Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FA22D2DC8011EF95B8AE9E762E951A.roa
File: 58FA22D2DC8011EF95B8AE9E762E951A.roa (raw, json)
Hash identifier: dVinJYp0/ZIbHJF8LPPnkhrPcPvTmw0cfAXWgYYDdkM=
Subject key identifier: 67:D6:46:A4:04:C2:87:23:A6:77:56:62:5E:F1:10:AD:3A:39:F1:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FA22D2DC8011EF95B8AE9E762E951A.roa
Signing time: Mon 27 Jan 2025 07:28:48 +0000
ROA not before: Mon 27 Jan 2025 07:28:44 +0000
ROA not after: Mon 03 Mar 2025 07:28:44 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84839 (0x14b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 07:28:44 2025 GMT
Not After : Mar 3 07:28:44 2025 GMT
Subject: CN=679735b0-20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:5f:03:94:85:3b:39:9e:6d:12:cc:94:e7:
a0:c9:09:42:0f:4e:d0:85:e9:6d:2d:6e:be:2a:58:
da:9b:f4:86:10:b7:1c:4a:d8:1c:ce:a2:28:74:b4:
9c:8b:56:d4:ce:06:fb:43:63:fe:e7:b5:35:20:b7:
42:ea:5b:66:52:76:f5:ca:56:a6:32:16:fc:27:42:
30:ad:ba:c1:99:7d:e2:85:ea:2d:cd:24:28:67:83:
8b:f1:1c:1e:61:26:75:cd:5d:6b:1c:ec:de:70:96:
15:44:13:33:dd:90:a7:5a:3d:74:1a:50:61:ab:c4:
86:44:70:f9:eb:29:ab:ad:b2:07:7f:9d:56:98:c0:
2f:e8:79:03:4b:3d:38:22:67:f6:67:95:80:2c:6a:
94:84:22:21:6e:5b:0e:b2:d0:ca:e7:ce:d9:49:d2:
3f:b3:a9:6c:d4:0a:a9:c1:e7:ec:7b:d9:cb:99:48:
4d:2b:68:26:d2:14:b1:af:7b:d5:12:b6:8a:46:18:
9b:a2:f0:39:0c:be:08:d7:1d:e9:8a:2c:74:4d:64:
e6:c6:8a:88:9d:7b:e8:c6:3c:2a:5d:0b:f2:79:f7:
d9:1a:3e:b2:b3:09:0d:2d:62:60:cc:1f:12:d0:58:
79:70:bf:a9:78:00:30:7b:40:4b:d6:f6:c0:4c:48:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:46:A4:04:C2:87:23:A6:77:56:62:5E:F1:10:AD:3A:39:F1:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FA22D2DC8011EF95B8AE9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a7:e7:40:f0:02:f4:e5:47:82:3d:0b:dc:50:ac:67:49:04:
6e:d2:e5:ec:58:19:a4:a5:45:9e:ec:f9:20:95:fa:07:e9:ba:
30:ce:c3:f3:f0:c1:9e:4b:26:19:57:dd:40:32:6d:79:43:ef:
90:62:be:b5:c3:c9:e3:1d:01:ed:e8:a4:bb:0b:0e:fb:07:60:
42:d7:ee:47:2c:2c:59:6d:ef:a9:0b:60:d9:33:98:f2:a7:c4:
75:6f:b1:62:a8:fc:72:af:33:c4:10:8b:82:1d:83:63:c9:e9:
16:95:91:a6:e9:2c:d1:47:5a:a5:d5:79:3a:0f:1b:a5:59:3b:
49:3e:c0:f0:14:f6:fc:32:ce:77:4c:1c:d2:70:af:f5:43:6a:
af:9b:a1:4f:2c:0e:94:c3:bb:81:d7:18:ce:e7:23:a9:2e:52:
da:7e:0a:f6:c9:df:b7:75:44:32:e6:7d:4f:6e:02:87:1d:28:
fa:09:d8:e7:55:c0:ae:07:a5:07:04:46:0a:8e:95:e3:df:b0:
54:6d:2b:31:80:ca:dc:83:28:ec:b5:fc:75:3b:52:3c:2a:b5:
a6:b0:4a:1c:fb:b7:b6:08:0d:a9:ac:d8:55:a0:12:1d:38:fa:
c2:23:8a:f2:36:d0:c0:24:58:49:29:a6:b5:1a:ab:4f:a0:e9:
23:67:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:10 2025 by rpki-client