Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD7D5F4C29C11EF95FC08A5762E951A.roa
File: 7BD7D5F4C29C11EF95FC08A5762E951A.roa (raw, json)
Hash identifier: t0qrhGMlIhkMelDB6YBTPp1BEFHNETzDp63g9ptHOO4=
Subject key identifier: 1C:E8:A3:53:8B:50:B0:E8:FE:EA:54:F7:F0:5C:62:0C:A4:6D:DF:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01250A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD7D5F4C29C11EF95FC08A5762E951A.roa
Signing time: Wed 25 Dec 2024 08:44:42 +0000
ROA not before: Wed 25 Dec 2024 08:44:38 +0000
ROA not after: Sun 09 Feb 2025 08:44:38 +0000
asID: 138915
IP address blocks: 154.223.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75018 (0x1250a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:44:38 2024 GMT
Not After : Feb 9 08:44:38 2025 GMT
Subject: CN=676bc5fa-e936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:8d:f3:cf:a9:b8:e7:82:a5:09:a0:1f:36:
c2:09:c9:42:b3:40:25:e4:aa:70:94:6e:5e:11:e1:
cc:bf:1c:a3:c3:b9:e3:de:6c:46:b7:03:a7:20:ac:
2f:9c:77:aa:05:a6:58:2f:5e:24:40:fe:db:04:d4:
68:df:4b:e8:ae:81:f8:c1:cc:d7:7b:21:62:ec:98:
1b:50:16:8b:4a:ab:45:93:3b:94:6a:2b:0b:63:09:
4c:eb:d0:2e:ef:61:0a:cc:51:91:1b:64:f4:60:62:
5e:0c:96:22:da:35:8e:88:b8:db:19:6e:db:24:e3:
b9:a3:c2:13:01:81:be:22:95:9e:0c:f2:0e:c9:70:
0f:90:de:b7:f6:17:2a:f8:b0:06:54:cf:bb:0a:0a:
be:ba:f7:53:c3:9b:df:5f:03:c8:ed:a0:73:a1:1f:
41:c8:29:78:1b:b3:81:35:7e:0d:ca:87:2d:7e:26:
98:4a:88:23:d5:0c:16:35:3e:32:d2:7c:2b:7b:88:
1a:e0:e6:39:2d:2a:c6:be:32:7e:3e:87:ec:62:69:
06:c9:a8:bb:53:20:1e:49:77:6b:15:bb:9a:df:21:
85:cd:57:1d:14:98:03:99:6f:63:5f:92:e6:e8:a5:
aa:ca:3d:15:c9:4b:3d:63:cf:90:0b:06:c4:e3:2c:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E8:A3:53:8B:50:B0:E8:FE:EA:54:F7:F0:5C:62:0C:A4:6D:DF:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BD7D5F4C29C11EF95FC08A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.34.0/23
Signature Algorithm: sha256WithRSAEncryption
04:cc:97:f1:76:0e:2a:96:1e:c9:eb:55:0a:fb:91:fe:82:01:
19:06:9d:35:eb:5f:3f:69:0c:19:93:62:da:57:8a:a5:c8:c2:
ff:29:87:36:bb:b1:2e:b5:43:34:7d:53:79:b1:50:8f:56:55:
e3:22:88:aa:33:2a:51:86:2c:0f:cc:ac:93:7b:cf:94:79:77:
b7:01:77:a0:35:8f:fb:78:7e:60:68:ff:a8:48:9a:38:13:dd:
56:65:7d:bc:bb:a2:20:a0:6a:24:e6:f5:b7:81:87:83:fb:9a:
e3:ca:f0:33:2e:f4:ac:d8:07:f5:f5:7c:7c:be:2a:65:3c:82:
9c:6e:57:45:d1:16:23:00:6a:74:df:99:9e:3e:f2:4a:1a:3c:
76:ef:6e:3d:55:46:b0:72:f5:ac:10:98:06:b5:af:aa:b2:d4:
e5:86:44:43:6b:5c:39:6a:56:86:9c:a7:7f:5f:b4:09:37:47:
bf:59:00:2c:27:cf:f0:85:06:86:62:b3:30:ea:ee:de:4d:90:
61:30:cc:af:5f:39:d3:52:ab:be:f0:69:62:51:c3:ed:b5:54:
30:36:f4:6a:d2:2e:32:e7:e3:60:16:cf:05:e8:03:f9:27:03:
73:74:da:42:39:e2:cb:66:e1:85:c9:70:cd:d5:a7:c4:15:d0:
6f:af:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:42 2025 by rpki-client