Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B257B0DA2C11EFAA67E862762E951A.roa
File: 52B257B0DA2C11EFAA67E862762E951A.roa (raw, json)
Hash identifier: VuZdMyb+CVE3jhlokuPNO+94/z1WNXmph/2kpBdfeYI=
Subject key identifier: DE:55:74:67:DA:21:B3:26:73:06:DC:4A:21:06:74:DD:62:B6:0E:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014464
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B257B0DA2C11EFAA67E862762E951A.roa
Signing time: Fri 24 Jan 2025 08:22:17 +0000
ROA not before: Fri 24 Jan 2025 08:22:14 +0000
ROA not after: Wed 05 Mar 2025 08:22:14 +0000
asID: 202656
IP address blocks: 154.221.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83044 (0x14464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:22:14 2025 GMT
Not After : Mar 5 08:22:14 2025 GMT
Subject: CN=67934db9-36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:59:a7:4d:8f:33:ee:eb:91:52:5a:78:12:
a8:65:4a:23:86:25:f5:cb:eb:78:0e:91:69:0b:c0:
87:40:c7:39:70:53:20:e2:8b:69:f4:49:6a:2b:04:
83:31:07:fd:b7:02:ef:14:03:24:9c:52:c3:a2:b4:
b3:fb:6a:18:eb:25:5a:19:b2:1e:ee:0e:6a:5f:c9:
12:00:1f:45:fc:a4:1a:40:7e:a0:e6:48:94:7d:3f:
cf:8c:19:29:f1:cf:8e:49:9f:47:04:80:32:72:8a:
29:18:c8:30:b9:45:81:c4:10:cf:12:c2:57:81:18:
92:4c:b4:0e:cd:b6:bf:b1:69:a4:dc:f2:c0:04:16:
c4:5a:99:0f:89:1d:dd:ef:29:63:98:99:2b:10:90:
4c:dd:5a:87:84:87:c3:dc:06:34:6e:fe:bf:e0:26:
3c:aa:83:27:a1:21:12:d5:31:33:dd:f5:21:33:c9:
37:48:43:a7:54:f4:ec:27:bb:03:9e:92:90:45:05:
6b:25:b7:84:cc:a0:3a:d4:84:79:d5:c1:ed:14:3a:
bc:c3:0a:f8:20:84:4d:d4:39:ee:cf:b6:65:82:bd:
5f:26:02:7c:45:f7:88:1b:56:21:89:cc:6b:10:82:
39:5f:0e:b9:9f:13:e4:f0:95:dc:dd:50:41:23:dc:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:74:67:DA:21:B3:26:73:06:DC:4A:21:06:74:DD:62:B6:0E:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B257B0DA2C11EFAA67E862762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.58.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cd:b4:c5:74:18:00:d1:75:f7:9a:88:69:8a:33:7a:34:c1:
7c:63:76:0e:99:e0:6e:ca:0a:65:41:f2:ee:9b:06:6f:cc:8f:
4f:9a:7b:98:72:7a:11:75:04:68:e1:05:18:3e:2d:3d:09:4e:
57:e8:76:98:7d:a5:87:5e:a4:62:c1:51:22:d4:f2:cb:26:19:
da:af:45:e9:a6:3b:27:f6:e3:e5:6d:c0:cd:14:18:93:de:a9:
07:37:a1:89:d9:f4:7f:1e:c1:c2:a7:10:a1:88:71:11:94:e8:
51:d5:22:bf:c0:e5:a2:ab:93:25:72:9f:5a:c6:f9:71:28:03:
c7:2e:2d:dc:d0:a4:79:69:c4:fc:82:4e:d6:5a:07:85:d2:59:
5c:8c:20:5f:7d:fa:2e:cd:29:74:b1:c3:de:c9:e4:b8:8f:ff:
de:37:cb:de:f3:df:e1:ac:b6:a9:4b:2e:f7:87:89:47:07:82:
06:4f:e5:82:3b:9d:41:57:ff:17:e9:55:ad:54:bd:26:3f:66:
59:a5:5a:c0:d7:46:eb:2c:d4:e3:cc:07:50:8c:68:f8:88:ae:
80:19:79:33:46:1d:66:fd:be:35:e2:c9:7e:4b:e5:4a:cd:dd:
8c:13:f1:23:2b:a3:2f:7c:b1:c0:07:40:02:f2:0a:2b:4b:72:
7e:a2:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:25 2025 by rpki-client