Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25562F56C9C611EFB77098B3762E951A.roa
File: 25562F56C9C611EFB77098B3762E951A.roa (raw, json)
Hash identifier: +Zo0oQqv3wmWEAg2OMEQ0u0Okm3iDQn+HpdvNiyucO0=
Subject key identifier: D0:97:CC:CF:F6:95:52:EF:D3:EA:7C:08:F3:13:55:1E:8F:66:3E:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25562F56C9C611EFB77098B3762E951A.roa
Signing time: Fri 03 Jan 2025 11:30:34 +0000
ROA not before: Fri 03 Jan 2025 11:30:30 +0000
ROA not after: Tue 04 Feb 2025 11:30:30 +0000
asID: 203020
IP address blocks: 154.204.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79012 (0x134a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:30:30 2025 GMT
Not After : Feb 4 11:30:30 2025 GMT
Subject: CN=6777ca5a-d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:55:1f:ed:3e:c8:c8:20:1c:02:1d:d7:c0:
30:fa:62:a4:fe:d0:da:89:1d:eb:cb:d5:97:91:04:
a8:1f:20:b9:75:60:d7:45:74:4f:da:47:ce:ae:7e:
2b:13:98:7f:d2:df:ee:25:a7:29:a0:94:88:8b:8f:
28:56:0c:98:36:a8:98:9b:7d:f4:21:95:91:fc:df:
fb:87:cf:c1:cf:14:18:3b:3b:44:b5:eb:53:af:b3:
61:2d:14:b8:30:1f:44:8c:89:37:32:1a:ec:74:da:
d8:ec:18:b8:87:37:33:de:d2:bc:97:6f:49:f5:0e:
08:cc:4c:67:2e:61:63:92:96:d1:c0:2b:40:b3:c2:
55:c9:69:81:69:36:b4:a0:43:fb:c0:57:bc:6b:e5:
16:1b:11:b8:09:1c:ea:29:bb:8c:4e:c5:ae:c2:6f:
94:31:ba:c4:9b:89:9f:2e:3d:6f:48:7f:ec:e3:04:
d4:37:df:b3:cd:32:88:62:a4:69:89:2f:e0:13:76:
23:68:f6:6d:92:09:7d:f5:97:d5:28:58:72:74:bb:
55:49:c2:e5:9a:48:b8:77:da:c2:d4:a2:6e:e9:63:
e6:fd:5d:27:72:d4:84:b3:3e:d1:50:e8:80:69:8d:
6d:97:a1:11:af:33:84:b6:b4:1d:1e:dd:47:a0:70:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:CC:CF:F6:95:52:EF:D3:EA:7C:08:F3:13:55:1E:8F:66:3E:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25562F56C9C611EFB77098B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:8a:35:8d:51:26:13:5a:94:40:7d:bf:a5:05:c6:28:07:
cf:b2:e3:c1:64:fc:8c:59:74:c1:8c:b1:4f:bc:bd:4e:24:5f:
08:1f:36:cd:33:fe:95:b8:41:4d:3a:58:eb:f3:65:5a:37:a0:
74:b8:3b:f2:cd:0f:fa:e0:37:be:9d:b4:b3:55:44:b9:04:f0:
ef:69:92:2c:24:12:10:6b:62:2c:bf:6d:89:a6:f6:52:6d:70:
da:5e:bd:9a:c2:75:70:ba:01:86:1b:0c:cf:1a:e6:23:b0:c2:
0a:7b:69:c9:38:88:01:ea:cf:73:d9:51:20:db:21:96:5d:65:
35:0e:99:14:bf:b1:1b:36:fe:ed:e9:e8:3c:dc:e5:f6:4f:bc:
b6:03:df:f8:8e:96:6c:b0:2e:ec:8c:b8:87:4a:58:c2:df:29:
e4:4c:55:ad:ad:6f:58:63:ff:90:b0:08:80:a7:d9:bd:ea:ea:
22:77:08:d3:42:7b:1f:43:15:e5:94:d7:95:6c:00:3d:d0:0a:
41:98:01:f5:f9:52:07:ff:55:6a:a1:59:34:e9:b2:ea:f9:79:
56:dc:4f:ef:66:f7:fd:7a:08:56:14:34:b5:95:41:0b:44:7d:
e5:f5:13:83:10:de:fd:8e:eb:7e:cd:75:33:5b:ed:f1:04:07:
1a:aa:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:07 2025 by rpki-client