5 08:41:58 2025 GMT
Subject: CN=67935259-a48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:e9:11:ad:7c:95:5d:b7:94:d3:e4:49:74:
eb:00:eb:a1:af:c6:92:d0:92:c4:d1:30:a0:48:98:
17:ab:be:2a:bf:25:17:0d:92:45:b0:bf:ea:1f:b3:
a1:53:45:94:0a:9d:64:71:13:de:7c:11:c0:c7:df:
4e:68:5b:0c:45:e6:6e:e2:48:f7:04:50:53:77:66:
de:d6:98:f7:54:49:e7:45:53:c1:82:1d:fa:dd:08:
c2:ad:cd:32:5c:21:03:c5:0f:e7:1d:4c:03:bc:2f:
60:d3:a2:7d:9d:b1:62:14:4b:c8:ce:0a:e3:bf:5c:
a2:03:92:ec:a7:f5:6e:c3:d6:8f:24:74:11:43:f7:
99:a4:f5:04:b4:ea:96:06:74:fc:8c:bc:58:13:82:
f2:56:84:62:c0:93:6e:01:14:c2:ef:28:d2:4d:78:
22:60:d1:3e:cc:4c:46:c0:ba:71:ea:7b:53:09:58:
12:98:ab:f6:1b:c4:08:ca:2c:d8:ae:0c:41:00:c3:
db:6a:85:f7:47:2d:aa:ed:8c:9c:77:4d:a8:32:62:
d6:99:0c:45:88:28:a9:bf:94:34:05:4b:1b:8c:7e:
d5:9a:e6:8c:22:c3:fa:76:2b:b1:dd:f7:49:41:1a:
f7:85:4b:c9:5e:9f:4f:64:b4:b4:44:56:dc:10:4c:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:91:A8:A4:13:1A:C7:06:13:6A:3E:F9:BF:2F:5D:86:2E:F9:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14479F78DA2F11EF9D5CCA74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:47:80:45:ed:5e:78:96:88:d7:49:42:e2:00:d5:b8:94:44:
a9:fa:23:56:6b:02:ca:c6:6c:fb:a1:d9:26:54:10:07:59:5a:
46:1a:38:b9:f9:05:e4:b1:33:1b:95:dc:5b:6b:63:d6:5c:f3:
af:84:be:8d:7c:da:75:8c:bc:fb:2e:aa:13:5b:f4:3a:1b:19:
d6:62:46:84:57:e6:4b:a3:34:94:7b:b6:9b:fa:5e:be:bd:09:
ef:0a:c3:c7:66:40:6d:c8:ce:b8:62:c4:59:87:c7:d7:14:8f:
72:8a:cc:bf:c5:0d:48:b9:09:d6:b0:f6:da:3c:d4:e9:2e:9b:
ab:0b:5a:cf:bf:7e:7e:75:1c:06:1d:5c:61:2e:2e:58:48:d1:
99:9b:b9:b2:d1:22:16:fc:a8:ee:19:fe:ca:be:50:01:4f:ac:
97:24:ac:0a:c5:14:55:30:60:18:c5:23:b7:b0:77:68:03:82:
69:92:54:16:00:2f:50:e0:c6:09:0e:03:a0:f1:2a:66:1f:b4:
5c:0f:b9:0b:99:ca:0d:a1:97:c1:e8:53:c4:f5:fe:f6:ca:9a:
9d:02:4e:01:7b:f5:33:6f:a5:95:c7:ca:41:2b:4b:71:29:b1:
2e:c0:3e:eb:fc:a4:60:49:d3:f9:11:82:3d:a9:3d:fb:2a:88:
40:8a:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:04 2025 by rpki-client