Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5110600ADFFE11EFBDBCF5A5762E951A.roa
File: 5110600ADFFE11EFBDBCF5A5762E951A.roa (raw, json)
Hash identifier: NUDv+Upj11sid/Lxk4X8Gij/826V+1p4mcCPd8FYg+E=
Subject key identifier: 4A:3A:3B:D9:4E:99:9F:D1:B2:C5:A8:AC:98:18:4D:2F:70:9B:F1:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5110600ADFFE11EFBDBCF5A5762E951A.roa
Signing time: Fri 31 Jan 2025 18:08:05 +0000
ROA not before: Fri 31 Jan 2025 18:08:01 +0000
ROA not after: Fri 07 Feb 2025 18:08:01 +0000
asID: 328608
IP address blocks: 154.201.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85575 (0x14e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 18:08:01 2025 GMT
Not After : Feb 7 18:08:01 2025 GMT
Subject: CN=679d1185-e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:18:d6:c5:5c:d5:f9:62:ba:a6:6e:fe:51:
80:89:d2:58:87:4b:6c:27:02:49:81:cf:2e:23:2d:
8e:36:6c:ed:d3:23:c0:41:1b:10:58:87:86:f1:1d:
c6:b1:0d:dd:32:d5:f9:2b:bb:de:61:f8:49:50:3a:
d0:17:20:27:9d:91:d1:08:4e:ba:e9:f3:5b:40:c1:
49:47:be:ec:10:59:c9:95:58:6d:52:eb:d5:3b:09:
5c:c2:68:41:a4:84:4d:fe:18:a9:7b:b8:76:b5:c9:
d2:87:83:a2:9b:7d:85:d4:82:f8:81:94:b5:c9:cd:
8f:12:f1:ca:3a:f4:e8:72:59:12:97:1b:36:26:1c:
92:7d:ce:80:aa:fb:4f:df:4b:33:bd:44:69:6d:e2:
35:f1:71:5e:8b:c8:dd:8a:81:68:96:3c:9b:e0:f9:
20:9b:2c:7d:0a:14:40:00:d8:c2:5a:30:c2:6d:d7:
50:83:f6:17:16:6e:47:50:4b:3a:7a:c1:b2:03:f0:
47:37:7a:e0:50:6e:9e:94:24:2c:d3:6e:c1:55:0e:
9a:99:20:da:bd:56:86:00:51:b8:45:bf:62:eb:a7:
f3:39:63:75:70:7a:23:3a:40:4f:a2:15:98:af:1b:
b0:6e:5f:98:00:ad:b4:20:d1:02:ba:18:14:3c:81:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:3B:D9:4E:99:9F:D1:B2:C5:A8:AC:98:18:4D:2F:70:9B:F1:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5110600ADFFE11EFBDBCF5A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:39:82:29:5d:cd:3f:16:b4:a7:f7:28:06:78:9d:72:59:a9:
2a:d9:62:ff:69:96:c8:14:5b:d7:12:9c:79:2e:94:4c:e3:66:
1d:b5:2d:23:05:8e:d6:0c:d8:7a:82:df:da:ee:75:a5:15:7a:
dc:94:2d:ce:2a:cf:49:c6:07:6d:2d:91:b0:24:44:86:2a:c9:
1d:d2:41:a2:de:62:a8:8f:74:16:cc:46:df:09:32:81:ac:2c:
10:d6:ed:a3:f5:24:52:64:80:83:83:b0:85:43:0e:9c:8e:9b:
97:1f:0c:d8:ce:82:a2:b4:78:78:d4:5f:d9:24:18:ff:73:76:
1d:d6:c7:b3:da:25:3b:6e:48:f3:27:4c:78:22:a0:f3:d8:17:
e8:36:de:05:72:64:8f:ce:d1:ab:6f:27:e7:0b:f0:8c:3c:11:
eb:38:4d:f7:c6:0a:1c:54:72:2d:c1:7a:3d:a8:7b:20:0a:93:
14:e1:db:eb:67:2b:13:ea:f6:27:91:f6:69:71:00:9b:4f:e1:
01:f5:36:1d:b8:b3:8f:f6:07:40:64:79:65:98:ee:16:40:69:
a4:7e:d5:13:29:4a:90:f0:07:11:a0:8e:02:7a:d7:fb:d3:92:
bd:cc:56:fc:ff:e2:b9:8c:2b:c4:54:4f:6e:3d:2b:b3:0f:39:
4e:c6:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:25 2025 by rpki-client