Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAE17A0DA5111EFA5FE695C762E951A.roa
File: 4FAE17A0DA5111EFA5FE695C762E951A.roa (raw, json)
Hash identifier: Mn7C2GBDBZzdfVsMa4V+yAGFs/z3IozQ3xaVLpwjdwc=
Subject key identifier: A0:7B:E3:FE:67:A6:4C:17:E5:5A:D2:0C:4C:4B:AD:3C:E5:5D:4E:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAE17A0DA5111EFA5FE695C762E951A.roa
Signing time: Fri 24 Jan 2025 12:47:04 +0000
ROA not before: Fri 24 Jan 2025 12:47:00 +0000
ROA not after: Sat 01 Mar 2025 12:47:00 +0000
asID: 44559
IP address blocks: 154.205.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83715 (0x14703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:47:00 2025 GMT
Not After : Mar 1 12:47:00 2025 GMT
Subject: CN=67938bc7-9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:75:2a:ba:07:42:fe:a2:e1:9a:dc:18:09:
02:76:14:46:d0:79:ba:e6:e1:c5:54:7b:c4:59:91:
57:43:8e:2d:7d:54:50:11:91:56:3d:6b:2c:1a:62:
94:75:48:b2:ac:7d:87:29:a4:d0:f1:cf:9d:f8:c2:
d3:d3:5a:6a:3f:53:ae:59:f6:4d:c4:85:38:83:e5:
22:fe:90:bb:2e:36:0f:b6:01:bd:8b:66:0b:59:34:
66:5e:90:5d:33:ed:9c:e5:c0:3f:60:4f:3c:0b:97:
04:10:f4:4f:da:0e:76:93:18:08:b1:2a:b2:33:7e:
a1:62:b8:61:48:04:33:5e:1a:96:7e:b5:6a:a2:30:
79:a0:29:1a:8b:19:5f:61:b5:87:05:fb:ca:51:d3:
b1:76:0b:ae:db:45:1e:12:9b:06:f5:96:fc:a2:2a:
11:96:f5:ed:22:b6:ce:de:9e:08:8e:c4:a8:b8:a0:
fa:1a:62:5a:83:db:a4:b4:6d:df:7d:e8:4e:a5:41:
2c:97:bf:b0:50:0a:2f:de:60:9e:d1:7b:09:b7:5f:
c2:17:21:0c:e7:3d:9f:ec:79:ef:a3:0b:9e:dd:1a:
fc:dd:fe:27:e7:d2:2a:0c:a8:90:e7:93:c9:30:38:
1f:90:5a:a4:2d:bf:ce:a9:2f:4e:8a:29:0d:12:86:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:E3:FE:67:A6:4C:17:E5:5A:D2:0C:4C:4B:AD:3C:E5:5D:4E:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAE17A0DA5111EFA5FE695C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.239.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7a:ef:da:81:fe:60:22:cf:41:ff:86:63:56:e3:f2:e8:08:
e3:5f:39:32:ad:19:f1:73:e2:56:a6:9d:93:2f:53:68:82:14:
56:74:ee:6e:91:48:34:26:93:1a:58:1b:19:4e:d6:c9:f4:54:
7a:91:dd:0c:cb:5b:77:c4:12:88:a9:18:09:f4:99:60:f7:68:
80:1e:b9:bd:b5:e7:14:a2:0f:70:e6:cf:2b:49:7d:c1:ba:85:
00:1a:b5:c9:74:b1:08:ba:5c:00:e1:90:e8:04:31:6e:1e:8d:
53:e3:39:c7:f8:1c:13:99:ad:69:7b:7a:a4:0b:26:fb:0f:1e:
dc:57:fc:45:5f:3a:1c:f0:26:ec:50:b8:d2:07:27:f2:42:40:
7b:38:75:e8:7d:b5:31:8b:8c:60:d6:cb:ad:d3:9f:44:5e:23:
62:f9:03:a1:59:ed:72:40:dd:59:62:fe:d4:6c:31:bb:cb:15:
09:99:25:7b:ba:32:ed:9e:17:e4:8a:e0:f6:64:3b:b6:2e:06:
9a:5f:75:07:25:ac:0e:c2:a7:dd:c5:de:1e:b7:75:fd:37:08:
0f:60:1f:23:9a:86:fa:26:b4:84:2b:84:d4:3e:84:17:51:5c:
ef:cb:0b:9c:56:a5:e8:1a:72:75:b4:e8:c8:81:a2:15:a7:58:
7c:80:63:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:16 2025 by rpki-client