Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8915D0B2DB3911EF818EC97E762E951A.roa
File: 8915D0B2DB3911EF818EC97E762E951A.roa (raw, json)
Hash identifier: R4WLqcBxla3T7lxpIbpolzrMHxRm74o3YOmMl5NG9Do=
Subject key identifier: 5C:38:82:CE:8A:4B:B8:07:FA:E3:CD:AD:AF:0B:AF:FB:FA:B2:38:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8915D0B2DB3911EF818EC97E762E951A.roa
Signing time: Sat 25 Jan 2025 16:29:23 +0000
ROA not before: Sat 25 Jan 2025 16:29:19 +0000
ROA not after: Fri 07 Mar 2025 16:29:19 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84532 (0x14a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:29:19 2025 GMT
Not After : Mar 7 16:29:19 2025 GMT
Subject: CN=67951163-4bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:2e:a5:27:c1:a8:b5:40:e2:0a:c5:22:7a:
f6:39:4e:1a:e1:46:80:92:12:76:24:0e:2e:ab:ba:
46:10:4e:e4:17:44:fd:5c:15:a9:9d:37:3f:e5:44:
30:2b:c3:3b:65:9a:5a:53:3d:f6:de:07:51:41:b1:
17:99:4f:ab:55:3c:eb:5c:b4:69:d5:48:67:2c:bc:
d5:12:cd:f2:de:08:51:45:ee:b8:e8:bb:d3:12:fc:
81:9a:c0:87:ae:1b:d5:0a:cb:f7:29:08:a7:b3:74:
b4:81:c4:e7:38:06:29:3d:f7:9a:72:27:08:08:3f:
f9:f6:e7:9c:81:b0:cb:4a:6c:46:51:55:39:87:05:
68:18:53:d5:03:ff:47:0f:51:67:25:05:a1:3e:8a:
47:a9:10:40:9b:c3:7a:2e:b5:35:b9:fa:e7:c0:9c:
4e:d2:ad:9d:80:31:3c:91:dc:c8:68:d5:c1:b0:18:
00:dd:64:8e:e2:3b:c2:1f:0c:e4:64:c0:57:d6:72:
9f:82:e5:e5:e4:5b:ec:2e:c4:d8:93:1b:3d:fd:70:
df:01:72:a6:83:f2:63:3e:be:ae:53:bc:b0:78:a3:
5d:9d:21:3f:79:22:7d:ef:58:66:38:a7:c2:c7:e4:
d2:ff:23:2c:22:1e:bc:27:ec:e4:db:e6:36:c0:41:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:82:CE:8A:4B:B8:07:FA:E3:CD:AD:AF:0B:AF:FB:FA:B2:38:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8915D0B2DB3911EF818EC97E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:12:d2:48:9d:52:08:dc:79:e8:1b:45:78:df:84:25:fb:d1:
96:0e:96:cb:91:bd:64:13:a5:2d:80:3d:89:51:1c:1c:2c:05:
d2:50:76:fb:1f:72:55:f1:87:74:ed:01:97:d8:19:f1:41:5e:
04:52:f5:d9:13:74:c1:dc:69:89:bb:b1:56:89:6b:79:0e:23:
33:f4:f7:50:49:be:f6:57:a9:c4:4f:f0:ff:6b:1a:ce:22:3d:
03:6d:6d:be:c1:f2:a2:e2:be:9d:99:b4:d3:09:d0:f4:2e:ce:
ca:29:c6:24:68:30:eb:00:e0:52:52:b7:3c:10:73:42:67:ae:
d1:88:0b:55:3e:87:93:b1:87:0e:b4:d3:b0:d7:d4:2d:c1:a6:
b6:8e:f1:ae:1f:24:27:9b:9b:18:be:1a:e4:cd:80:83:52:16:
a8:38:34:27:29:4a:48:9c:b5:e0:f6:29:8a:60:94:07:4c:b7:
fd:9e:83:62:74:9d:1a:a3:03:ab:00:92:26:72:c5:aa:ab:0f:
3f:6a:2e:a4:e3:ab:a3:95:37:0f:11:9c:50:dd:0c:db:de:e8:
fa:6d:ed:49:55:0d:37:78:ef:44:01:9b:50:19:f6:44:aa:2e:
f6:30:80:bb:88:0f:b3:83:b9:95:b0:dc:bd:88:cd:00:9a:f3:
37:0d:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:15 2025 by rpki-client