Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7EFEADA5011EFB9A7D055762E951A.roa
File: 58E7EFEADA5011EFB9A7D055762E951A.roa (raw, json)
Hash identifier: zKMlFx9Ecx/OzzOqsnsdLnxMyKCWijf/APpEgtHdx/c=
Subject key identifier: B2:FB:21:34:61:D8:2A:8F:B5:4E:EA:F5:5D:F3:11:9F:43:57:59:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7EFEADA5011EFB9A7D055762E951A.roa
Signing time: Fri 24 Jan 2025 12:40:10 +0000
ROA not before: Fri 24 Jan 2025 12:40:06 +0000
ROA not after: Wed 05 Mar 2025 12:40:06 +0000
asID: 44559
IP address blocks: 154.209.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83695 (0x146ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:40:06 2025 GMT
Not After : Mar 5 12:40:06 2025 GMT
Subject: CN=67938a29-f32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:2d:dc:1c:04:74:89:64:46:14:f1:b8:cb:
f3:26:d8:28:a3:fc:c4:66:e6:75:87:db:b8:b5:81:
2e:52:ce:5a:79:72:38:d3:3e:e9:2a:ee:76:38:59:
b8:a9:d9:1f:5e:89:a0:1c:a8:6e:63:4b:00:c5:88:
ee:6a:3d:1a:75:bb:32:77:76:ad:da:a1:db:11:fc:
02:a8:1d:95:ff:89:a1:5b:6c:7c:c8:a5:f3:a8:a1:
e9:e2:67:65:e0:79:69:78:c9:bf:9f:71:b4:eb:0e:
d1:00:83:bf:f2:9a:ec:c7:38:82:43:1a:20:0b:7b:
53:f7:0c:03:cd:d1:25:78:a7:48:62:67:bc:b5:6a:
2b:eb:de:2e:30:79:c0:d5:74:63:c0:ce:c9:32:e8:
2c:c2:39:bc:5b:89:79:86:6f:0b:fb:60:3a:f9:96:
01:72:fc:d6:4d:00:34:47:47:b0:f9:b7:2e:9f:ef:
55:f9:b8:df:1d:cd:a7:77:fc:37:ad:fa:60:ff:40:
ee:a7:1c:18:e1:2e:78:c1:04:31:2b:cb:4d:61:76:
66:8d:17:b3:71:6e:5f:1a:c6:63:52:d7:66:85:d2:
31:8e:7b:37:53:5c:30:0b:25:f6:2c:42:a9:26:6d:
44:ea:6b:74:95:b5:99:12:58:ee:fd:65:7c:64:97:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:21:34:61:D8:2A:8F:B5:4E:EA:F5:5D:F3:11:9F:43:57:59:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7EFEADA5011EFB9A7D055762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a5:68:1c:60:cf:73:35:c6:0a:a5:d2:cc:98:93:6d:64:e2:
f2:55:20:2e:89:a6:37:ce:74:21:1e:ee:50:42:9b:bd:29:ed:
65:6f:0e:03:3b:8a:9a:08:1d:f3:5a:51:5b:25:ff:4c:b1:9e:
8c:7f:8e:87:51:fe:da:63:dc:64:c3:ce:13:9f:64:8d:d8:ee:
9d:73:fe:7b:00:01:77:d9:66:f1:ab:07:2f:90:0a:41:c1:53:
9f:3a:0b:e6:f8:7f:3c:2b:a6:99:51:e0:6b:2b:12:e2:e8:a1:
20:76:98:de:a3:bf:7a:89:83:b3:d5:57:76:d9:b4:c6:c2:d7:
02:e8:c8:e9:cf:17:e9:1b:7e:fc:60:03:5d:18:e3:d6:92:e1:
2b:72:60:6b:3c:8a:0e:dc:74:6a:c0:78:fc:fd:69:58:4e:98:
b2:fa:0c:cf:11:03:04:2f:c4:b8:90:af:be:bd:aa:2c:c8:af:
52:1a:bb:4a:cf:03:0a:83:ab:95:bc:98:b2:f3:ab:71:9c:d0:
82:86:3a:11:dc:5a:da:cc:7b:a8:a8:ec:d6:29:3d:d4:f9:b7:
7b:48:d0:e1:b4:f5:59:95:f3:9e:15:b3:00:5c:63:39:98:5d:
1c:6b:86:02:41:93:48:e1:e8:86:73:bf:41:67:76:0d:f2:93:
48:98:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:26 2025 by rpki-client