Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A31506AC35811EF8659CA50762E951A.roa
File: 7A31506AC35811EF8659CA50762E951A.roa (raw, json)
Hash identifier: 9k4rhdjNWDdOY6rb1cTQ28USFdYlYx7wBtMRXrYRrQE=
Subject key identifier: 67:A5:B9:10:3C:06:C1:EA:34:14:56:2B:0B:A3:52:2E:04:0A:92:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A31506AC35811EF8659CA50762E951A.roa
Signing time: Thu 26 Dec 2024 07:10:25 +0000
ROA not before: Thu 26 Dec 2024 07:10:21 +0000
ROA not after: Sun 09 Feb 2025 07:10:21 +0000
asID: 138915
IP address blocks: 154.223.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75243 (0x125eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:10:21 2024 GMT
Not After : Feb 9 07:10:21 2025 GMT
Subject: CN=676d0161-75c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:6e:5b:ad:10:56:56:42:e5:1b:b9:e3:72:
29:36:5d:8f:df:bb:39:a8:af:81:ff:10:1c:4a:47:
35:4a:99:65:49:fb:a7:7e:5d:15:1c:99:3f:42:d6:
7e:c1:24:5d:c1:77:aa:67:2e:8e:aa:fe:f4:df:11:
9d:54:7b:8b:10:8b:3c:ff:cc:76:77:77:a4:be:db:
af:88:b9:9e:29:5c:c4:49:ae:85:06:be:a0:75:ff:
11:b6:b4:69:3b:19:c2:42:87:18:52:71:8e:b8:cb:
a2:37:ba:c4:ef:cc:d0:a3:a5:d0:63:08:4a:e7:49:
69:66:2e:52:4e:9e:9a:50:4a:fa:98:f4:7b:73:f0:
4e:84:12:40:8a:b5:d2:e4:ae:d0:8a:d8:97:13:33:
0f:4c:14:0c:14:0f:d7:95:57:82:94:b4:db:a2:15:
37:ea:10:c2:88:26:f0:6e:f6:8f:c6:1a:7b:85:60:
9c:78:78:49:62:73:59:74:cc:89:0b:40:5b:fc:96:
df:2d:d9:f9:24:8c:63:5e:36:3e:63:66:50:3f:3e:
3d:69:17:a6:9d:d9:28:9f:e0:5d:ca:50:2a:d7:ac:
5e:54:2b:e7:ca:93:00:7c:bb:8e:85:54:88:df:f1:
61:41:60:bf:ef:76:f3:bd:9a:9a:04:64:37:4e:39:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:B9:10:3C:06:C1:EA:34:14:56:2B:0B:A3:52:2E:04:0A:92:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A31506AC35811EF8659CA50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.56.0/21
Signature Algorithm: sha256WithRSAEncryption
28:6a:58:77:b8:86:78:7c:e6:8d:26:b2:d6:d2:73:bf:6e:9c:
67:e2:a4:8b:a3:cb:b8:ad:a1:d2:3c:96:fa:40:69:2e:02:8d:
77:cd:52:b9:b5:ae:56:ce:24:af:ff:fb:e0:c5:ac:a0:89:a8:
27:0d:41:1b:f0:ce:d0:e5:1f:15:3c:dd:ad:60:a8:09:4e:0c:
d6:96:16:f0:a8:63:23:14:4d:87:51:93:bf:f4:3e:55:17:17:
04:a5:69:56:8f:bc:de:77:3a:5a:b5:01:bf:9c:39:c9:62:26:
26:f8:89:57:ef:9f:39:15:e8:99:c1:4b:76:e6:91:3f:2b:f1:
dc:52:25:7b:0c:ea:76:3f:3f:6b:30:1e:f6:1c:b0:a0:92:48:
c4:6e:17:cc:21:0a:93:66:73:70:f6:b1:38:1d:21:3e:ad:c2:
05:f9:66:c1:f1:2a:c1:15:af:5c:6e:d8:82:4b:05:ec:5b:05:
5a:1d:1e:3b:08:0d:b2:ee:85:7c:4d:88:e1:4a:1d:fd:07:00:
5b:c1:3a:87:20:93:f1:86:c4:57:66:09:90:ed:ea:dc:9c:b9:
9f:4d:cd:6a:36:b9:59:0e:ab:a4:53:2b:ba:e5:a3:8f:a5:23:
fd:fb:9a:cb:67:b0:06:5b:a1:ad:4c:3e:bf:86:f0:ce:b2:35:
a7:d8:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:47 2025 by rpki-client