Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C186036C29C11EFB9D4E7A4762E951A.roa
File: 4C186036C29C11EFB9D4E7A4762E951A.roa (raw, json)
Hash identifier: uuukeMQSvL8W3XN8XFx5tuqSnujnMMZ69w79nQ1YI+4=
Subject key identifier: E9:A6:98:DB:16:C7:EA:97:40:E7:AC:A9:F7:F6:20:88:2A:1A:A1:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012508
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C186036C29C11EFB9D4E7A4762E951A.roa
Signing time: Wed 25 Dec 2024 08:43:22 +0000
ROA not before: Wed 25 Dec 2024 08:43:18 +0000
ROA not after: Sun 09 Feb 2025 08:43:18 +0000
asID: 138915
IP address blocks: 154.223.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75016 (0x12508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:43:18 2024 GMT
Not After : Feb 9 08:43:18 2025 GMT
Subject: CN=676bc5aa-1eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:bd:4b:f3:b7:5d:66:cc:c8:ce:b7:db:85:
58:82:26:e5:07:c5:7a:78:85:06:73:0d:89:46:b1:
f3:db:3a:07:10:c0:51:da:62:2a:6e:26:f0:97:68:
cf:64:8d:21:13:86:8c:13:0e:89:f6:9f:88:73:44:
9d:0a:c9:d2:d8:20:23:6e:3b:08:66:59:d5:ac:29:
fc:73:96:2d:e4:94:71:9c:70:33:54:4a:22:23:4e:
7c:b6:57:ce:0c:ac:3e:41:0a:0c:c4:65:81:cc:51:
98:e3:44:1e:2f:18:f6:56:8b:20:4d:84:a5:ca:28:
90:c9:fa:c3:e9:60:6b:05:fa:a3:d6:79:43:f2:18:
62:a3:c2:30:09:f4:ec:c1:1e:a8:67:93:6a:de:9d:
a5:60:a3:76:93:56:c0:fb:86:5e:42:27:ef:a1:d5:
61:b3:b4:a4:4c:64:14:02:3b:31:15:1b:32:07:2f:
28:85:8f:f3:85:bf:01:7c:4c:86:c9:8a:da:8c:d1:
35:ff:4f:87:09:3d:ab:1a:54:b9:db:18:9c:a0:b1:
c6:fc:c9:58:73:7d:bd:3d:35:d5:fc:82:68:f0:4e:
93:b6:dc:4d:ea:14:64:61:68:47:65:0b:6a:8d:e2:
fa:91:34:be:6f:54:8c:03:0c:cb:8f:13:a1:64:07:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:98:DB:16:C7:EA:97:40:E7:AC:A9:F7:F6:20:88:2A:1A:A1:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C186036C29C11EFB9D4E7A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:de:84:03:53:d6:ee:f8:96:a2:69:7c:c3:67:94:55:8c:47:
05:00:68:69:37:4b:c5:0d:f5:d1:92:6c:c2:b4:30:c4:de:7a:
0b:0b:99:f6:6c:15:da:e0:14:07:a9:77:45:03:8d:66:00:c8:
8d:c4:60:f9:7c:d7:e3:3c:ba:12:74:dd:bc:f6:34:7e:a7:13:
76:02:a1:1f:63:af:0d:71:2d:61:99:17:bf:0a:ba:ed:e6:3d:
5c:85:ec:7a:1f:16:2c:09:ce:b5:ec:05:27:95:a7:2b:cf:7c:
5c:5d:ff:4d:92:71:c8:08:47:f9:3c:80:1e:73:15:04:82:73:
75:8a:8e:91:8c:6d:b4:f5:67:a8:e3:95:a6:c7:b3:bb:e6:7d:
8b:03:e1:29:e0:da:70:db:56:69:66:52:11:fe:e4:c6:1f:ec:
b7:bb:aa:68:cd:f2:e8:cc:61:64:48:a9:4c:76:e1:ca:ce:bf:
ae:99:c4:f7:c8:00:3c:d0:97:7b:1d:23:5a:4d:d1:e6:45:32:
9f:a1:23:c0:3d:b9:d6:a6:f3:9d:6f:29:39:46:ee:3a:00:ab:
64:e9:82:51:3f:73:29:86:8c:c5:48:44:27:fb:ae:51:16:e8:
33:2e:4f:64:b8:55:1d:ab:82:77:ca:fd:e3:93:73:f1:f4:3d:
33:f6:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:34 2025 by rpki-client