Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81753CF4DA5C11EF83E5A6A9762E951A.roa
File: 81753CF4DA5C11EF83E5A6A9762E951A.roa (raw, json)
Hash identifier: dlsBWbUjAQz4t6QkG5MD2cm3b9vVzjBUVmChUS8u4Pw=
Subject key identifier: A6:5D:47:2B:0C:F6:A1:F6:3B:48:9E:06:DC:91:F4:DD:E4:EC:0D:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81753CF4DA5C11EF83E5A6A9762E951A.roa
Signing time: Fri 24 Jan 2025 14:07:12 +0000
ROA not before: Fri 24 Jan 2025 14:07:08 +0000
ROA not after: Wed 05 Mar 2025 14:07:08 +0000
asID: 48031
IP address blocks: 154.222.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83944 (0x147e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:07:08 2025 GMT
Not After : Mar 5 14:07:08 2025 GMT
Subject: CN=67939e8f-c78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:7f:7b:b0:68:73:d5:13:ae:5e:29:cd:b8:
2e:78:b4:9b:35:8c:9a:a0:3b:56:1c:7d:35:87:71:
85:09:f7:7d:d1:a3:9b:a2:e7:92:24:bd:e5:ea:00:
32:7c:a4:77:13:91:dd:21:8c:85:72:45:7e:f3:bb:
99:8d:8c:6f:c4:74:34:41:b3:08:1a:34:dd:01:94:
9d:c4:f7:02:8c:0a:aa:41:f5:1f:d5:3c:95:57:26:
fb:2d:8c:14:90:07:5e:22:74:3a:0a:0c:8a:f5:53:
8b:47:36:a4:b8:72:01:31:bf:1a:5b:89:0d:f6:43:
67:79:46:d1:86:0f:c7:77:d9:95:8e:c0:b4:13:88:
e5:73:99:bb:80:de:02:09:cc:f6:6d:23:77:68:b2:
8d:65:18:65:c6:b3:34:0a:78:83:43:8b:dd:7f:9f:
f1:0a:f5:27:fe:0d:37:d9:7e:bf:5e:0d:c4:f2:a6:
4b:7e:37:d2:6f:3a:8e:c1:76:67:97:8f:29:5b:ea:
45:9a:ff:3a:bc:c8:81:0f:6b:23:fb:ec:29:51:da:
fe:2a:83:b8:c9:11:da:d3:da:e5:15:5a:16:1b:c4:
9a:65:11:c0:8a:a6:81:3b:af:fe:6e:76:d7:1f:5d:
5e:92:57:a7:ee:af:f4:92:79:6c:fa:0d:3b:f4:64:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:47:2B:0C:F6:A1:F6:3B:48:9E:06:DC:91:F4:DD:E4:EC:0D:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81753CF4DA5C11EF83E5A6A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:22:a6:52:89:55:1a:66:48:dc:e1:e3:f3:25:69:a5:31:31:
3c:0f:eb:68:65:29:8e:f5:e1:c3:08:a6:bd:c1:1c:35:ce:ab:
03:20:30:7b:5e:23:66:b7:88:29:36:9d:46:07:4a:af:6f:04:
c1:46:59:86:c4:3a:c6:dd:98:7f:3c:04:76:c1:1a:79:fc:80:
08:03:a9:fe:86:7f:60:a1:43:9e:40:d5:ce:fd:88:19:21:bc:
76:64:36:bf:e4:ec:30:4f:40:e3:26:f8:b5:ad:f2:82:29:1c:
78:0b:86:ab:98:fd:90:89:80:0c:e3:80:b8:26:2f:d5:99:cd:
97:e2:58:dc:ff:52:29:93:f6:69:b9:01:44:d9:36:38:33:78:
c9:12:2b:2b:9b:f0:8c:21:fd:3b:a9:92:3f:29:b1:dd:39:80:
60:a8:72:b5:cf:5f:1f:9b:ba:3d:8f:7f:47:8f:a3:d7:a9:f2:
c1:5c:58:81:03:1b:73:1e:38:b5:71:95:f2:58:27:e5:ff:0d:
32:2b:84:43:8d:f8:04:24:5b:c1:c9:8b:f6:ef:e9:19:31:c2:
78:d1:7b:83:22:db:77:c0:df:e4:79:1d:bf:77:76:2b:45:bb:
14:71:eb:01:a1:d2:f7:13:ea:4d:c6:81:cf:4a:1e:1d:27:af:
b1:0d:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:35 2025 by rpki-client