Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E2BD4DB3711EFBDEAF670762E951A.roa
File: 435E2BD4DB3711EFBDEAF670762E951A.roa (raw, json)
Hash identifier: wq/2RhaBzbYl77MEASX9MJiU0+gDPMEuEDnWQPeYu4A=
Subject key identifier: CF:31:FF:19:7E:AD:D0:75:A8:FF:8A:E1:9A:FF:91:E4:0D:8E:C4:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E2BD4DB3711EFBDEAF670762E951A.roa
Signing time: Sat 25 Jan 2025 16:13:07 +0000
ROA not before: Sat 25 Jan 2025 16:13:04 +0000
ROA not after: Fri 07 Mar 2025 16:13:04 +0000
asID: 63139
IP address blocks: 154.223.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84518 (0x14a26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:13:04 2025 GMT
Not After : Mar 7 16:13:04 2025 GMT
Subject: CN=67950d93-a6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:cf:e1:a6:0e:b6:b4:93:54:42:f9:b4:96:
f4:12:7d:ea:0b:a9:08:96:7f:e6:2b:62:26:b3:32:
f5:de:5a:f0:36:97:22:67:f9:e6:73:cd:50:c0:f2:
0a:b2:bf:35:9a:1e:c4:06:80:47:7e:bd:ac:9a:fb:
8c:f4:85:d2:db:fb:ef:96:a5:7d:36:2d:f2:b2:55:
68:22:e3:a3:70:b5:5e:b4:d4:99:36:b8:48:79:fb:
af:8d:79:bd:97:e0:6a:da:c4:fc:56:4c:59:22:15:
30:b6:f4:89:6b:57:c4:0c:27:22:7f:77:64:f5:32:
f7:63:1a:b1:68:88:eb:21:9a:07:9c:96:7f:69:ba:
28:2f:72:31:0e:15:1e:90:7f:b4:51:d9:54:5f:db:
a6:6f:82:67:f4:13:c2:ea:36:e4:6f:5d:4f:15:e9:
94:ee:57:2d:90:2a:47:06:4a:65:29:87:8a:ac:96:
6b:f7:3e:5a:d8:32:72:15:b9:89:92:f5:af:07:ad:
50:d0:46:e4:48:6c:78:36:cd:4b:5f:9b:c3:15:0f:
d0:b2:a1:bb:e0:36:28:23:2b:79:74:08:69:66:e3:
2b:f0:8e:0d:69:ed:e3:18:80:26:97:75:34:24:64:
65:fe:c1:3a:c5:07:fd:69:1f:a7:5b:39:92:5c:8f:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:FF:19:7E:AD:D0:75:A8:FF:8A:E1:9A:FF:91:E4:0D:8E:C4:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E2BD4DB3711EFBDEAF670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:44:07:d7:5a:2b:63:8d:43:6e:9c:a9:ee:68:3b:c8:9c:19:
93:d5:8d:3d:5f:53:d0:db:a3:ad:c0:c4:4c:bd:d8:85:da:e7:
57:2b:ec:72:69:58:d8:d2:db:a7:0f:37:10:ff:94:29:35:80:
ec:1f:58:d1:84:34:62:d7:74:94:c4:ff:9a:01:df:52:d4:ed:
3a:25:2a:58:15:ae:8e:b3:22:5c:e3:dd:87:f8:c9:53:0e:fc:
a5:00:29:24:ae:c6:b8:2d:47:f5:4a:ec:25:c2:4d:df:9f:0e:
74:d6:25:de:6a:1f:eb:39:09:af:e5:d6:f5:db:a4:88:43:9e:
6c:f6:55:bf:2d:34:c5:22:97:20:34:65:ed:67:e4:14:33:fd:
2b:91:b7:0b:f6:7e:45:66:57:96:97:2a:d2:f2:e3:9f:b8:7d:
f4:9e:1e:b3:51:85:4b:0a:8e:27:df:06:12:ea:c1:fe:c3:9b:
82:95:ac:99:39:7f:1c:81:ea:4d:ed:15:8e:09:42:31:e7:62:
89:79:24:49:87:5d:aa:f7:8c:13:e8:10:50:21:35:6e:c8:fa:
dc:4e:23:6e:18:2b:e9:4e:93:01:87:64:37:34:76:0a:57:62:
a4:26:fb:3f:de:e1:d0:70:9a:7d:9e:1e:9f:b2:bf:3d:7d:8d:
6f:3b:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:58 2025 by rpki-client