Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/167A2C9EDB3C11EFA4307390762E951A.roa
File: 167A2C9EDB3C11EFA4307390762E951A.roa (raw, json)
Hash identifier: nSkiINRYOI8u0x6OdYBJuaPkc+32Zu9V79VvMhYK2nY=
Subject key identifier: 4F:6C:4D:1E:8F:B1:2F:2A:34:E5:88:58:43:E2:BA:E4:33:D5:F6:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/167A2C9EDB3C11EFA4307390762E951A.roa
Signing time: Sat 25 Jan 2025 16:47:39 +0000
ROA not before: Sat 25 Jan 2025 16:47:36 +0000
ROA not after: Fri 07 Mar 2025 16:47:36 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84548 (0x14a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:47:36 2025 GMT
Not After : Mar 7 16:47:36 2025 GMT
Subject: CN=679515ab-7d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:be:be:52:eb:cf:59:b9:94:55:86:d1:0d:
6e:b8:84:ab:f8:da:4c:21:07:33:d0:13:bd:5c:14:
2a:e2:06:3a:b5:7f:94:20:ee:f9:ad:7e:c2:ad:d3:
98:f5:8b:f8:c4:b3:63:d4:34:6d:a5:ac:b0:64:0a:
45:36:39:3e:5b:34:39:26:89:45:db:82:be:df:d3:
36:12:1b:78:e6:0e:83:42:63:16:68:46:33:0b:74:
05:37:dc:82:48:ee:5f:89:c6:14:e5:c3:a0:fb:f0:
3b:87:a8:ed:e1:47:0d:42:97:9f:78:3b:4f:d3:cf:
9d:e7:94:8a:53:27:e7:96:c0:80:06:9e:d0:07:1d:
61:a7:63:db:2b:de:11:fc:44:52:0b:69:c1:09:92:
4f:69:2d:c3:de:90:18:67:64:3f:87:90:27:76:ab:
9c:22:de:1f:70:da:79:89:56:85:f2:40:31:5e:99:
ce:8a:40:be:db:d8:93:b7:5e:cb:04:2f:c8:36:19:
6e:5e:4a:d0:b9:22:81:f1:b9:99:8f:fe:ad:68:7f:
dc:ab:08:66:33:e8:b7:85:57:ab:7b:52:08:51:93:
b4:23:a9:d4:51:5c:ec:8e:6e:d9:33:99:19:7b:09:
a8:1c:8d:ae:a3:47:25:08:59:a1:b5:00:25:3d:18:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:4D:1E:8F:B1:2F:2A:34:E5:88:58:43:E2:BA:E4:33:D5:F6:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/167A2C9EDB3C11EFA4307390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e9:63:60:88:75:ec:7a:93:ae:40:78:f9:e6:04:24:5e:5f:
4c:ec:8c:93:74:69:43:61:a7:ed:23:23:87:56:4e:24:48:ac:
ab:85:2c:98:70:c7:b3:2e:47:f1:53:78:3d:d7:21:b0:86:4a:
f1:cd:d0:85:bb:b6:89:7a:b7:51:21:99:e8:6a:67:fc:4a:40:
e5:0a:79:28:5f:39:b8:35:54:f2:94:c3:bb:76:d0:5b:48:e3:
c9:5f:07:df:a1:0d:11:43:e0:b7:0c:73:e6:d5:6d:37:8d:69:
58:4d:24:cd:95:78:35:00:6e:b7:07:aa:80:f9:32:67:27:07:
f9:77:ba:ed:1e:a3:3b:fa:75:1e:fc:ab:e2:ed:cf:29:5c:d5:
0f:61:a1:8e:58:9b:a2:20:37:ee:8b:07:d6:93:3b:c2:b8:fc:
fb:e7:21:a0:2b:18:91:7b:ea:9c:07:a1:c4:2d:0d:c5:2d:e6:
9c:59:13:7c:ab:0f:e4:50:ca:6a:3f:9c:d4:b7:31:d0:a7:12:
e9:b8:56:b4:62:9e:91:7b:3f:97:3a:55:0e:3f:f7:9f:45:ea:
6b:7e:6b:d8:cb:52:3c:72:51:37:ba:55:46:c1:97:3f:92:cb:
b8:d5:25:46:1d:49:a7:aa:84:d5:87:d2:05:f8:6b:64:3b:95:
7c:ea:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:46 2025 by rpki-client