Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6B5D24DA5B11EFA77A4DA1762E951A.roa
File: 8C6B5D24DA5B11EFA77A4DA1762E951A.roa (raw, json)
Hash identifier: yGN/baScAzCPyYtcml1w7eyqlbVN+k1jWEQ72QPK2G0=
Subject key identifier: B4:E2:81:E3:00:AF:96:68:3F:A9:99:2F:4B:F3:A8:5B:78:ED:9E:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6B5D24DA5B11EFA77A4DA1762E951A.roa
Signing time: Fri 24 Jan 2025 14:00:21 +0000
ROA not before: Fri 24 Jan 2025 14:00:17 +0000
ROA not after: Wed 05 Mar 2025 14:00:17 +0000
asID: 48031
IP address blocks: 154.222.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83925 (0x147d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:00:17 2025 GMT
Not After : Mar 5 14:00:17 2025 GMT
Subject: CN=67939cf4-78fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:f7:4e:c1:d3:8a:1f:7e:12:4f:54:7d:68:
4a:0f:9b:7b:67:14:02:98:38:2a:8c:37:2b:f9:5a:
74:c0:26:5c:1a:6a:e4:0c:1b:c3:6b:ed:71:21:82:
b0:70:5c:c9:1c:1e:e2:30:83:70:a7:92:e9:c7:42:
a8:d1:27:ff:bd:f5:96:83:6a:f4:29:b2:20:9c:b8:
f4:99:89:0d:78:d0:0d:6b:1b:17:e1:19:64:1b:d3:
9e:d8:0a:59:34:05:a4:d4:fe:22:72:5d:d9:a7:a0:
92:86:54:39:3f:47:2d:f2:99:71:07:1f:da:9a:ef:
11:41:23:94:01:11:ef:bb:c2:eb:0d:d2:c2:0b:0d:
9e:8b:be:6f:db:57:cb:60:53:ee:e3:9c:0f:c5:28:
9e:4e:3a:b1:a5:57:e6:f8:a1:ab:4d:ef:66:95:11:
a6:72:45:53:c8:4c:6d:ee:da:0f:23:31:68:59:71:
0d:86:1b:92:01:ab:c4:22:d1:57:f0:9d:5b:49:ab:
ca:26:c1:aa:3e:3b:97:df:e7:5c:fb:5d:81:91:a2:
ed:08:10:39:92:d6:a7:ef:1c:e7:e2:91:7f:3b:c8:
df:ed:dc:dd:38:e4:bf:0f:ad:fd:5a:e8:06:d5:c7:
e1:3c:cc:b1:af:f0:8b:e3:fa:25:da:e5:af:7f:43:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:81:E3:00:AF:96:68:3F:A9:99:2F:4B:F3:A8:5B:78:ED:9E:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C6B5D24DA5B11EFA77A4DA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.213.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:21:01:32:cd:e4:9f:67:70:b5:7e:58:37:64:40:f2:95:
d8:a5:7e:14:ab:33:ee:30:fd:15:37:c4:55:52:45:d8:29:d8:
de:6d:a0:46:6c:ab:1e:21:f0:f9:40:91:94:dc:b7:d2:9c:28:
6c:c5:d0:6c:22:c8:3e:da:97:8e:f1:2b:c9:51:ae:ed:ff:fb:
b1:10:e8:cd:32:5b:8b:9d:16:af:51:73:6b:35:19:77:6d:80:
43:e3:ea:c2:27:08:71:58:12:75:e6:94:9b:1d:aa:a6:27:0c:
81:fe:ba:2f:69:7c:ed:78:86:a5:1b:9e:d4:17:b7:04:14:73:
39:12:d3:c7:40:39:5f:de:5b:27:0a:de:9a:b0:99:79:e3:a6:
47:39:69:c8:50:49:2c:98:a2:8f:b4:68:13:0b:e7:e4:fa:ae:
2a:9f:3e:51:c8:16:d1:c8:a2:dc:4a:44:6c:51:8f:6e:af:05:
66:81:85:55:2e:63:be:64:a6:ce:e8:61:b8:ab:96:f1:d7:73:
5f:6f:b4:e0:cc:54:00:cb:32:e5:1e:d1:38:cd:bf:3c:a0:e0:
56:b4:15:ca:17:27:3c:1e:83:e5:66:2b:05:6d:ce:ae:5a:69:
70:e2:9a:30:81:d2:a7:58:39:51:50:92:24:1e:d4:4b:bb:9e:
05:c2:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:23:55 2025 by rpki-client