Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32702BDADBE911EF97504E9F762E951A.roa
File: 32702BDADBE911EF97504E9F762E951A.roa (raw, json)
Hash identifier: v/z27eEYpYTWpYl48PBu6PEhNpFl9QO6RKZZ+uLsQOM=
Subject key identifier: 87:C2:BD:76:C4:7B:AA:6D:23:9A:4E:4B:02:31:41:B7:5F:46:D7:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32702BDADBE911EF97504E9F762E951A.roa
Signing time: Sun 26 Jan 2025 13:26:49 +0000
ROA not before: Sun 26 Jan 2025 13:26:45 +0000
ROA not after: Wed 05 Mar 2025 13:26:45 +0000
asID: 48031
IP address blocks: 154.222.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84638 (0x14a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:26:45 2025 GMT
Not After : Mar 5 13:26:45 2025 GMT
Subject: CN=67963819-7e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:4d:70:ff:37:fd:84:9a:9e:ce:1b:d3:82:
66:7a:f1:96:0c:58:34:19:e9:e2:4d:65:46:f4:c4:
7d:ed:49:fd:58:72:79:7d:aa:10:fc:7c:23:d2:3a:
b1:1e:fb:8b:d1:e2:a4:2b:67:e3:c6:34:97:81:e9:
45:4b:db:ad:a5:fb:ad:d7:94:6d:5e:26:4f:fc:ba:
ff:94:57:56:31:af:3e:64:b5:5f:00:13:7d:5f:7d:
79:97:21:a1:d6:ed:4c:d8:8e:66:b7:65:56:f7:40:
f8:bb:50:a3:ce:99:69:25:b6:37:b7:31:bd:cf:77:
89:d4:97:c8:6b:35:83:0d:5f:1f:f5:97:c3:82:14:
4a:54:67:e6:d2:dc:45:6b:a2:5d:d5:49:67:14:94:
ee:7d:e9:5f:ef:e8:d2:1b:58:04:f6:17:4b:7a:a7:
0f:31:a8:9e:82:15:49:65:91:4e:03:64:78:0d:01:
a1:bf:ec:c5:70:84:01:d9:98:d7:3d:9d:b0:96:e2:
61:f2:a9:b3:e4:74:9f:66:0a:58:16:47:84:85:ba:
dc:63:ba:b0:62:15:dd:59:55:59:0c:c6:3a:1d:82:
ef:d2:49:ff:1c:e2:5f:3d:61:dd:35:7f:e3:a7:e7:
b1:f9:fe:ab:43:c4:88:ac:03:79:b2:24:fd:c2:14:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:BD:76:C4:7B:AA:6D:23:9A:4E:4B:02:31:41:B7:5F:46:D7:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32702BDADBE911EF97504E9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:72:6e:85:32:9e:b9:ec:0b:b1:99:32:06:c0:17:bf:ce:d6:
a1:74:1b:54:c4:83:11:b4:01:ab:72:5d:bf:42:61:1c:4d:4e:
19:20:0d:7f:e9:a5:99:91:b8:dd:6e:f4:48:1b:76:25:0f:28:
4d:50:3e:c9:44:78:f9:c0:8c:15:78:f3:34:63:a5:38:10:18:
39:f6:5a:78:8a:12:db:81:02:cf:5f:e8:52:53:0a:29:c2:ee:
f2:10:c4:0f:51:d0:a8:91:67:04:3a:dc:9e:37:0b:17:23:79:
0e:f4:1a:ab:11:08:3b:b6:54:6a:4f:99:da:ad:a7:7b:54:a9:
ab:f7:24:45:a9:ec:27:03:09:7d:e5:56:be:fd:f7:b7:e8:a0:
eb:f4:08:1e:fe:b7:de:b7:01:cb:7c:b5:2b:44:56:7b:69:a0:
5e:f3:80:af:2d:d2:e6:61:16:2e:78:dd:98:b0:09:d5:92:dd:
2f:84:36:86:c1:5a:fa:54:fb:51:95:53:06:b1:49:3d:c5:6b:
a4:5f:00:38:14:75:d0:3e:2e:55:d1:bd:c7:f6:16:f6:cf:36:
55:d8:c7:1b:bb:c3:67:6f:93:6c:b1:2c:46:a8:e1:76:51:be:
09:c3:40:03:06:47:89:51:c0:ba:4c:5d:3b:c0:fe:3b:d5:10:
09:e5:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:33 2025 by rpki-client