Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3DA4A2DA2B11EFB27E795C762E951A.roa
File: 7F3DA4A2DA2B11EFB27E795C762E951A.roa (raw, json)
Hash identifier: 7Xd3CC5Z7RJ9vCXk2+6b+ikX2hWNlEn7msEDVKFOWKQ=
Subject key identifier: 37:5E:68:20:2E:5A:B2:8A:2D:2C:5A:0A:21:76:F6:14:F1:1A:5E:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014456
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3DA4A2DA2B11EFB27E795C762E951A.roa
Signing time: Fri 24 Jan 2025 08:16:22 +0000
ROA not before: Fri 24 Jan 2025 08:16:19 +0000
ROA not after: Wed 05 Mar 2025 08:16:19 +0000
asID: 202656
IP address blocks: 154.222.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83030 (0x14456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:16:19 2025 GMT
Not After : Mar 5 08:16:19 2025 GMT
Subject: CN=67934c56-8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:ab:4a:b7:39:c0:d2:c9:6e:85:d8:ca:67:
1a:12:c3:61:06:25:fc:7b:2e:8b:0b:5f:16:1b:af:
27:31:41:4e:5a:e4:29:a9:b7:44:09:53:8d:ee:e7:
f7:34:33:c4:11:1f:f7:83:af:06:c3:19:ba:22:2f:
ff:33:73:71:bb:38:33:99:be:9e:88:9d:56:39:d5:
a4:d4:cc:f9:32:a8:c4:f8:98:9e:83:10:fa:2d:08:
51:3b:c3:1a:1e:97:22:02:0a:d1:d7:7e:ae:d2:53:
eb:3e:d5:33:4a:c6:da:5b:c1:58:09:ea:e5:2f:7c:
b7:58:10:91:eb:c3:f7:63:2a:2b:7b:d4:31:49:d5:
f2:23:ec:54:5e:36:8e:64:b2:1c:f2:a6:ae:44:a7:
48:d3:40:59:89:14:28:3e:b5:90:89:20:65:fd:de:
2c:38:0e:7f:9c:b5:20:52:db:aa:04:b8:21:99:04:
c0:10:47:37:29:15:bf:29:ed:f2:c1:9b:33:18:13:
2e:4b:ae:76:d3:c8:d1:ef:34:6c:e0:38:ba:ae:3c:
d2:1e:43:f7:c5:91:4e:a6:4e:bc:e5:a6:8a:25:39:
84:ec:e1:b1:3b:ca:36:42:df:ee:21:38:4d:de:b5:
83:18:25:c8:94:c0:25:62:1e:53:1c:af:df:8d:57:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5E:68:20:2E:5A:B2:8A:2D:2C:5A:0A:21:76:F6:14:F1:1A:5E:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F3DA4A2DA2B11EFB27E795C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c3:55:2a:82:88:29:0d:92:88:d5:ef:31:e3:8f:a3:bb:46:
d2:95:11:5d:28:1f:72:43:fb:ae:75:d8:69:02:90:fd:14:d5:
29:c9:1b:59:cb:8f:f1:38:16:24:e6:42:96:96:7b:88:69:e9:
74:9f:e1:16:d2:a7:3d:8a:d4:38:7f:43:3f:52:83:3b:42:a4:
96:74:d9:bb:d1:d6:04:a4:af:77:68:7a:af:51:49:f1:a0:14:
6e:f9:0a:9c:3b:94:c8:3c:90:54:7f:2c:ea:a6:d2:85:b6:e8:
98:68:6c:39:f9:d7:27:3b:57:46:b1:24:58:fb:be:55:0a:d8:
56:4f:21:7f:1f:a9:65:d1:8a:37:10:b9:29:8e:fe:91:0d:58:
06:17:d6:10:07:66:65:fa:b4:2f:85:1e:bb:c1:87:68:fb:90:
d2:38:29:0e:e1:21:de:aa:35:ff:7d:5e:22:0d:8e:f6:9d:05:
e3:51:26:6e:f6:32:71:86:cd:87:20:53:ad:fb:8e:7d:13:9c:
2b:f6:8a:a8:33:3c:2a:16:e9:48:7b:79:25:28:4b:73:44:23:
26:d4:ca:60:40:70:2f:c6:f7:be:16:07:80:26:9a:9b:49:80:
05:fe:61:e6:f4:e8:2a:aa:c0:80:d6:e1:47:e5:8b:64:a9:ab:
7d:fb:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:27:16 2025 by rpki-client