Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3422F302DA6011EFA6A7E342762E951A.roa
File: 3422F302DA6011EFA6A7E342762E951A.roa (raw, json)
Hash identifier: l58IibRIgKtBW7S/kmAsxLX3UmcncJ6qNGGtFp+PFRM=
Subject key identifier: F5:74:38:1F:B2:18:62:24:95:9A:0A:57:3B:BB:61:15:75:47:36:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01483A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3422F302DA6011EFA6A7E342762E951A.roa
Signing time: Fri 24 Jan 2025 14:33:40 +0000
ROA not before: Fri 24 Jan 2025 14:33:36 +0000
ROA not after: Wed 05 Mar 2025 14:33:36 +0000
asID: 48031
IP address blocks: 154.222.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84026 (0x1483a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:33:36 2025 GMT
Not After : Mar 5 14:33:36 2025 GMT
Subject: CN=6793a4c4-011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:e2:9d:99:5a:55:52:f9:12:8b:c6:83:f5:
9d:f8:c5:ff:82:b1:1b:85:bc:0c:3c:86:f2:fe:fa:
c6:89:84:5f:65:c9:93:cc:b1:f8:0e:2a:ad:e9:1b:
fb:35:a2:68:ec:92:b5:54:29:69:79:5d:55:44:50:
28:ed:8b:59:54:88:af:7c:63:83:eb:49:5e:ae:82:
a4:cd:4a:63:d2:e4:93:e8:36:3f:44:93:fb:bb:f0:
bd:c7:a3:61:c8:90:e1:52:db:1c:08:68:ab:7e:f7:
69:25:1a:8a:c6:b2:37:1a:ee:78:8b:3e:d7:1e:91:
b1:28:d7:19:97:56:19:71:96:15:af:1e:9e:7d:50:
d5:37:42:65:33:87:72:c1:19:81:f0:6c:d9:fd:99:
0b:71:08:e1:c7:77:6d:71:78:f5:79:c2:40:6a:3b:
43:24:14:7b:c7:ff:7b:8c:cb:c1:20:ad:ae:08:79:
c3:1f:86:aa:d5:66:81:2b:75:3f:c2:a2:3f:fc:df:
1f:36:62:a6:a5:d8:59:fc:9a:c5:69:da:5e:05:f1:
fc:27:9f:74:0f:d9:54:34:ee:8a:2b:d1:08:a3:6e:
8c:95:8b:60:de:de:ca:ff:87:13:84:c0:7b:0b:1f:
99:0f:c3:ab:09:56:c7:33:80:b7:d8:b5:8a:90:d9:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:74:38:1F:B2:18:62:24:95:9A:0A:57:3B:BB:61:15:75:47:36:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3422F302DA6011EFA6A7E342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.255.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f5:ba:1c:d0:4b:e7:0c:fb:31:61:ae:80:ca:74:67:4b:7f:
77:57:4e:c0:9c:3f:c1:54:c9:b8:c0:b3:76:e5:4f:47:b6:4e:
32:8c:8c:4b:0a:bd:55:b9:62:de:66:30:20:29:e2:6c:59:df:
58:87:bb:01:ad:fa:f5:65:6d:73:16:36:f9:d4:86:ee:95:dd:
5e:67:15:c1:36:07:01:a1:48:b8:f2:c9:8a:71:0e:1e:12:44:
14:3b:a7:9b:ac:64:e5:5d:0c:12:ce:c1:1f:2c:b1:08:ba:1d:
31:a4:55:a9:8a:6a:76:59:10:03:12:31:4c:f1:86:6c:06:2a:
73:e8:a1:fd:8d:06:63:08:fb:0a:d8:49:63:13:e3:68:2e:5d:
d6:ab:e3:d6:55:66:a3:da:f2:d2:95:e4:d8:49:90:7b:07:db:
82:82:58:47:6b:ce:e9:c4:91:59:99:91:c1:c1:d9:3a:6b:d3:
d1:ef:1f:70:1f:d2:59:be:96:d4:97:78:ae:ce:79:2b:b8:82:
ef:17:2b:c0:06:e7:d8:9c:66:17:89:c1:e0:50:40:b7:24:5a:
37:d2:86:e1:94:bf:e7:2d:70:a3:7a:6f:7b:e4:bc:dd:2f:12:
e4:04:f0:ab:e3:d9:df:45:9e:70:5d:d5:d6:a5:28:08:eb:56:
50:68:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:28:47 2025 by rpki-client