Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BA2668DA4311EF9E7CA57F762E951A.roa
File: 66BA2668DA4311EF9E7CA57F762E951A.roa (raw, json)
Hash identifier: CzGlB8FvWEkIX/rqg1Z1b2OHrHYDtfeW6oZbR0UXr7c=
Subject key identifier: D9:51:A6:4E:82:14:12:A2:79:3E:AE:81:77:AA:A7:82:95:08:F5:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BA2668DA4311EF9E7CA57F762E951A.roa
Signing time: Fri 24 Jan 2025 11:07:29 +0000
ROA not before: Fri 24 Jan 2025 11:07:26 +0000
ROA not after: Wed 05 Mar 2025 11:07:26 +0000
asID: 48031
IP address blocks: 154.215.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83432 (0x145e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:07:26 2025 GMT
Not After : Mar 5 11:07:26 2025 GMT
Subject: CN=67937471-4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:e6:b1:5b:52:b9:3c:c1:de:2d:b6:b9:61:
04:a1:4d:e0:13:da:72:c8:27:63:53:97:ef:58:f9:
22:4a:d1:b1:57:75:a9:c9:4b:bd:d4:5b:15:31:4a:
0a:e6:84:a2:5b:1d:db:cb:e1:4e:d5:21:a8:d7:a3:
ca:40:03:9a:6c:26:10:b1:13:8c:e2:88:f7:9b:15:
ea:76:de:e7:36:36:5c:b8:68:96:ad:91:40:89:b2:
b9:2b:a3:3e:cf:8b:58:3f:f1:ab:a6:9a:4f:3e:c0:
e4:82:c3:67:03:b8:7d:1c:3e:55:4a:ed:4a:8c:63:
7a:75:fa:c9:3a:a9:1a:7e:83:67:3a:ae:c5:74:aa:
8c:b0:9c:3a:b4:a5:37:0d:5d:30:84:bc:9b:41:10:
41:a7:0a:bb:f1:a0:8c:cf:7b:1e:87:84:af:11:1e:
a0:73:72:0a:32:48:0b:28:1e:ad:75:ed:db:ac:bc:
7b:99:be:b1:f0:03:39:67:c8:60:b1:f2:7f:a0:e3:
c7:51:2c:19:0f:74:65:54:1d:01:b4:79:b4:68:9d:
c3:71:9a:50:bb:db:6e:cb:26:a5:9b:da:6b:68:b6:
96:db:a3:e5:b0:61:b1:47:1b:a7:86:83:cc:14:e6:
d2:04:54:de:2e:da:24:da:4c:9e:87:0b:54:c0:a3:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:A6:4E:82:14:12:A2:79:3E:AE:81:77:AA:A7:82:95:08:F5:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66BA2668DA4311EF9E7CA57F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:15:6e:92:53:ab:80:c2:e6:c6:a7:15:ca:b9:6c:0f:b7:69:
c3:03:35:78:44:16:7b:31:3f:09:13:da:f2:ee:70:71:c7:bd:
8a:a8:18:94:54:0f:16:f4:8f:09:84:ee:20:6c:8c:b0:37:8d:
19:85:41:eb:a7:4e:e8:90:cb:ea:5f:1e:8c:33:db:0f:8a:78:
76:77:4f:b6:4f:2d:03:f8:ba:06:88:b5:07:b9:69:85:0c:ec:
80:e6:45:2f:78:cd:67:42:ad:bc:2e:84:dc:a2:ab:97:66:7b:
40:a1:30:c5:43:7c:8d:80:d5:35:bd:e1:40:49:8b:17:24:0e:
92:9d:c3:15:67:1f:3e:3e:88:9f:d2:eb:c6:d7:b6:e1:9c:97:
0f:d8:c8:da:52:4f:7c:cf:82:57:65:87:b8:16:e6:7b:b0:e3:
44:c7:92:48:4a:1b:44:60:97:1f:1b:01:b1:7b:25:e8:a7:5e:
e8:13:39:6d:c2:81:32:fc:c6:8a:65:c3:e4:29:c7:b3:2c:b1:
8a:93:9b:55:f1:6a:e8:9c:8c:b2:e0:8b:fa:2d:be:40:91:f6:
31:32:30:b7:f1:6d:c6:4c:f6:ae:92:01:34:61:97:0d:c7:96:
c7:f4:d4:c7:52:ed:41:dc:a7:0e:fb:33:30:26:c8:3b:37:d7:
bb:c8:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:31 2025 by rpki-client