Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/568C81D8CCC311EFAA0828AA762E951A.roa
File: 568C81D8CCC311EFAA0828AA762E951A.roa (raw, json)
Hash identifier: uXNt02reu7vHRPFt6mHnVeRbxXOZtFMPSsedPbUAjr0=
Subject key identifier: 65:2D:B2:2D:12:B4:9B:63:CE:F7:15:26:7E:B5:E7:4A:74:4E:5D:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01363B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/568C81D8CCC311EFAA0828AA762E951A.roa
Signing time: Tue 07 Jan 2025 06:48:02 +0000
ROA not before: Tue 07 Jan 2025 06:47:58 +0000
ROA not after: Wed 12 Feb 2025 06:47:58 +0000
asID: 54252
IP address blocks: 154.201.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79419 (0x1363b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:47:58 2025 GMT
Not After : Feb 12 06:47:58 2025 GMT
Subject: CN=677cce21-b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:7d:3c:d9:24:32:b8:11:f5:98:44:f7:f0:
e0:57:b3:90:b4:d5:0b:b7:11:e1:16:a8:9f:31:78:
52:ff:70:e8:b9:c3:db:ca:7b:d8:33:9f:3f:c4:78:
70:73:ec:0d:aa:b6:89:33:e6:7f:57:b6:7c:5a:06:
91:d1:5a:0d:18:d8:57:1f:93:e6:7d:8b:d1:56:49:
d1:65:08:3e:b0:19:ca:2e:c7:5a:36:3f:32:e6:31:
68:ff:e2:a3:c6:db:cc:ad:0b:19:b4:dd:6c:0b:4f:
cb:5b:89:c4:f4:54:75:f2:1d:3a:20:e0:11:ce:e3:
b5:45:a1:b1:9a:73:b4:73:44:7a:78:23:94:47:52:
e9:54:df:5c:28:76:68:c4:c0:cb:97:6e:81:bb:59:
5a:47:c1:b5:f6:69:a5:df:28:f7:37:d7:0c:ee:7d:
16:c5:9d:4a:9a:ef:b5:74:d9:7d:ae:7a:9e:d2:76:
25:7e:74:f2:59:fb:c2:84:4c:4a:35:83:d4:8c:45:
f4:4b:73:7f:42:5c:3c:43:33:47:1b:52:c7:e7:9b:
f9:a7:c8:79:21:f9:8b:be:84:18:02:3a:2d:db:b5:
a9:6f:ea:24:37:ec:ff:bd:fd:f4:78:e6:09:63:4b:
7c:94:cc:3d:3c:f5:df:37:fe:8d:36:7c:6a:79:a5:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:B2:2D:12:B4:9B:63:CE:F7:15:26:7E:B5:E7:4A:74:4E:5D:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/568C81D8CCC311EFAA0828AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:cf:08:7d:f0:ef:90:96:fc:6d:63:18:73:a5:fb:71:19:5c:
d2:96:e7:f6:56:ef:af:3e:e1:ae:c9:ef:ef:87:99:10:af:8a:
13:96:6a:39:bb:99:ec:4c:5a:d6:4e:5d:ad:75:d4:00:2e:4f:
37:3f:12:55:ca:e9:19:ba:16:f5:05:44:61:b0:c3:47:e6:df:
e5:98:31:cd:d5:b1:1f:89:51:28:16:d0:f1:be:f9:3d:4c:a5:
7d:c1:2e:6f:89:4d:f0:1c:5e:b6:fa:1f:47:b4:87:cf:45:72:
8d:d4:23:d8:e2:d2:73:28:1c:31:ae:37:fe:c3:9f:43:06:94:
98:be:9a:00:66:e6:b8:40:5e:04:fe:19:8b:ec:68:4f:78:fd:
e6:d3:80:83:f8:dd:97:03:0f:79:c8:01:9b:f2:06:ce:ce:e7:
60:53:00:8f:d0:41:42:3d:52:12:64:d7:b3:39:26:1f:9e:5c:
52:a6:80:f7:fb:6b:f0:f2:a5:c4:93:78:dd:d5:70:b5:46:4d:
a5:31:4e:43:2c:3a:72:31:19:8d:3d:4a:c1:5c:39:e0:92:a7:
45:d4:99:e8:b4:e5:80:95:ef:a4:fb:67:a9:76:3c:90:70:5d:
92:f7:56:59:1d:69:86:4d:d0:ed:7d:54:7e:72:b0:6f:4d:f1:
b9:de:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:14 2025 by rpki-client