Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B61C98DA4F11EF926A3450762E951A.roa
File: 42B61C98DA4F11EF926A3450762E951A.roa (raw, json)
Hash identifier: jieceDJq/4yl2YLYBoxIDF2ODAxiTzRvFT0sjwpb9Kg=
Subject key identifier: A3:03:F0:CE:2B:C9:5B:83:0F:C9:7C:4D:78:BD:A2:30:BC:D0:38:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B61C98DA4F11EF926A3450762E951A.roa
Signing time: Fri 24 Jan 2025 12:32:23 +0000
ROA not before: Fri 24 Jan 2025 12:32:19 +0000
ROA not after: Sat 01 Mar 2025 12:32:19 +0000
asID: 44559
IP address blocks: 154.205.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83668 (0x146d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:32:19 2025 GMT
Not After : Mar 1 12:32:19 2025 GMT
Subject: CN=67938857-ac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:db:05:b0:65:67:09:29:f1:6d:27:7e:e6:
b7:ee:69:a3:89:a7:32:db:97:fb:63:b1:c0:58:47:
c9:98:4e:0c:fc:c9:90:f0:72:db:57:69:f1:38:f5:
f2:e9:55:63:62:cc:6f:76:80:3b:ec:b9:9a:c3:14:
a9:fd:5c:6f:96:bf:79:74:60:85:40:3b:d1:e6:00:
17:c6:84:1b:66:ce:6a:a3:2d:47:7c:cd:24:69:7f:
c3:8b:3a:d1:4e:29:aa:be:0b:5a:df:f1:6c:42:21:
ff:cc:b2:29:b1:fd:12:0f:49:ee:13:30:2c:30:6e:
3f:f8:6e:46:0a:54:fd:9f:c9:75:86:80:97:20:72:
06:7e:94:c5:b2:09:f7:d4:1a:6f:9b:e9:cc:f3:a0:
cf:ee:ad:e7:c5:03:7e:1b:10:ef:f5:c8:db:0d:77:
76:80:c2:8e:d5:03:f7:18:ce:e1:10:af:4d:fe:86:
c8:e7:d7:71:c3:e7:10:fb:6e:b1:7b:91:c6:f5:ed:
e6:98:bf:cf:3f:34:6f:3a:23:4a:03:21:f2:a5:54:
fc:f2:8e:bc:38:ec:ee:a7:a6:a6:fb:c8:70:5f:ab:
3f:9d:4c:86:63:1f:bd:e1:bb:d2:2a:a1:ca:28:2e:
01:7b:87:d2:d5:66:9d:c5:ea:2c:d3:dd:27:87:ed:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:F0:CE:2B:C9:5B:83:0F:C9:7C:4D:78:BD:A2:30:BC:D0:38:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B61C98DA4F11EF926A3450762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1b:e7:b6:ca:d6:9c:ad:53:06:1a:76:dc:0b:15:f4:ce:d2:
2a:04:12:9f:ce:09:41:7f:ef:5f:73:e5:24:52:7e:cb:40:59:
e4:a8:0c:dc:26:c4:0e:14:5d:d7:d5:b4:62:81:82:b0:fe:1d:
46:95:6b:94:64:fd:89:a4:ee:b1:46:85:65:ff:c4:47:4f:02:
0e:0f:04:86:0d:96:e1:35:d9:4f:3c:44:12:c0:c4:13:0b:0d:
d3:33:3e:51:c9:0e:cc:78:27:e6:13:2a:93:98:9f:f5:5c:52:
e8:d3:2b:98:65:29:dc:51:a2:c5:82:b8:8b:3e:fc:57:4a:4d:
82:84:bb:74:c8:3f:0a:7e:ea:a3:50:56:47:09:f3:43:8b:00:
25:a2:f3:13:23:64:2d:bb:27:1f:fe:80:31:70:3e:06:ca:96:
7e:22:ef:53:5e:b1:45:77:de:d7:a3:30:ab:aa:4f:61:65:4e:
5d:09:d9:a2:2a:02:23:84:fb:c3:1c:8d:a8:28:02:be:c7:60:
f8:46:fc:a6:b9:82:4a:34:19:e3:6a:de:70:95:ee:d1:65:b4:
b6:96:a7:fe:98:4e:9b:2e:9f:d2:2a:64:41:c7:04:1d:2a:31:
63:b1:2d:12:48:85:68:bb:dc:5f:47:c8:6d:86:70:c7:7c:54:
6f:99:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:50 2025 by rpki-client