Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3227CC42DC8D11EF9F78A672762E951A.roa
File: 3227CC42DC8D11EF9F78A672762E951A.roa (raw, json)
Hash identifier: kHRAMjgF2mOy1rXwgaAGoWElHMw3jtVWSXOOGPsC0eg=
Subject key identifier: A9:64:38:A9:28:7B:CF:A1:C1:76:3D:7F:28:A0:EE:86:B9:58:31:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3227CC42DC8D11EF9F78A672762E951A.roa
Signing time: Mon 27 Jan 2025 09:00:46 +0000
ROA not before: Mon 27 Jan 2025 09:00:43 +0000
ROA not after: Sat 08 Feb 2025 09:00:43 +0000
asID: 5065
IP address blocks: 154.85.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84847 (0x14b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:00:43 2025 GMT
Not After : Feb 8 09:00:43 2025 GMT
Subject: CN=67974b3e-ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:8c:4e:b5:09:8f:bc:de:09:c9:39:42:53:
21:ea:8a:95:b4:d3:41:78:29:d8:ec:4b:cd:67:44:
25:9e:f7:13:08:72:45:68:f7:46:c8:e7:5d:ba:aa:
5d:b1:7d:ac:b7:2f:cd:c0:66:9a:a8:07:e8:29:df:
64:29:5a:7d:dd:2d:83:f9:45:0f:71:4a:f1:bd:74:
d2:6c:d6:8f:b5:99:92:95:55:66:41:46:a2:df:28:
82:2a:52:bd:22:21:10:bb:17:f0:36:04:4a:0e:d3:
68:76:31:21:8d:04:d8:67:5a:e5:7b:1f:b4:ed:9e:
a3:f9:57:0c:51:39:0a:13:e6:fd:3f:35:a1:28:8a:
89:fb:26:d6:00:0a:96:d1:59:b5:8c:92:8a:25:47:
69:b1:e1:6c:58:f0:ef:52:07:45:e7:82:38:00:d6:
96:ce:e2:31:8b:56:45:c7:e4:b8:fc:04:02:56:b7:
00:91:d1:e6:b0:63:3c:a8:df:31:86:64:45:17:75:
65:da:f7:f5:87:f3:d0:a4:12:33:59:d4:e4:82:29:
e6:14:c1:03:9d:53:79:ad:e7:6d:b4:c1:1e:d0:2c:
66:26:6b:a2:e8:89:98:9e:ec:90:be:60:6f:9d:14:
a0:2e:2a:04:16:69:27:e9:55:65:0c:38:bc:35:2f:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:38:A9:28:7B:CF:A1:C1:76:3D:7F:28:A0:EE:86:B9:58:31:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3227CC42DC8D11EF9F78A672762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9a:b3:4d:cb:9f:63:81:0a:e6:9e:da:3d:94:48:ac:0a:95:
37:19:86:32:ec:db:82:c8:8e:22:96:5d:b6:fb:94:df:a8:29:
6a:cf:02:8a:cc:9c:c0:bc:43:06:58:76:69:ce:42:96:9a:c6:
b6:f8:e6:ca:6d:e8:f2:95:a8:96:73:4c:09:37:4e:1c:2f:36:
65:16:a5:17:0c:c2:35:ee:81:e4:51:55:99:64:5c:4e:78:1f:
a7:90:97:89:c7:01:40:bb:d6:e7:7e:db:ae:99:c0:d9:6e:62:
f6:26:13:55:69:ee:bc:68:b5:3f:8d:87:8a:47:65:99:11:31:
25:5f:92:3f:ab:c7:fc:5a:f2:47:e6:8c:ad:51:14:b1:0c:7a:
c0:58:a8:88:8e:52:3e:e3:54:cd:4f:96:44:96:bc:21:8f:5a:
b0:c6:33:51:bd:74:c7:5b:8c:3a:12:2d:9e:3e:bb:07:a9:76:
fc:f5:8f:21:b3:d4:d7:07:4f:03:f2:d6:4a:5f:71:03:ae:df:
28:b6:c0:d8:36:78:22:cf:ab:c6:dd:6d:e7:49:66:f4:87:2e:
db:81:a9:11:7a:40:aa:cf:24:26:02:e5:70:11:b1:af:d4:2e:
58:ec:cb:0b:1d:e4:1b:cc:9b:09:8c:0e:71:d9:ad:81:5b:63:
1f:5d:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:53:08 2025 by rpki-client