Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241A8396DB3011EF88FD9FBE762E951A.roa
File: 241A8396DB3011EF88FD9FBE762E951A.roa (raw, json)
Hash identifier: g5UBPJ57UT2Gxoivo7OsVsL+F3hZVAKnAtrwzaVaMPc=
Subject key identifier: 6F:75:05:F8:13:36:99:11:91:38:B7:ED:50:80:BC:00:3C:7D:04:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241A8396DB3011EF88FD9FBE762E951A.roa
Signing time: Sat 25 Jan 2025 15:22:08 +0000
ROA not before: Sat 25 Jan 2025 15:22:05 +0000
ROA not after: Fri 07 Mar 2025 15:22:05 +0000
asID: 138915
IP address blocks: 154.223.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84474 (0x149fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:22:05 2025 GMT
Not After : Mar 7 15:22:05 2025 GMT
Subject: CN=679501a0-1e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:40:a3:19:77:b8:4a:46:73:2b:aa:41:48:
0d:26:11:01:b4:54:69:b1:88:45:50:1d:1b:56:65:
30:ed:70:6c:3c:5b:c2:2b:c4:03:72:36:ef:4e:b4:
00:7f:62:5a:0b:e0:15:12:e0:9c:b5:85:4f:f6:f8:
f1:80:b5:8a:6d:7b:1a:8c:df:b1:59:29:9d:83:b5:
ca:74:29:57:5b:83:da:b0:fd:e5:f1:a0:bd:66:4e:
5b:85:a4:1b:d9:eb:b8:b8:0e:d3:41:99:e6:93:03:
47:d5:5a:b5:d7:54:a1:60:99:34:1b:1b:a1:93:ed:
91:0e:8e:b8:fc:89:bb:33:ee:e8:92:70:cf:26:f7:
a8:e2:0f:ff:9e:c7:04:ce:93:8a:05:bb:3a:7a:5b:
9d:a7:26:37:c2:9b:ef:fa:37:5c:d3:72:d7:dd:2c:
7e:d7:1f:a9:dd:4a:7a:12:22:2b:42:60:fe:b9:e9:
fd:71:a8:e8:dc:c6:32:9b:b5:2e:ce:89:cb:7d:02:
16:b0:27:17:ac:10:3f:18:c4:fb:88:c8:60:e2:d5:
15:70:da:63:a8:d8:fc:fb:c3:32:88:73:88:dd:f2:
15:71:60:70:43:a5:6d:93:26:d9:6c:9e:6b:04:af:
77:d0:e9:4f:4f:94:35:42:07:fe:61:b8:7c:70:2c:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:05:F8:13:36:99:11:91:38:B7:ED:50:80:BC:00:3C:7D:04:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241A8396DB3011EF88FD9FBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:f3:ab:d7:cb:2c:b9:36:52:22:c8:3d:ea:dc:57:9b:c5:0a:
c7:9c:77:1b:67:43:1e:48:97:83:30:6d:93:50:95:70:83:74:
d2:e1:71:0d:28:72:d4:de:c6:59:09:4c:7d:88:56:67:5a:cc:
8a:a4:4f:e2:be:c7:67:9c:fc:4b:6d:17:aa:d7:c6:55:28:98:
ab:81:dc:13:24:55:91:27:4a:3a:f5:4a:ce:6f:d2:eb:12:3e:
a1:76:b9:83:2f:16:9e:c2:26:9b:c1:e6:78:37:01:6f:9f:f3:
09:3c:c5:72:43:db:49:1d:f9:1c:0f:a4:9e:be:eb:88:ea:51:
82:31:4d:ac:db:9a:08:ff:c1:1b:8a:9a:99:b7:cc:e3:4d:0f:
2e:82:15:5b:7d:34:0f:72:4e:bb:6b:5f:38:78:39:c4:99:99:
03:e9:6d:5b:d0:74:9b:f0:a4:5b:11:06:f7:ea:c1:9a:7b:e6:
1b:a1:d7:d2:64:d8:67:ea:55:1f:1f:8e:52:e3:e1:c9:07:3d:
20:4f:05:d3:8d:b3:92:dc:6b:e2:5c:c7:6a:a9:4b:0a:58:f3:
77:ca:d3:d5:c4:e4:8f:91:bc:b4:cd:c4:a2:64:e3:37:d2:b4:
d0:9e:e2:44:d8:e2:40:45:d5:93:3c:b5:61:79:03:01:6f:77:
4f:ef:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:57:58 2025 by rpki-client