Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E403042D0BC11EFB5923364762E951A.roa
File: 2E403042D0BC11EFB5923364762E951A.roa (raw, json)
Hash identifier: ETXs+SZhuIuKb1nucNzZHu2pWxxnZUUJTqPJFcnWbwQ=
Subject key identifier: 74:38:64:43:08:E5:10:D0:D0:83:43:6F:F3:29:07:02:E0:8B:6E:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E403042D0BC11EFB5923364762E951A.roa
Signing time: Sun 12 Jan 2025 08:06:52 +0000
ROA not before: Sun 12 Jan 2025 08:06:48 +0000
ROA not after: Fri 14 Feb 2025 08:06:48 +0000
asID: 142032
IP address blocks: 154.222.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80560 (0x13ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:06:48 2025 GMT
Not After : Feb 14 08:06:48 2025 GMT
Subject: CN=6783781c-7c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:ad:74:f2:b2:71:e0:66:63:bd:d3:8e:b2:
82:c1:3a:8b:d2:25:dc:36:75:cd:ad:1d:c5:b9:c6:
1f:7b:c6:f4:c1:94:b2:fb:2c:d4:7b:fd:80:bb:6c:
7d:c9:e1:26:f8:6c:9b:3c:73:b7:b0:93:ef:94:aa:
6d:67:0e:b3:11:89:8a:7a:69:d8:d5:38:92:ec:99:
5a:d3:ba:bc:89:df:15:6f:12:8d:e9:47:55:1a:4e:
d7:0f:1f:93:f6:6b:e7:6a:c3:a6:f1:1c:0a:0f:d9:
38:0c:a4:3f:03:cf:e5:49:28:81:13:a0:e8:71:b6:
e0:ed:e2:8e:d4:4b:f7:28:0d:03:f6:1e:99:b9:f7:
81:63:fd:cc:e6:e5:05:ea:fb:aa:54:3f:86:77:2e:
30:6b:64:f9:2a:20:ed:80:03:90:89:47:85:5e:f6:
c6:40:57:44:2f:69:00:e9:98:f0:f6:21:ab:d9:60:
93:92:24:b0:de:39:c4:42:de:2c:45:2c:5c:e4:a2:
cc:5a:7e:74:07:e9:c4:91:9d:ee:03:65:ae:7c:7a:
e4:7c:8b:b1:d6:01:4a:69:38:74:62:71:4c:d7:2b:
07:c7:7b:7d:12:62:bb:87:d4:14:b4:ea:3a:21:24:
22:f2:6a:c8:e6:33:a1:38:27:20:6e:d6:f5:00:fc:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:64:43:08:E5:10:D0:D0:83:43:6F:F3:29:07:02:E0:8B:6E:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E403042D0BC11EFB5923364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:3d:25:58:e9:a0:c4:95:55:6d:20:9c:16:ec:c3:42:00:05:
be:b7:3b:72:be:fe:28:d4:bc:fb:d9:6d:48:6a:ec:bb:c1:eb:
2e:7a:25:59:8c:94:4b:39:7a:e8:6d:63:33:ee:b9:91:78:dd:
cd:ad:b9:2f:33:f0:aa:fb:48:b1:5b:38:39:48:36:af:f3:95:
65:33:f1:24:20:72:14:b4:b5:88:fe:05:7e:3d:51:9d:32:13:
15:37:db:62:f4:74:cc:1c:f6:eb:eb:ee:4a:a4:13:71:4d:ca:
5b:fe:be:e4:3b:4f:b9:11:f4:5e:35:cd:b9:5a:df:6a:76:f4:
93:ce:b7:44:18:eb:58:79:40:37:14:5d:0f:46:2e:90:78:9e:
fd:39:64:8e:cc:e0:a3:d3:f9:72:04:77:0d:0d:74:40:91:36:
31:40:f7:25:24:21:a1:10:3d:af:2e:1a:6b:1c:d5:71:c9:c2:
3d:65:ff:e0:53:34:09:45:d8:ce:28:8f:4d:93:97:0f:d0:f1:
a1:6f:58:d4:31:42:63:22:c5:ed:af:15:37:f8:9e:c0:4c:02:
53:bb:ac:55:60:fd:59:08:d1:00:ef:3c:42:0e:ec:84:e2:c6:
50:0d:58:fa:34:b9:43:ab:55:82:74:c1:5b:98:4c:65:0c:61:
25:54:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:17 2025 by rpki-client