Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7446E2ECDA4011EFBEEF556B762E951A.roa
File: 7446E2ECDA4011EFBEEF556B762E951A.roa (raw, json)
Hash identifier: hg6vvB9BNXTTQBzR4TS9ji1hyuJJole06yefZe/g7Bg=
Subject key identifier: 0F:A4:64:28:63:62:FB:6B:BC:03:EB:FD:F7:53:DD:49:DB:15:E5:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7446E2ECDA4011EFBEEF556B762E951A.roa
Signing time: Fri 24 Jan 2025 10:46:24 +0000
ROA not before: Fri 24 Jan 2025 10:46:20 +0000
ROA not after: Wed 05 Mar 2025 10:46:20 +0000
asID: 202656
IP address blocks: 154.219.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83383 (0x145b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:46:20 2025 GMT
Not After : Mar 5 10:46:20 2025 GMT
Subject: CN=67936f7f-394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:a9:54:18:93:f6:31:61:55:02:b4:2e:da:
75:60:cb:bb:52:b2:b8:35:5e:a9:f2:44:79:da:6c:
6e:e9:a4:ad:63:76:96:69:68:87:c9:b2:a1:7b:13:
13:22:7e:0a:20:09:93:64:c8:ab:f1:ab:20:cb:0c:
92:bf:6c:a3:9c:f1:8a:46:c0:88:64:e4:98:82:09:
53:60:70:8f:9e:70:68:bc:70:93:75:b6:be:90:75:
24:d1:2c:61:4f:33:85:91:e7:7b:9a:60:c7:d0:2f:
bf:f7:2d:39:4d:fc:f4:d6:73:ca:2d:88:f4:f6:11:
d6:40:15:ea:eb:f9:9f:85:c1:82:3b:49:2a:2e:33:
26:38:da:cd:37:02:cf:87:de:88:13:2b:5d:7c:e9:
d3:c3:bd:8b:d6:fc:4f:1f:fa:24:30:a9:e6:15:50:
63:d9:b7:40:0e:31:7a:2f:2a:58:44:f9:d3:ac:fe:
11:8e:78:2b:0a:84:c9:5f:68:b3:fe:f7:79:4a:df:
93:65:e2:69:c7:44:7a:2f:95:4e:be:83:c0:ed:30:
d5:b3:34:e3:d6:4b:97:26:8f:5a:1d:36:93:b9:31:
6c:72:ae:20:de:8c:9d:bf:3c:e2:80:46:f2:d1:f2:
c0:25:8a:86:a6:f9:45:9c:46:35:40:e4:b4:da:f2:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:64:28:63:62:FB:6B:BC:03:EB:FD:F7:53:DD:49:DB:15:E5:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7446E2ECDA4011EFBEEF556B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.22.0/24
Signature Algorithm: sha256WithRSAEncryption
12:89:8c:85:70:b1:c9:fd:e0:76:70:05:0b:61:1d:39:99:c7:
9d:9c:b1:e4:91:91:08:72:79:83:23:ab:5a:cb:bd:1a:02:e7:
d4:98:bd:04:67:22:65:47:38:ae:5c:b2:83:d3:15:0b:f0:18:
62:6a:c3:41:d6:f1:4d:4f:ab:cd:5f:7c:8d:6a:fe:69:de:6b:
53:0c:5b:84:61:08:ae:6c:37:57:15:c7:33:d0:fa:43:d1:a5:
eb:bf:9a:70:ad:b6:4c:04:d6:04:87:f0:73:b5:05:34:e3:77:
ad:98:eb:f1:d7:db:8c:06:b1:6a:00:b4:ee:64:b1:e4:9a:e9:
0d:1a:56:11:06:f7:cc:27:f8:6b:1c:ac:c3:36:e1:d7:aa:ed:
7a:40:43:5d:d1:4a:4a:91:1d:8b:35:e1:ce:f4:20:76:1c:2f:
fd:39:1a:a6:02:67:db:ee:69:d6:f4:ff:e6:fd:fd:e2:55:30:
5d:29:76:b3:9d:63:b6:2c:22:3b:53:cc:7f:67:d9:49:d4:98:
cd:08:09:a5:0a:9b:55:95:83:f3:e1:39:1c:57:a5:ef:b0:f3:
0a:04:ec:44:09:2a:fe:7d:e1:3d:d6:c2:dd:16:e0:d1:44:c9:
da:e7:60:18:b9:3b:0c:c1:50:52:30:8c:55:bc:65:fa:e4:54:
42:9b:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:45 2025 by rpki-client