Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B89F3CDFE811EFA2631C91762E951A.roa
File: 57B89F3CDFE811EFA2631C91762E951A.roa (raw, json)
Hash identifier: rxma+6dmJN3EXjDb7v7rnXog0QBMtFgZ6IYpbJVZMCI=
Subject key identifier: 94:62:96:1E:7A:57:D6:09:18:2F:A2:F8:90:5F:7D:7D:23:EB:95:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B89F3CDFE811EFA2631C91762E951A.roa
Signing time: Fri 31 Jan 2025 15:30:47 +0000
ROA not before: Fri 31 Jan 2025 15:30:42 +0000
ROA not after: Wed 05 Feb 2025 15:30:42 +0000
asID: 39600
IP address blocks: 154.84.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85477 (0x14de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:30:42 2025 GMT
Not After : Feb 5 15:30:42 2025 GMT
Subject: CN=679ceca7-a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:4d:bb:c7:a5:88:29:aa:88:a5:6c:b7:c4:
18:7b:e5:e2:8d:bb:d2:f5:2a:5a:c7:c0:4a:93:b1:
69:72:df:ec:af:fb:0f:e6:12:67:7c:19:d8:ee:f3:
40:eb:d5:ba:70:7f:b3:5e:2e:ee:35:57:fe:53:7d:
40:54:71:27:c0:42:97:62:5a:21:04:e2:d5:69:a8:
6f:29:1c:05:c4:9c:53:ca:16:bb:83:f8:61:e7:4a:
81:13:93:e4:ad:ba:f4:3d:3c:be:7d:92:91:38:13:
be:7a:25:ed:86:4b:ac:4b:6b:e1:6b:7b:6b:5b:31:
93:ef:bd:26:bc:93:34:2a:dc:e6:64:a7:09:1f:e9:
70:bf:b8:c3:48:2e:83:32:da:e1:ec:6b:68:ed:7c:
a3:7c:4a:66:57:d7:b9:57:c8:2c:20:49:ce:bd:e4:
5e:b3:4c:a9:7d:b9:15:16:7d:6d:5b:0b:0d:a7:d2:
9f:15:0d:ec:97:7b:32:dd:f6:02:c1:cc:20:9d:4a:
56:45:aa:1b:5b:ab:77:24:29:57:af:e5:2a:d8:ea:
2c:5b:57:db:d8:e4:6d:d1:ca:e4:a0:9b:cb:b0:7c:
d4:d8:d6:3a:82:8c:33:1b:a4:28:fa:b9:fa:b1:68:
8c:12:c6:3b:d8:e5:a7:81:66:36:78:20:b2:5b:84:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:96:1E:7A:57:D6:09:18:2F:A2:F8:90:5F:7D:7D:23:EB:95:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57B89F3CDFE811EFA2631C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
08:37:a3:9e:59:d4:4d:d9:5c:0b:12:38:cf:f3:d1:35:5d:77:
80:fd:6b:e1:86:07:c9:1c:32:59:36:bb:ec:88:5f:56:55:a3:
fe:32:60:92:44:51:5b:e7:cf:5a:c8:2b:34:16:3a:33:19:46:
4d:dc:57:f5:e7:f7:fa:55:5b:4f:c4:4b:02:2e:1f:67:7b:ee:
ba:ca:96:55:b7:59:b1:42:bb:7d:7c:ae:ce:65:7e:08:91:c1:
d3:e6:9f:f1:ba:f8:ee:c6:c8:b3:66:bc:86:0e:fd:d3:82:10:
25:bb:47:92:a4:0d:e2:21:6d:cd:5d:de:39:06:b6:ff:e7:6b:
43:ff:40:56:42:c7:e1:c7:e4:c9:47:12:2e:81:49:9e:11:91:
18:9c:01:61:81:64:c4:52:fb:96:80:bb:d8:d0:b8:55:89:27:
e1:c1:1b:b9:cf:68:4d:f0:7c:05:2d:e8:ec:93:33:c3:bb:10:
86:28:8f:e0:89:48:2d:b1:f4:b1:1e:44:23:7a:ad:2a:3a:b4:
0c:32:a1:a9:c6:35:73:1b:e7:1e:71:64:d7:4f:91:b8:66:c3:
ef:41:0b:a8:4d:89:1a:79:f8:b3:cf:d6:58:cd:19:25:7f:c7:
6b:6a:9b:26:bf:73:1b:2b:11:64:53:91:3e:4b:84:d5:0c:e4:
33:af:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:10 2025 by rpki-client