Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93224EE8D9D911EFA1349EA5762E951A.roa
File: 93224EE8D9D911EFA1349EA5762E951A.roa (raw, json)
Hash identifier: qBtAi/sa9SQRXp+wJOAr/tLJmHWH8V0eC3wWaBuOEiE=
Subject key identifier: C9:DD:8F:A7:39:C7:56:9A:A5:3C:9D:4F:C8:AD:05:18:55:B9:A9:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01434F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93224EE8D9D911EFA1349EA5762E951A.roa
Signing time: Thu 23 Jan 2025 22:29:57 +0000
ROA not before: Fri 24 Jan 2025 22:29:53 +0000
ROA not after: Sat 01 Mar 2025 22:29:53 +0000
asID: 44559
IP address blocks: 154.205.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82767 (0x1434f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:29:53 2025 GMT
Not After : Mar 1 22:29:53 2025 GMT
Subject: CN=6792c2e5-7bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:ee:55:2e:3f:c9:4a:72:80:a0:7a:39:97:
2c:58:1d:a8:72:59:28:42:ad:f7:6c:8b:a2:a5:7e:
31:2f:ff:e2:e4:0d:11:8b:b7:53:a7:cf:f3:9a:17:
a9:40:af:7d:38:1e:c3:89:c9:af:cd:9d:24:b0:ae:
c8:9d:52:be:09:22:b0:e6:12:33:72:0c:80:44:85:
e7:c9:cb:f3:4d:94:e3:e0:6f:92:d7:ff:a6:81:0e:
06:8d:bd:0e:05:36:04:65:1b:13:f9:c9:99:50:c1:
54:ad:7e:44:0c:65:99:66:24:2f:20:f4:17:4e:e1:
85:16:8f:a0:49:8e:53:30:22:ec:ee:b8:b5:e5:4d:
36:95:03:d8:12:6c:e0:18:82:19:ff:26:33:82:73:
6f:e7:cb:30:2b:4f:b6:f5:51:bb:9d:f4:04:dc:46:
25:32:4a:d5:f4:1a:5c:29:fe:25:3f:3c:41:06:b7:
3f:c6:8c:0b:03:5b:cc:2e:21:92:2c:79:8a:4b:0b:
b5:2b:eb:4a:93:17:ea:6f:b0:24:68:22:7f:69:60:
ea:39:fb:e0:48:4b:2b:09:c9:b2:98:4b:29:5e:a5:
be:66:41:2d:1d:68:88:b4:e9:d7:07:7e:72:0f:66:
93:d6:eb:78:06:20:17:3b:e8:7a:8e:33:f9:f3:75:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:8F:A7:39:C7:56:9A:A5:3C:9D:4F:C8:AD:05:18:55:B9:A9:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93224EE8D9D911EFA1349EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:38:36:9d:80:df:fe:6a:75:00:46:e0:d2:4a:c6:ed:da:c4:
8c:a2:96:02:4b:0c:b3:88:42:52:27:5c:9a:3e:2a:8f:ef:ab:
80:90:85:7e:1b:2a:56:43:01:ec:24:90:60:28:2f:f1:7f:18:
68:09:3a:56:20:27:fa:a5:19:a1:07:aa:a1:0e:c7:a9:a3:0a:
ad:66:51:ba:83:77:0b:15:62:26:d2:b8:43:0a:24:bf:36:46:
72:ba:b9:a9:f7:e9:1a:02:7d:38:f4:17:03:c9:00:1a:6e:0b:
13:95:ee:3c:66:08:80:c6:df:73:d1:e3:d5:2d:7a:17:9e:5e:
36:97:9f:93:d0:8c:e5:bf:78:2a:0e:17:5f:8b:d2:ae:1d:6e:
53:f2:5c:55:85:50:3b:be:88:b1:9e:e0:f1:fb:d6:50:ad:59:
89:e7:f5:eb:94:ea:49:09:d8:de:b7:10:ff:4f:43:4b:72:85:
89:a1:f4:c6:a8:4e:73:f0:0f:6f:41:14:3b:ea:1e:31:36:6a:
ae:a9:c2:d4:30:0a:cb:0e:56:8b:8d:39:e6:d9:e9:8e:c3:7b:
4b:5d:de:0d:6a:77:ac:7d:d1:26:65:94:67:75:0f:2b:2e:c9:
4c:c6:d7:17:39:90:43:f0:72:12:20:e1:63:d9:93:5c:42:a3:
79:4b:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:43 2025 by rpki-client