Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770755E6DA6A11EFA89B5787762E951A.roa
File: 770755E6DA6A11EFA89B5787762E951A.roa (raw, json)
Hash identifier: leXpSO7luSStTZiGuRKlTz9cDNuF/JIy8mFCFSiiqrs=
Subject key identifier: 0C:77:68:15:D3:DD:E6:C0:AF:1D:FC:17:3D:95:26:DC:19:1A:27:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770755E6DA6A11EFA89B5787762E951A.roa
Signing time: Fri 24 Jan 2025 15:47:07 +0000
ROA not before: Fri 24 Jan 2025 15:47:03 +0000
ROA not after: Mon 03 Mar 2025 15:47:03 +0000
asID: 203020
IP address blocks: 154.223.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84165 (0x148c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:47:03 2025 GMT
Not After : Mar 3 15:47:03 2025 GMT
Subject: CN=6793b5fb-1d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:af:d3:e8:77:4c:fd:9c:da:a8:bc:13:54:
29:4b:90:d7:a1:15:47:8f:78:11:03:c6:77:a1:79:
ba:3a:f5:df:89:ae:aa:9b:14:6e:cb:e7:e4:f1:86:
b9:e9:85:ae:a7:e8:9d:14:d8:50:1e:43:ee:82:b7:
f1:c5:e4:96:a4:32:df:87:be:f9:fd:33:45:16:af:
c1:84:ee:8e:b6:ab:37:ca:a6:fa:cf:b7:7b:1c:90:
88:8b:6c:39:2c:e7:0d:9b:ac:30:b7:0a:1d:4d:7e:
1d:db:4f:9c:ce:a0:e2:34:ba:1f:c3:cd:77:99:a1:
c5:87:42:53:b3:97:6a:20:46:7d:df:f1:15:41:d2:
e8:85:de:91:e7:e5:55:9b:1e:1f:c2:8b:14:53:94:
19:67:41:54:2f:28:4e:ab:51:f3:fe:a3:9d:59:1b:
32:42:3f:ee:03:87:72:02:b3:51:6a:66:a5:ef:2d:
99:fd:9b:0f:f5:bb:bb:8f:78:9c:73:88:33:06:13:
36:6e:e9:6d:be:1e:bc:cb:fa:0b:24:25:7c:58:3c:
a1:92:2a:3e:68:f6:25:b5:60:f5:ae:9f:90:5e:f8:
15:f0:92:e0:9f:34:9d:53:c8:59:19:1f:17:ed:00:
69:cf:2a:37:9c:05:85:d0:78:c8:ab:09:9f:54:9d:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:77:68:15:D3:DD:E6:C0:AF:1D:FC:17:3D:95:26:DC:19:1A:27:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/770755E6DA6A11EFA89B5787762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.172.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:4a:80:d4:48:75:2f:ca:13:65:eb:d1:71:3e:cb:02:f7:80:
a5:5a:e4:d1:3d:09:93:68:2d:08:71:ac:b6:04:46:7d:43:8b:
62:a3:68:2b:8f:96:38:ca:a0:4b:8c:8c:bf:67:d3:7a:33:df:
86:79:0a:eb:44:bf:39:a3:81:ff:1c:47:24:17:6a:0a:c2:a8:
45:1c:9d:40:1f:90:4d:c3:f2:c2:47:e3:be:ea:0b:88:62:97:
39:ab:76:22:2e:97:5c:d5:ab:1c:da:cb:8d:74:d8:25:e6:d3:
a7:93:32:c0:f9:cb:70:fd:2c:7e:f7:d7:dc:c3:48:c6:66:7b:
d3:30:32:90:0b:e4:68:04:14:c6:90:c5:a4:f0:72:2a:64:03:
82:e7:4f:d2:0d:33:f0:04:92:26:4c:51:b4:98:03:13:0b:08:
e6:e1:04:b7:d6:1c:0f:a6:b8:05:f8:09:6c:ed:89:bc:06:64:
43:a0:79:9e:82:3b:dd:ca:d4:7d:d2:da:b1:4d:06:de:f7:82:
bd:dc:77:bd:45:b9:16:b7:8d:b2:f4:d9:35:8d:98:4f:ee:1c:
ba:54:bb:1b:0e:24:f2:2f:30:ad:f1:e1:50:9c:b8:cd:dd:34:
bc:3c:9d:33:b2:40:93:9c:b1:39:4f:89:bb:37:17:9b:ac:b3:
9b:a2:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:02 2025 by rpki-client