Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/361AFC02DB3911EF8573817C762E951A.roa
File: 361AFC02DB3911EF8573817C762E951A.roa (raw, json)
Hash identifier: Wd/RcdMJqDs/KJrJ3m5AXz3OKVb+dzcSEhCcQRbrHck=
Subject key identifier: E0:97:16:40:94:38:F4:9E:69:3E:B2:4A:FD:08:88:68:A4:90:C2:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/361AFC02DB3911EF8573817C762E951A.roa
Signing time: Sat 25 Jan 2025 16:27:04 +0000
ROA not before: Sat 25 Jan 2025 16:27:00 +0000
ROA not after: Fri 07 Mar 2025 16:27:00 +0000
asID: 63139
IP address blocks: 154.223.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84530 (0x14a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:27:00 2025 GMT
Not After : Mar 7 16:27:00 2025 GMT
Subject: CN=679510d8-120a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:82:09:c9:29:b8:8d:6c:cd:2e:ce:ef:7e:
8d:46:b5:88:39:0c:4d:d6:47:37:b6:d4:4f:37:8e:
e4:60:d1:7e:9a:ec:47:95:4a:30:7b:08:e0:8c:5b:
b3:32:4b:11:ea:6b:2c:ff:0a:8b:23:c2:4a:ed:8c:
ca:70:d9:ce:af:2f:d3:75:08:76:47:3a:24:e6:ff:
44:41:79:98:8c:ed:4a:1f:41:c8:ae:68:26:94:df:
f1:cd:a6:a7:cd:dd:87:59:51:7c:3d:d1:7e:aa:98:
00:fb:6b:4c:1b:42:f9:43:39:3a:de:33:d1:5d:0d:
65:60:a7:a0:68:6e:63:7c:9d:51:38:62:48:59:f0:
f3:d7:81:74:74:43:b1:a7:88:d6:1c:28:b9:d0:f6:
e3:9a:7a:4f:a0:42:27:e9:ff:30:59:a3:39:76:8a:
83:16:36:7e:58:48:a1:eb:a3:66:fd:a8:5f:cc:c0:
7f:85:90:d2:18:dd:22:ad:7c:f8:08:fd:e4:ae:44:
06:87:7a:46:15:8a:22:7e:53:a4:b6:17:2e:e4:01:
72:26:fa:ee:79:9d:91:03:1b:3d:b5:98:bd:cb:21:
12:82:5b:a6:91:cb:78:2a:62:08:04:64:5c:66:53:
78:2d:bc:e2:0f:cd:57:27:2c:1c:82:f4:94:2d:a6:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:16:40:94:38:F4:9E:69:3E:B2:4A:FD:08:88:68:A4:90:C2:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/361AFC02DB3911EF8573817C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:46:fa:ed:bd:7c:40:32:89:bb:f9:90:06:b2:9a:2c:fc:fe:
27:84:95:6e:d9:50:73:bf:a0:bc:74:09:e9:8e:54:89:a4:0c:
69:3b:74:b5:a2:4f:c3:20:7b:cc:cb:ec:49:9d:0d:f8:80:b6:
f7:e6:ca:59:30:6c:0f:8d:0f:48:0e:cd:8f:46:5a:1d:d4:9d:
b8:59:6e:1f:89:37:a4:10:90:a5:d9:ff:85:ad:fa:3a:a3:51:
2e:df:12:a4:59:96:84:35:70:f3:0e:17:91:63:13:68:ae:36:
f6:5a:6c:d3:46:a2:e4:29:9a:56:1d:19:c0:29:32:45:4b:0d:
7b:25:c1:32:9c:d0:ab:d6:5d:12:42:62:b7:88:a1:6d:be:4f:
fe:20:2d:fa:ee:c1:dd:b2:ad:89:63:75:48:41:8e:8e:a5:77:
45:a1:b2:12:e0:36:bd:94:06:f2:43:ff:eb:83:82:39:69:4e:
51:5f:08:1a:75:aa:5d:73:a9:2c:47:9a:60:0d:93:ae:22:58:
09:3f:e6:0c:76:ae:10:b5:fa:2e:23:99:d5:a0:43:ed:b0:03:
fa:46:2a:62:c4:a6:5d:0e:7f:ff:98:53:28:75:c7:99:8e:21:
d8:07:4e:1c:b3:d9:7c:83:6b:f1:f9:45:60:fb:d6:4d:e5:2b:
f4:64:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:58 2025 by rpki-client