Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84938642DB2F11EF9F6AF2BB762E951A.roa
File: 84938642DB2F11EF9F6AF2BB762E951A.roa (raw, json)
Hash identifier: 1YGnqGUZoaFRziw5PSmfi5bK67oNJxVZYYBZHHgxUjg=
Subject key identifier: CD:A2:64:13:ED:0F:DC:CA:52:F0:4C:3A:1E:FB:66:8B:75:1A:C7:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84938642DB2F11EF9F6AF2BB762E951A.roa
Signing time: Sat 25 Jan 2025 15:17:41 +0000
ROA not before: Sat 25 Jan 2025 15:17:37 +0000
ROA not after: Fri 07 Mar 2025 15:17:37 +0000
asID: 138915
IP address blocks: 154.223.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84470 (0x149f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:17:37 2025 GMT
Not After : Mar 7 15:17:37 2025 GMT
Subject: CN=67950094-b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:a2:5b:c9:3c:ed:6e:97:4f:5c:18:aa:c6:
5f:ac:5b:b8:e3:f3:79:3b:c5:4d:89:48:86:e7:e8:
59:af:b5:40:6b:7f:ad:8c:8f:40:e5:04:6c:3b:b6:
82:ee:1b:0e:5d:80:de:6f:f0:f7:6e:29:78:00:3c:
fc:4a:e4:42:ad:96:94:73:6e:5f:c2:f8:0c:a2:fa:
75:26:d6:d2:d1:e9:05:fa:e9:f2:92:2f:2d:89:28:
01:27:9a:69:22:f7:47:6c:25:05:7e:7b:f4:1c:da:
85:5a:07:3b:96:be:d0:ed:63:cc:0e:86:e1:df:3a:
29:7b:bf:eb:9c:02:3c:96:fb:09:f2:91:c6:8c:60:
0e:de:1a:45:3e:4a:a2:cb:ce:a4:21:86:8c:32:af:
8d:1e:9b:c5:80:d0:53:c1:89:b3:a5:c5:80:60:01:
be:f8:8a:f7:cf:bb:33:f1:45:e3:f4:36:2b:ea:58:
73:29:52:1d:6b:1f:bd:2e:4c:e3:aa:5e:80:9a:ec:
50:ab:6e:25:77:cc:60:e9:87:64:f4:5e:f6:19:13:
61:20:d6:1a:10:05:8e:6d:df:90:0d:a1:0f:eb:0c:
19:5e:d2:d8:14:1b:c1:55:5c:01:28:93:0b:a6:c8:
af:af:ab:07:43:f4:f0:a8:11:cd:d7:a0:23:ea:46:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:64:13:ED:0F:DC:CA:52:F0:4C:3A:1E:FB:66:8B:75:1A:C7:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84938642DB2F11EF9F6AF2BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.66.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:35:2e:47:15:38:e6:6d:cb:ee:89:c3:06:98:d6:a3:23:d6:
48:ca:23:1c:f8:4e:e7:aa:d6:82:44:4b:91:f8:18:04:5c:9a:
b9:8d:9a:2c:aa:9a:1c:f9:48:51:a0:65:8e:57:84:3f:11:5a:
ec:e6:ef:8e:ba:aa:d9:24:8d:29:e9:dd:5c:0c:1a:5b:52:f1:
21:21:3c:2d:a8:50:5b:50:40:46:d6:8a:4b:70:6a:4d:f9:27:
ae:b7:df:07:df:34:88:3a:a9:b4:43:cd:1a:15:ff:72:d7:45:
0e:47:a1:ed:19:c6:73:9f:4e:19:d4:08:aa:ce:f0:4a:a0:da:
0d:a2:52:51:1a:e0:98:06:88:b7:1c:ee:fc:d7:53:86:83:83:
b0:ba:2d:dc:e6:6b:dc:fd:ac:b2:ed:cc:d4:9d:5d:19:26:be:
5a:95:07:7e:b9:34:ce:9b:69:9d:5d:f6:4d:e8:69:62:4a:5a:
98:f7:ff:88:b5:18:78:0d:a8:d9:57:22:3c:ab:e0:b3:cf:d2:
a7:2e:71:76:cf:08:b7:91:62:26:1e:0a:92:f6:17:30:71:17:
e8:6e:ad:31:b2:e2:73:64:97:04:73:61:08:de:e8:ed:a7:cd:
65:91:db:93:56:44:35:6c:8d:68:a3:1d:40:45:f4:b9:20:30:
cc:31:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:41 2025 by rpki-client