Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C51458ED9FD11EF82D3B9A0762E951A.roa
File: 1C51458ED9FD11EF82D3B9A0762E951A.roa (raw, json)
Hash identifier: wIpwPK6ap7tWlwPk90BqwMEIDCGYU9IdvaIh7NRYg2M=
Subject key identifier: D7:B8:D5:A1:4D:8C:3B:A2:BA:6F:6D:7B:CF:93:F6:08:1E:0D:63:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01436E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C51458ED9FD11EF82D3B9A0762E951A.roa
Signing time: Fri 24 Jan 2025 02:44:20 +0000
ROA not before: Fri 24 Jan 2025 02:44:16 +0000
ROA not after: Sat 01 Mar 2025 02:44:16 +0000
asID: 62240
IP address blocks: 154.223.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82798 (0x1436e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:44:16 2025 GMT
Not After : Mar 1 02:44:16 2025 GMT
Subject: CN=6792fe84-95a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:5e:1d:78:a4:4a:ea:71:50:55:fa:84:68:
ac:14:e1:54:9d:89:3c:bc:d8:2e:6a:32:2f:8d:f0:
04:b1:19:47:e6:f2:42:d5:70:44:ac:7d:fb:5d:78:
3f:c0:bf:b4:18:39:22:6a:17:ea:b2:5c:74:be:60:
64:12:26:c9:7e:0e:6c:ac:89:b4:4f:7e:1d:10:80:
18:af:43:b5:7f:5d:10:f4:c0:95:06:fc:c3:eb:f5:
cd:bf:38:d4:2c:6a:b7:0c:f9:ef:0c:6c:10:70:c6:
f0:45:a4:25:dc:d7:46:62:54:ff:40:d5:26:33:a5:
c0:12:6f:41:e5:ca:3c:6b:c9:18:be:e7:46:05:e2:
b0:0c:d9:d6:c2:a2:2d:d0:ff:2b:be:28:bf:11:b3:
f4:39:9d:ac:cc:e4:b4:43:b5:4b:80:bd:77:a4:fc:
a5:76:89:c5:88:79:cc:26:d5:05:52:f6:a8:de:8c:
22:30:07:6b:00:15:45:6e:52:5e:37:18:f7:08:f5:
60:78:2a:59:61:2d:03:bf:62:1d:9e:9c:9d:11:f5:
c3:f8:54:70:76:b8:04:07:aa:81:a2:9c:23:e1:58:
e0:8f:29:85:60:bc:b2:4a:40:c4:c7:ef:71:8a:9e:
7e:7a:14:e2:eb:d2:18:ae:cc:d5:8b:42:65:06:93:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:D5:A1:4D:8C:3B:A2:BA:6F:6D:7B:CF:93:F6:08:1E:0D:63:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C51458ED9FD11EF82D3B9A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.222.0/24
Signature Algorithm: sha256WithRSAEncryption
66:53:f3:0b:28:7b:f8:4e:03:7d:ba:ab:d6:65:57:76:2d:d0:
87:93:ee:39:43:00:17:d1:f3:71:1d:89:65:7e:ec:39:26:ae:
54:2c:75:aa:6b:a7:50:a8:ff:59:8b:ba:81:58:a2:4e:ac:a2:
73:47:24:e8:f1:6b:fc:19:82:9d:c4:51:63:46:5d:d3:08:7a:
34:9e:ac:b5:ce:c8:e3:ac:50:4e:b3:dd:8d:e8:54:b9:32:20:
8f:27:60:7c:40:64:f5:01:d3:de:83:89:a0:c6:20:ff:ac:ba:
6f:9d:c9:1b:14:f3:81:72:e3:64:a5:04:f2:5a:eb:57:be:3e:
e7:0d:01:e3:03:84:20:95:66:bd:8e:ef:c1:77:f4:a8:2a:27:
e7:99:c8:2e:5f:31:39:d4:72:86:78:88:4a:95:7c:a7:32:82:
57:98:4d:66:04:9d:6d:73:6f:b4:72:cc:35:f9:5e:e3:26:ac:
89:35:4d:25:b7:5c:2f:8d:7c:9f:f6:5e:d8:4e:af:8b:14:70:
e5:65:ba:58:32:73:b1:45:95:6a:97:1f:90:32:4e:ca:1d:37:
1c:fa:7e:4f:c2:11:63:36:a6:01:be:10:99:e4:b9:8a:96:d8:
75:ec:f2:5a:2b:b5:3e:f7:d8:f6:4a:04:bb:8d:a6:fb:63:21:
38:52:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:50 2025 by rpki-client