Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C57BE84DB3111EFA55D3347762E951A.roa
File: 1C57BE84DB3111EFA55D3347762E951A.roa (raw, json)
Hash identifier: /6BbxNNYKl8JxwFaqjscchSKho2ig2hD0pUrQ8DEB80=
Subject key identifier: 5D:93:FA:1B:CA:79:EC:BB:42:33:5D:6D:3D:FF:BE:57:E9:54:00:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C57BE84DB3111EFA55D3347762E951A.roa
Signing time: Sat 25 Jan 2025 15:29:05 +0000
ROA not before: Sat 25 Jan 2025 15:29:01 +0000
ROA not after: Fri 07 Mar 2025 15:29:01 +0000
asID: 63139
IP address blocks: 154.223.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84480 (0x14a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:29:01 2025 GMT
Not After : Mar 7 15:29:01 2025 GMT
Subject: CN=67950341-02b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:17:a1:50:69:59:f6:3a:b0:c6:74:4b:b3:
6c:6d:19:fb:20:b0:a7:a2:5f:92:9a:ac:d3:71:20:
bb:e8:ae:cd:c9:a3:e9:be:93:4d:7a:af:5b:78:cf:
74:8d:ae:0b:b7:3c:2c:75:c0:0b:fc:03:a3:f5:9d:
9b:0b:2d:a1:b2:18:2e:9c:1e:a5:c5:55:23:d1:d9:
b0:b8:1e:73:b2:7c:d0:27:75:ec:0c:52:1e:7b:55:
50:d1:e5:48:7e:84:7c:f1:cb:1e:0f:94:47:d3:4a:
d4:f0:cf:66:cd:c6:f9:b6:9f:9e:34:61:a0:34:8c:
af:5c:db:e3:29:33:2c:5d:27:d7:25:5a:4e:68:2a:
81:29:42:c7:ad:6e:f7:66:a4:66:1d:08:0f:01:1a:
8a:3e:10:a4:b7:c5:5f:91:53:c1:bb:aa:13:54:44:
c9:8f:ad:bd:83:d1:cc:6e:cf:ab:53:35:d2:cb:0b:
e9:e1:8b:a1:7b:65:66:cd:61:a7:cb:cb:ec:2d:8a:
f1:d1:cc:cb:41:5c:ba:b1:1b:fd:d1:5a:fa:94:b9:
b2:e8:af:b6:cc:1e:e4:b4:ab:bf:37:94:39:3d:a9:
95:50:e4:2a:73:ee:ba:6f:07:9d:9d:46:bd:19:c4:
cf:9d:2d:a7:ae:25:a9:0a:77:1a:78:e9:40:f1:12:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:FA:1B:CA:79:EC:BB:42:33:5D:6D:3D:FF:BE:57:E9:54:00:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C57BE84DB3111EFA55D3347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.31.0/24
Signature Algorithm: sha256WithRSAEncryption
19:af:4c:2b:fb:ef:9f:2b:9f:02:68:91:f0:ae:a5:c6:b2:73:
17:02:c6:a6:cd:a7:f7:cb:01:45:da:c1:64:30:8e:59:6c:4b:
93:a6:a1:40:00:c7:59:8d:fb:a9:52:5f:6b:fa:70:8f:d6:f6:
d4:43:e4:28:1e:25:80:97:18:e9:96:e0:e4:cc:c0:a0:71:8a:
71:bd:0f:62:67:0d:1a:af:b9:f9:94:0f:cc:24:96:51:4c:35:
5a:42:f9:cd:31:5e:21:1c:6e:2c:15:5d:bf:a0:06:5d:27:95:
af:85:d5:02:0e:38:a9:e3:58:ba:57:b9:cf:5f:7c:af:e6:f5:
2b:d2:0e:24:ae:c9:64:b3:4b:f7:1e:6b:3b:bb:74:d4:90:c4:
8d:ac:7d:e6:0f:8e:54:56:ef:e5:e2:d2:ca:d4:e2:5a:5f:11:
54:13:98:15:88:11:a0:e8:50:99:89:db:80:6c:f2:ae:8c:94:
87:4b:73:23:86:b7:a8:56:79:b7:13:35:fb:d1:93:a0:f5:0d:
91:66:f0:56:7e:c2:c3:99:07:e2:92:39:cf:ff:43:60:4c:73:
62:8c:a7:e5:0a:5d:b8:2e:23:9c:44:32:95:07:f9:0f:07:99:
6b:64:d5:5f:a1:fa:21:88:96:fe:62:2a:1b:de:98:e8:d4:28:
56:41:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:55 2025 by rpki-client