Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4454509CDA2711EF8E8E83BD762E951A.roa
File: 4454509CDA2711EF8E8E83BD762E951A.roa (raw, json)
Hash identifier: 0HfNMxEDpuzEKYNg4w2bmPX0hGs21zfHL2HeAOPBtmo=
Subject key identifier: D2:39:20:55:BB:E6:09:BF:76:11:23:EB:E4:26:93:2C:4B:12:37:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01442E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4454509CDA2711EF8E8E83BD762E951A.roa
Signing time: Fri 24 Jan 2025 07:46:06 +0000
ROA not before: Fri 24 Jan 2025 07:46:02 +0000
ROA not after: Wed 05 Mar 2025 07:46:02 +0000
asID: 202656
IP address blocks: 154.222.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82990 (0x1442e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:46:02 2025 GMT
Not After : Mar 5 07:46:02 2025 GMT
Subject: CN=6793453e-4b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:fd:2c:f4:2f:35:d7:f4:2c:f7:30:0b:fa:
59:ff:fe:ad:f1:9d:ca:53:df:79:43:38:d5:4e:d6:
ce:b7:7e:5f:c9:7b:50:3c:1b:58:6b:4a:9d:64:48:
00:f3:14:b7:ee:43:1c:32:7e:fe:c3:70:04:d3:3e:
62:cd:d1:ae:2e:4e:54:63:a5:4a:25:01:0c:16:6a:
3c:45:c8:64:99:18:6f:a4:7e:b0:ce:57:2b:71:88:
8a:19:ed:9f:d3:ff:67:4f:62:3a:5d:02:3f:a1:b1:
fc:27:7e:96:61:00:13:61:16:d1:2e:31:8f:95:88:
65:2c:42:1a:01:55:44:61:f4:5f:7a:9e:16:04:d4:
d1:5e:7e:5f:8d:47:91:2e:78:fa:b7:93:3a:bb:23:
d0:e1:97:9d:5b:02:ec:27:6d:f2:3f:f6:df:64:85:
e7:77:2e:e1:c1:15:5c:4c:bc:be:66:15:df:71:73:
ab:07:9c:54:af:56:83:f9:ac:e6:be:d4:ae:52:39:
d0:43:d4:34:0a:24:ee:cf:e2:d1:88:75:94:4b:37:
96:df:be:ff:eb:32:da:2a:e2:fa:97:43:7f:8e:c7:
14:2a:47:66:14:ab:49:fd:a3:12:0e:18:85:32:87:
42:3f:ad:12:92:18:b4:8d:11:e8:4f:de:d6:62:a2:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:20:55:BB:E6:09:BF:76:11:23:EB:E4:26:93:2C:4B:12:37:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4454509CDA2711EF8E8E83BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:48:11:aa:34:72:2e:ac:45:da:ef:a4:ff:a9:ac:05:21:15:
0f:71:69:95:1a:dd:3c:ad:7d:f7:c7:62:10:89:91:6d:bf:32:
49:9a:9b:16:6d:1c:e5:39:02:7d:52:c7:a7:15:e9:0e:4e:cb:
cc:b8:e1:bf:5f:e9:75:9d:ef:bd:8a:19:a2:79:19:5c:07:9e:
4e:ef:1f:11:80:ab:30:db:75:35:e3:41:a5:24:72:d9:f1:4c:
2b:ee:f9:7d:db:da:63:42:da:c0:2a:08:df:2c:ec:e7:60:8c:
8e:55:dd:3c:dd:87:43:b3:37:a1:5b:77:dc:0f:11:24:fe:39:
f8:29:9b:88:aa:9f:fb:57:0a:6f:8b:72:0d:57:58:a1:fa:7a:
bb:0f:b0:98:a9:55:fa:01:06:b6:65:ce:8b:fa:db:88:a2:37:
46:b9:fc:30:ec:85:c2:2e:e6:09:ea:59:d5:0c:2a:95:a7:c8:
56:a0:3d:e5:0d:14:10:b8:6b:10:c5:51:3b:ac:5e:6f:fa:69:
e0:35:72:8d:24:ad:24:fa:1a:ae:51:66:00:1e:bd:9d:15:71:
a3:db:46:e4:08:e3:8d:cf:de:e0:a8:33:bb:dc:e4:c1:1b:50:
a3:32:e0:2a:4a:ca:48:1d:76:52:25:42:4a:0f:49:39:36:89:
b3:39:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:48 2025 by rpki-client