Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/857463E8D9FD11EFB4104EA5762E951A.roa
File: 857463E8D9FD11EFB4104EA5762E951A.roa (raw, json)
Hash identifier: wjZL9CFsYdyaW4NJVx1YbYR+3YFDE7AZTeOSEy++qVA=
Subject key identifier: 6C:54:41:38:DD:E0:D3:6B:FB:CE:29:F2:13:20:24:72:C5:FB:6A:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/857463E8D9FD11EFB4104EA5762E951A.roa
Signing time: Fri 24 Jan 2025 02:47:16 +0000
ROA not before: Fri 24 Jan 2025 02:47:12 +0000
ROA not after: Sat 01 Mar 2025 02:47:12 +0000
asID: 62240
IP address blocks: 154.223.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82800 (0x14370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:47:12 2025 GMT
Not After : Mar 1 02:47:12 2025 GMT
Subject: CN=6792ff34-7ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:a7:94:47:bc:8e:f7:86:5b:15:2f:05:7a:
f7:1e:de:a9:44:e7:8c:f7:fb:6f:81:8b:9a:27:9b:
99:94:71:44:98:18:b7:8a:c1:a0:14:86:15:81:b5:
7a:3a:44:80:53:75:1a:1d:9f:90:b7:d2:b8:cc:9e:
4a:26:cb:71:df:87:3a:ca:64:37:18:b9:18:ef:ea:
2b:68:0d:d5:ac:27:b5:75:ce:80:48:19:ab:80:18:
53:cb:fd:dc:f3:ed:7c:34:5f:97:82:fb:97:89:07:
00:6c:83:b3:6e:f6:23:55:ed:9b:a2:89:05:f6:8a:
14:47:7a:37:99:da:1a:cf:75:95:c1:d2:b4:2b:80:
95:be:0c:79:72:e5:a7:37:9e:19:f3:67:3c:68:e3:
47:36:36:9e:90:d4:8d:0d:21:d5:98:52:ca:2d:35:
5d:f6:1c:e1:3f:99:12:bf:16:0d:b2:23:32:fa:3c:
5d:f6:e4:a1:0c:de:71:05:f2:ce:12:c7:d6:12:24:
40:a0:56:58:6e:a0:f3:f7:b0:70:04:ec:0f:ad:f9:
23:79:20:d1:d1:92:e9:8e:74:fc:26:9a:a7:c5:93:
6d:25:b0:b4:5f:48:ff:39:03:bd:8b:35:c3:5c:20:
ff:e9:73:16:5e:92:7f:ad:c3:bb:d4:b7:ec:c6:66:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:41:38:DD:E0:D3:6B:FB:CE:29:F2:13:20:24:72:C5:FB:6A:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/857463E8D9FD11EFB4104EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ac:63:06:bc:0a:74:a9:d0:fa:ff:36:79:64:9f:93:fa:d2:
c2:ef:39:e8:f9:96:bf:83:de:4b:f8:32:2c:99:03:eb:fd:d8:
61:d8:3e:f6:f8:f8:b2:84:05:06:46:7a:61:da:b5:2c:2f:e9:
cc:89:e3:97:a2:b9:4e:e4:a3:88:20:76:a3:a9:a9:e8:76:ed:
b1:b1:74:df:7a:05:22:39:56:92:72:87:d3:4e:3a:c4:5c:20:
c0:c9:4e:8d:07:e8:be:74:fb:e9:88:cf:71:e4:3e:9c:1a:6b:
49:56:65:2f:f2:22:d8:24:88:cc:91:68:0c:75:c0:fe:81:1d:
bd:73:23:e7:6c:42:f7:4f:56:c9:e5:b2:b7:24:c8:f5:4a:d3:
c0:68:40:00:96:f7:17:c2:31:ae:d8:5d:f1:90:fe:6a:f0:c6:
b1:79:db:01:55:99:9a:73:03:63:b2:c8:f2:56:75:49:ec:93:
6e:31:69:ed:46:12:26:8f:44:de:9c:0a:3d:72:bf:09:a2:85:
ce:40:eb:47:64:54:a4:85:03:00:96:71:4c:b9:e0:80:cc:ec:
97:2e:ae:b7:6a:86:1a:19:92:f8:6e:b9:51:14:15:d2:4c:43:
9a:99:58:dd:9f:16:34:c2:fe:a4:1a:a8:52:6c:63:13:66:fc:
ee:0e:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:38 2025 by rpki-client