Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236EB328DA5D11EF9A9787AC762E951A.roa
File: 236EB328DA5D11EF9A9787AC762E951A.roa (raw, json)
Hash identifier: aUIIGHkxZE6Zj77PSwQ8nT9XgyoV8dCboZX9hnvRDz0=
Subject key identifier: 81:96:02:19:A5:69:7A:FD:42:07:95:DE:EA:3A:42:CB:EC:A9:F6:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236EB328DA5D11EF9A9787AC762E951A.roa
Signing time: Fri 24 Jan 2025 14:11:43 +0000
ROA not before: Fri 24 Jan 2025 14:11:40 +0000
ROA not after: Wed 05 Mar 2025 14:11:40 +0000
asID: 48031
IP address blocks: 154.222.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83958 (0x147f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:11:40 2025 GMT
Not After : Mar 5 14:11:40 2025 GMT
Subject: CN=67939f9f-1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:5e:68:87:e1:23:ec:e6:97:38:85:19:6b:
d1:e0:7e:fc:f8:f2:c1:86:64:b5:ea:d7:e3:14:52:
10:f3:2b:d1:a5:79:37:e6:0a:c9:95:ad:43:c1:87:
64:73:1d:2d:16:20:29:c2:9b:ee:6d:ec:48:cf:28:
6d:dc:5e:68:53:49:ab:b9:9e:39:fb:03:7e:a9:4c:
36:99:ed:3a:d0:e8:67:09:dd:7d:23:f0:26:f4:f1:
07:c4:15:e7:0d:97:0d:a3:87:ef:aa:95:f3:ed:f0:
29:0b:b4:c6:62:97:f0:3b:d1:c9:ab:a8:80:3c:4f:
c2:42:bc:06:6f:8e:49:96:47:7e:d5:bf:d0:f0:48:
fb:83:b8:55:a5:5c:82:e7:09:0b:09:e0:95:51:9c:
b2:eb:c0:8d:27:87:39:c1:9d:ce:5d:c0:da:3b:c0:
21:7c:8a:56:56:d5:d9:ad:90:71:e6:6e:6e:0c:09:
ae:3e:ab:f2:58:ca:29:47:86:f9:cc:b5:f4:ed:42:
37:2a:9d:78:1f:8f:bd:32:af:f1:3c:ae:62:2f:82:
88:77:d5:ac:7b:6f:e4:7c:f4:e2:b1:b3:b9:32:ca:
d7:91:36:f7:6c:e4:dd:d2:f3:27:90:76:73:e8:4d:
09:22:32:58:27:30:98:bb:0a:85:6d:a3:b0:ee:43:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:02:19:A5:69:7A:FD:42:07:95:DE:EA:3A:42:CB:EC:A9:F6:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/236EB328DA5D11EF9A9787AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.243.0/24
Signature Algorithm: sha256WithRSAEncryption
60:34:66:3f:7d:55:3a:c4:0a:88:3d:d7:10:64:95:5d:1b:65:
12:2a:e6:33:ea:b9:b9:e6:83:f8:7d:ea:d4:2b:fd:51:3b:89:
d7:68:93:0a:e8:bb:25:e5:29:21:46:47:8f:91:83:55:0f:b1:
50:1b:af:05:5f:29:4a:8d:62:ff:75:41:47:d1:8a:49:a5:53:
b0:32:52:b0:e6:be:a8:24:c7:84:c6:9d:02:a7:46:94:08:13:
54:d9:63:32:27:65:e7:84:24:28:9f:93:98:6a:8a:af:16:88:
61:db:d6:4d:42:9a:74:12:a3:82:c4:0a:df:11:23:90:20:38:
88:e3:01:ca:58:2a:2e:11:b0:70:60:ab:dd:f4:ac:72:8a:01:
74:f7:cb:43:71:23:58:48:25:4d:7b:b2:b2:ab:1f:45:89:71:
5f:62:c7:1e:4d:4d:da:df:d4:f9:38:99:71:58:6e:9c:83:2a:
3d:fc:f1:1b:c4:92:f2:e4:31:01:2f:17:14:20:ab:fe:e8:34:
31:82:8f:cf:09:36:7a:1f:07:75:77:50:8b:e9:44:79:15:b9:
07:bb:c4:12:6d:7f:f5:24:38:be:63:97:5a:28:5a:4c:de:89:
3c:d4:20:8b:6b:7a:9b:c6:6c:98:6e:80:e6:22:23:13:1c:0b:
87:64:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:44 2025 by rpki-client