Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49141036DA5411EFB7DF6872762E951A.roa
File: 49141036DA5411EFB7DF6872762E951A.roa (raw, json)
Hash identifier: rNzadatqxeR3ZbsuyhVB148qCa2oBq1768+/41yWP7Q=
Subject key identifier: 08:92:33:BD:81:88:0B:9F:4D:24:28:69:31:2D:53:4F:AD:2D:BA:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014742
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49141036DA5411EFB7DF6872762E951A.roa
Signing time: Fri 24 Jan 2025 13:08:21 +0000
ROA not before: Fri 24 Jan 2025 13:08:17 +0000
ROA not after: Wed 05 Mar 2025 13:08:17 +0000
asID: 44559
IP address blocks: 154.209.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83778 (0x14742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:08:17 2025 GMT
Not After : Mar 5 13:08:17 2025 GMT
Subject: CN=679390c5-40f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:02:b7:d5:a4:c7:6a:76:f7:5f:65:c0:9e:
ac:e3:9f:24:bd:37:6b:ce:01:0a:46:82:30:a1:c3:
79:af:1f:67:7e:a3:d4:66:09:cf:a9:62:ad:99:7b:
37:5d:dd:40:c0:1d:f5:3c:d1:45:c3:34:87:1b:c9:
2f:49:e6:f3:e0:77:02:17:99:fe:3c:27:04:8f:6c:
a2:6b:7b:5c:a6:82:23:5f:e6:8e:25:f5:4a:51:c1:
ff:fa:09:9a:25:b7:6c:5a:05:6d:55:73:c7:5b:45:
c2:8e:d6:06:91:91:1a:3d:ca:d0:0e:6f:6c:33:f4:
d4:f3:1f:20:b6:a2:c2:1c:e6:d7:a1:66:2c:a1:37:
78:87:a0:28:17:aa:2b:0d:0d:8d:fa:98:76:48:d6:
85:7c:68:3c:42:c4:12:44:c4:ae:c0:09:89:a1:bc:
1f:0e:c8:05:05:93:b4:7e:91:4a:bf:9e:2e:24:fe:
af:f7:00:7c:21:7c:5d:66:2e:62:8e:9a:15:7a:c3:
a1:78:d0:03:e9:7d:51:ff:3d:73:72:96:03:3b:0a:
15:74:3e:45:66:c8:51:0c:31:b1:5a:69:ae:fd:5a:
0c:37:e4:df:2e:9f:7c:84:20:b4:2f:f2:e7:43:b0:
0f:3f:20:0f:3d:50:6b:b7:ab:8d:eb:84:3a:c0:b3:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:33:BD:81:88:0B:9F:4D:24:28:69:31:2D:53:4F:AD:2D:BA:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49141036DA5411EFB7DF6872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:27:99:d6:1f:04:6f:fc:2a:1a:9c:7f:b1:7e:4e:48:f2:89:
aa:72:cf:72:44:54:38:f0:c3:44:07:b8:82:9e:c4:e2:5b:77:
33:12:25:1c:6a:19:7d:dd:5d:08:65:86:79:47:c1:6a:d8:5d:
04:a1:53:90:67:cf:dc:e1:bd:91:20:f6:19:95:6a:b9:02:3f:
5d:dd:88:8b:76:4b:f4:00:1c:ce:b2:47:e2:a2:30:01:20:af:
93:8b:ec:fd:e0:16:ee:c8:3c:a1:6b:7b:70:dc:de:fd:92:40:
6b:00:98:d8:52:ed:12:57:1b:85:40:8a:47:df:fd:68:22:c3:
f7:2f:e8:d8:c5:09:06:e7:0b:e7:c4:a9:59:2f:9b:96:cc:59:
58:5b:8e:67:2a:10:90:a5:da:fb:42:75:ac:9e:d6:93:21:c2:
e4:17:7e:d9:b8:a8:29:8f:e2:05:56:12:7f:b3:6b:3b:f6:d2:
60:ee:1e:2e:65:50:4a:09:ec:24:d9:74:7c:bd:7f:54:d7:d8:
02:e8:49:3d:b6:cc:02:fc:83:c7:56:bc:03:ca:f6:c2:fd:a9:
02:77:ef:ad:e7:91:e0:f8:c9:44:83:db:1f:db:c0:72:8a:c4:
39:04:9f:97:75:9a:4d:38:e5:5a:97:f5:b8:19:4b:90:2b:07:
6f:af:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:50 2025 by rpki-client