Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8794632CDA2E11EF82C71772762E951A.roa
File: 8794632CDA2E11EF82C71772762E951A.roa (raw, json)
Hash identifier: 7mkFBitj0NR2jToAN4/RnGais5tfFdnzhI869Rp+hr4=
Subject key identifier: F2:07:C2:12:AF:E0:94:68:4F:18:9A:74:23:0F:D8:4C:74:91:E3:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014479
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8794632CDA2E11EF82C71772762E951A.roa
Signing time: Fri 24 Jan 2025 08:38:05 +0000
ROA not before: Fri 24 Jan 2025 08:38:01 +0000
ROA not after: Wed 05 Mar 2025 08:38:01 +0000
asID: 202656
IP address blocks: 154.221.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83065 (0x14479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:38:01 2025 GMT
Not After : Mar 5 08:38:01 2025 GMT
Subject: CN=6793516d-54bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:ae:58:74:f6:86:21:d1:82:f1:66:f1:b7:
0e:17:87:50:eb:d1:19:b4:8a:ac:59:c8:98:a7:4f:
ad:77:58:4b:99:86:fe:25:0c:1b:0b:30:03:f2:95:
38:64:00:d3:96:58:6a:eb:0f:23:53:16:2f:6f:ec:
28:8b:0d:f9:8c:65:e3:6d:fe:10:eb:b0:8f:7a:cc:
04:8d:3e:bf:20:bc:6c:a5:c0:02:a9:12:51:77:35:
d9:c5:ca:66:8a:bf:3b:00:90:ee:56:75:b7:cf:a5:
33:19:00:31:65:62:0a:b3:db:a5:e9:42:18:a1:fc:
72:44:8a:7e:ea:83:35:9c:d8:76:f0:ab:bb:0a:09:
b6:39:08:a6:b9:20:a5:01:2d:a0:72:bb:e1:5e:75:
42:20:60:ff:64:f3:4b:b1:a9:6b:d3:14:c3:77:e3:
df:ba:5d:64:9c:4e:d1:49:39:98:c4:ea:4a:31:06:
e7:20:74:b8:3a:b2:ac:f8:bd:55:08:c3:b9:1c:19:
97:34:3a:2a:5a:c4:3a:d9:59:6e:5a:1c:03:9b:6b:
8a:55:6a:39:ef:d1:f9:ab:e2:77:ce:25:42:6d:bf:
f0:b0:52:83:e7:ba:11:7d:58:a5:dd:90:81:a5:a4:
d9:1f:74:3d:cd:3a:e6:df:27:5e:6b:9c:66:7c:1d:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:C2:12:AF:E0:94:68:4F:18:9A:74:23:0F:D8:4C:74:91:E3:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8794632CDA2E11EF82C71772762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:6c:58:84:00:dd:53:97:c8:47:5b:98:ef:c9:f3:08:75:9d:
40:ae:a4:b3:0e:62:73:83:9e:ca:fb:43:97:07:c0:78:71:e9:
ed:d5:37:4a:d1:7d:c5:e3:f6:df:37:10:72:50:c7:e6:b7:11:
e3:ec:31:7d:d7:9c:9c:47:ab:7b:df:bc:69:72:bc:d1:97:22:
15:ba:7a:7e:4c:62:2b:46:d0:48:fc:91:58:a6:03:9b:95:21:
cb:82:d8:c8:9e:fe:d9:7e:da:aa:9a:2c:93:5d:bd:41:9f:c6:
70:75:21:11:bf:d2:cd:6e:f9:55:0b:f3:fc:29:8d:a7:54:1b:
b5:a4:6b:ca:b2:7e:97:e4:8d:36:89:de:7e:61:a6:af:ae:fc:
7c:f6:8a:38:92:d0:a5:f3:c4:e2:e5:8f:85:ca:3b:95:11:53:
de:0b:c4:3e:e4:49:b0:38:d8:6c:59:7c:d3:ae:b8:e2:7a:5e:
ef:a7:2d:4c:84:e6:fc:e3:45:69:bb:0d:56:d7:ea:57:58:5e:
dc:ef:62:ec:fd:b3:e5:90:13:96:aa:1c:aa:30:64:22:69:b2:
da:eb:cb:bf:fc:3e:23:de:3f:7a:a2:bc:85:1a:4f:c7:af:b4:
96:97:b0:ae:01:32:c6:09:00:d9:65:27:21:6d:23:f4:b3:b1:
2e:5b:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:21 2025 by rpki-client