Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D62D148D9FB11EFAD4B7793762E951A.roa
File: 5D62D148D9FB11EFAD4B7793762E951A.roa (raw, json)
Hash identifier: n99TNFb/pGGwkZDv/mwo/Q0RPhkuYrxwSzCVTSeTcDQ=
Subject key identifier: 2A:10:4F:8E:0A:FF:D0:70:45:1A:66:E7:97:76:C0:34:22:92:D4:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D62D148D9FB11EFAD4B7793762E951A.roa
Signing time: Fri 24 Jan 2025 02:31:50 +0000
ROA not before: Fri 24 Jan 2025 02:31:45 +0000
ROA not after: Sat 01 Mar 2025 02:31:45 +0000
asID: 62240
IP address blocks: 154.223.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82790 (0x14366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:31:45 2025 GMT
Not After : Mar 1 02:31:45 2025 GMT
Subject: CN=6792fb96-f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8a:8f:35:7e:66:e6:59:90:6c:8a:7f:85:bd:
4f:28:f6:84:84:32:68:4e:94:ab:97:75:e6:8c:e2:
30:a2:37:c2:6b:47:f3:ba:01:a2:04:08:81:d9:70:
28:b7:b1:9c:89:24:d5:a3:21:6c:e5:f6:5c:a6:0f:
78:a8:ca:da:03:94:36:1d:43:8a:39:91:7f:66:c9:
54:43:57:85:d1:1b:c8:55:34:4e:b2:ce:e7:ad:b0:
a1:db:b6:65:56:29:de:8c:35:5f:e3:f4:b0:a5:80:
cc:e5:7e:57:f1:3e:d2:60:a8:ad:f3:15:9a:5f:19:
6f:c1:3c:bf:50:b6:df:4f:48:93:e2:11:e8:55:4e:
37:2b:7c:36:6f:a9:a1:86:2a:8c:78:fb:1c:61:87:
b4:9c:7f:fe:5f:bc:e9:7b:b1:93:90:59:a4:e6:79:
c2:53:11:fe:9e:5d:86:28:da:11:13:0c:c7:4c:f8:
69:9e:dc:73:fe:58:00:85:f1:db:d0:61:65:60:35:
83:fe:28:d9:cc:a4:b6:f2:de:df:f5:39:1f:3d:8b:
0f:98:8a:53:52:31:db:b5:b5:23:b5:c4:91:6f:ed:
87:83:b8:86:31:95:de:06:b8:53:5e:04:27:f4:90:
7b:01:94:1b:c4:0c:61:96:cf:d7:57:33:96:90:0f:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:4F:8E:0A:FF:D0:70:45:1A:66:E7:97:76:C0:34:22:92:D4:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D62D148D9FB11EFAD4B7793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.218.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7f:1d:3b:19:ec:48:cd:13:33:66:7c:c8:0c:df:d0:c2:e3:
1a:8e:4d:03:38:de:81:01:c1:94:78:32:6d:2a:23:e5:0b:77:
6b:9d:fc:63:d7:c4:5c:10:35:57:2f:17:d8:e7:e5:1a:fe:d9:
6c:a9:dc:bd:eb:a7:e9:6e:47:56:4d:75:6e:45:94:70:07:b5:
93:13:55:2f:63:66:14:a6:36:39:21:16:90:cd:62:28:8e:28:
87:b3:f9:dc:56:86:bd:71:36:83:43:35:d8:39:95:1c:8c:29:
50:2c:0b:4d:d6:66:40:b0:40:7e:21:87:fd:78:74:dc:55:81:
4b:06:a8:69:bc:50:3f:7d:5e:a9:07:a4:21:d1:a3:39:9f:0f:
2b:de:79:3a:cc:1d:fc:79:d1:2c:75:f8:56:ff:7c:73:15:86:
ec:20:b1:0f:94:09:ca:94:1e:be:0d:b4:0b:91:13:69:71:53:
6e:80:98:f0:fc:07:b2:f0:5b:cd:20:f3:03:05:25:83:ec:67:
3a:a8:39:c6:6e:37:17:a7:bd:e6:c0:e1:a7:c6:67:70:e1:cc:
6c:76:ca:0b:6c:33:cc:63:b8:de:c9:9c:f1:db:c8:a2:28:dc:
4b:2f:45:c9:51:ef:5a:55:9f:15:a0:3c:9b:db:ae:a6:7a:fd:
b8:6a:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:08 2025 by rpki-client