Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23051AB2C9C811EF9BCDA741762E951A.roa
File: 23051AB2C9C811EF9BCDA741762E951A.roa (raw, json)
Hash identifier: d2c2azmk2hNSphOCfdCiQn+LxaskYjSjV6Xlv8wC27Q=
Subject key identifier: 21:22:99:FC:13:92:CB:3F:36:BF:0E:CA:F4:37:99:CA:08:A5:C6:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23051AB2C9C811EF9BCDA741762E951A.roa
Signing time: Fri 03 Jan 2025 11:44:49 +0000
ROA not before: Fri 03 Jan 2025 11:44:45 +0000
ROA not after: Tue 04 Feb 2025 11:44:45 +0000
asID: 203020
IP address blocks: 154.207.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79028 (0x134b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:44:45 2025 GMT
Not After : Feb 4 11:44:45 2025 GMT
Subject: CN=6777cdb1-783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c9:ec:bc:33:b5:74:3b:45:c4:18:4b:00:f7:
70:42:52:dc:00:be:74:eb:e2:df:53:97:31:90:8f:
62:0e:11:57:ce:97:af:5d:22:64:5f:58:82:df:7f:
48:f9:44:61:2a:09:e7:a1:c6:1f:de:7f:44:e9:1c:
20:b1:37:46:a3:6e:72:68:6f:b2:67:c3:2c:8f:96:
a8:7c:de:af:1d:d0:09:66:29:8f:46:03:47:01:32:
58:81:70:00:68:1e:4b:29:6b:c8:ca:66:65:2e:2f:
4f:97:c6:67:8f:ee:d1:84:e7:08:4d:32:10:0c:48:
23:3a:30:63:ef:65:69:ea:86:cb:3e:db:38:f2:6e:
af:e0:59:6b:ef:73:22:f0:75:87:9d:e4:bb:d7:00:
9d:cc:49:0d:31:59:c8:55:ba:25:f1:32:63:d4:61:
36:01:fd:6b:56:1b:ef:69:1f:1f:d3:90:3b:d6:b0:
d6:d4:d8:58:87:4a:34:34:17:4d:ca:74:6f:c0:77:
ed:86:e8:ce:2e:02:72:2d:43:dd:c5:b0:02:f1:bb:
d6:68:36:48:82:0d:71:df:d0:3f:f7:5e:4b:cd:8b:
38:33:57:7a:89:a8:55:68:21:52:92:e8:15:60:30:
b0:82:59:a5:ad:98:ae:59:db:95:a2:a7:ed:ab:fd:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:99:FC:13:92:CB:3F:36:BF:0E:CA:F4:37:99:CA:08:A5:C6:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23051AB2C9C811EF9BCDA741762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.248.0/22
Signature Algorithm: sha256WithRSAEncryption
02:2a:83:17:4a:51:14:79:23:72:7b:1d:8c:e5:a6:77:e0:86:
12:72:82:e5:80:8c:cf:8b:ff:75:31:97:7d:17:0e:64:0a:e1:
5a:ca:f3:db:e6:d1:5c:61:8c:dc:ba:32:bf:3a:1e:39:f2:a8:
5a:ea:e3:b2:6c:b6:a9:e7:77:76:a7:1e:7b:5d:80:21:21:ac:
c9:03:d6:c2:a2:e6:ed:85:2a:35:26:69:64:e8:64:0e:6d:15:
e0:b3:35:c2:f4:ae:8e:48:e3:41:1a:98:e7:6d:aa:4c:33:7f:
a2:13:98:f6:44:4c:9c:92:e6:16:bb:be:55:91:f2:31:c9:ed:
3e:46:d2:d4:95:6d:ac:fb:ae:01:cd:00:c2:fe:fd:8f:12:70:
da:cf:36:9a:be:68:98:55:81:f0:7e:86:82:28:c7:e6:03:57:
ea:d6:1f:f9:ae:14:ae:37:3c:e5:56:b3:4e:cc:e0:f4:71:d4:
b4:ea:3f:56:a4:75:de:ef:95:7f:92:03:8a:91:8d:b1:fa:0c:
a7:ac:e2:e0:78:b8:8c:59:16:85:2b:36:b1:21:7e:e8:bb:f5:
55:5c:be:d6:65:ae:00:96:9e:04:b2:19:95:40:de:6e:cb:4e:
3b:60:4a:b2:5c:07:19:c8:c5:32:c0:9c:30:98:aa:8b:86:5c:
1f:15:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:45 2025 by rpki-client