Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCCCB2DA6811EFB75E8179762E951A.roa
File: 58BCCCB2DA6811EFB75E8179762E951A.roa (raw, json)
Hash identifier: pFXQICvjQPjgIv9rZ0CoKS8gzcMfQ349h4NiiGYdAaQ=
Subject key identifier: A2:E0:74:B6:1C:92:C2:B8:89:80:90:E4:0A:F5:49:DD:F7:8D:46:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCCCB2DA6811EFB75E8179762E951A.roa
Signing time: Fri 24 Jan 2025 15:31:57 +0000
ROA not before: Fri 24 Jan 2025 15:31:54 +0000
ROA not after: Mon 03 Mar 2025 15:31:54 +0000
asID: 203020
IP address blocks: 154.223.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84141 (0x148ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:31:54 2025 GMT
Not After : Mar 3 15:31:54 2025 GMT
Subject: CN=6793b26d-7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:e6:b0:6f:78:5c:e8:32:4f:ba:e9:60:f1:
b5:c2:5b:27:57:a8:fd:09:83:3a:f7:e4:bd:ca:e2:
af:62:2c:8f:15:fe:7b:1e:80:0c:27:aa:5b:ae:cc:
e3:7f:38:a4:73:16:66:b9:1b:7c:e4:af:fb:1d:9b:
a0:27:c8:98:52:58:34:79:cc:5e:8d:d4:ab:99:88:
3e:29:17:36:7b:51:c8:44:57:ee:71:ce:4e:1c:1f:
b3:df:cc:fc:fe:60:97:99:62:ea:d6:84:cc:ea:0f:
49:f1:f4:bd:23:36:47:0a:d9:f2:ff:73:32:ea:57:
6a:20:2b:41:75:05:1f:ee:ca:61:95:fb:f9:64:4f:
2c:0e:41:12:91:a4:61:d7:94:28:a3:f3:0e:fc:25:
04:19:f8:46:78:03:52:5b:e6:32:d0:fe:96:dc:b7:
91:1b:db:b0:26:e5:9d:99:93:ff:f1:ea:20:46:90:
f1:43:11:4c:fe:17:aa:29:3e:7c:1f:39:45:52:27:
dc:17:c4:87:97:44:b0:47:1b:ea:79:86:79:ef:f9:
34:52:55:d2:63:86:ea:ce:d9:c0:bc:27:7c:29:fb:
c8:98:e9:e2:36:cc:34:e5:51:91:5b:ff:4b:8c:a3:
7e:5a:7f:11:3f:15:e6:a6:0a:66:63:6f:ef:3d:3a:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:74:B6:1C:92:C2:B8:89:80:90:E4:0A:F5:49:DD:F7:8D:46:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCCCB2DA6811EFB75E8179762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.142.0/24
Signature Algorithm: sha256WithRSAEncryption
42:80:84:40:5b:75:c2:7e:fd:34:86:d0:5e:04:f9:3e:92:44:
b1:7a:9b:8d:25:dc:8f:28:d6:24:e9:17:54:dd:8f:b0:66:e5:
e5:e4:9a:09:d1:a6:f9:7c:ae:67:ae:07:58:d6:0d:65:7d:31:
97:2b:ba:d5:ce:ec:2e:56:f8:2f:2c:61:31:a8:eb:dc:37:e9:
13:a1:9a:75:46:83:b6:77:79:b9:90:dc:3e:f9:0f:63:c8:85:
3d:d9:57:94:10:66:48:43:1e:40:04:b9:2f:74:48:ba:d3:25:
02:b9:7d:72:f8:19:67:70:7b:6a:d7:59:0d:68:f7:53:31:4e:
6e:44:28:7b:f5:b7:57:c3:10:08:15:21:1d:ff:d2:06:23:aa:
2a:82:f5:99:2b:14:35:10:76:7a:4b:f6:40:9f:6e:29:79:c7:
bb:7a:a1:49:2c:cc:45:5d:76:6b:f3:5b:62:3b:1e:55:b3:b6:
26:44:53:18:e0:98:5b:af:6f:2a:e1:0d:18:56:57:44:61:74:
f0:bb:79:b1:81:e4:59:a8:f1:74:a8:d7:c4:84:68:8d:22:70:
60:84:1e:91:a6:f0:de:77:7f:f6:cd:8f:c1:30:ff:47:e8:6a:
41:44:86:c8:7e:b9:5e:2a:1d:e8:dc:34:b4:e5:1a:ff:5f:70:
c9:49:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:39 2025 by rpki-client