Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D7E4CCD9D611EFAACE7A93762E951A.roa
File: 93D7E4CCD9D611EFAACE7A93762E951A.roa (raw, json)
Hash identifier: hMgzcYdYX9rXb3eGeG+fNp3qv+N3NWiNynq6CzbOKpI=
Subject key identifier: D8:C1:DA:EF:30:35:C8:DF:DB:4F:8A:0C:40:0A:73:0C:76:9E:CD:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014339
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D7E4CCD9D611EFAACE7A93762E951A.roa
Signing time: Thu 23 Jan 2025 22:08:30 +0000
ROA not before: Fri 24 Jan 2025 22:08:26 +0000
ROA not after: Sat 01 Mar 2025 22:08:26 +0000
asID: 44559
IP address blocks: 154.205.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82745 (0x14339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:08:26 2025 GMT
Not After : Mar 1 22:08:26 2025 GMT
Subject: CN=6792bdde-5158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:ca:c3:cd:fd:10:61:a4:d4:cb:9d:a4:91:
39:88:f7:52:a6:94:63:06:7b:75:2c:75:d7:9b:a5:
a7:fa:07:34:37:81:18:c3:97:b0:28:f6:74:f7:39:
58:b2:88:d3:ed:f9:f6:0a:63:22:e9:c9:ba:0b:f1:
8d:33:d0:74:5c:ba:7e:de:96:80:3c:06:a8:22:22:
be:74:14:f9:19:da:5e:74:3a:38:65:95:5f:17:42:
c9:6e:71:7c:dc:6b:c4:ff:e7:4f:45:2f:bf:67:a3:
03:44:f1:f4:32:7e:b3:0c:35:35:6a:95:2a:75:0b:
ac:7f:3e:11:36:6f:f4:84:92:0c:9b:b5:18:56:d9:
65:a2:98:5d:80:c4:90:23:17:d4:3d:9d:91:10:72:
82:b6:85:57:1e:53:26:14:c2:b3:24:12:67:0c:c1:
69:f5:52:4c:47:3e:48:6c:3b:7a:1a:c6:75:74:3f:
40:92:6f:e7:0c:25:8a:b7:0c:9f:1c:6a:84:39:b2:
3c:41:3f:8c:0d:56:ec:2f:24:fc:f9:30:a8:71:f5:
6a:49:7e:55:4a:7b:8f:21:b0:0e:d1:01:c6:c4:b2:
96:fe:ce:96:50:58:f5:60:d6:f9:d5:7a:77:b0:36:
c9:7d:55:65:40:5c:75:8b:f8:f8:2b:d7:5e:80:e4:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:DA:EF:30:35:C8:DF:DB:4F:8A:0C:40:0A:73:0C:76:9E:CD:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D7E4CCD9D611EFAACE7A93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4a:82:8f:2a:86:f2:ec:93:95:87:53:18:5d:9f:46:f3:14:
e4:06:5d:d2:da:e4:11:92:bd:2c:b2:d2:80:6d:70:51:50:10:
a1:2f:68:ef:e5:ba:75:f7:aa:df:44:5f:37:fc:f5:38:41:fa:
9f:31:22:ba:a2:61:04:21:af:1b:ba:5a:5b:19:52:a6:61:1c:
8c:98:23:58:cd:90:de:bb:85:e4:4c:04:0d:8c:6b:64:27:e6:
a7:0c:ac:d8:9e:fd:12:e5:90:f3:19:47:49:a0:16:df:39:81:
7a:97:8e:75:91:e4:8c:5d:06:76:e3:32:7e:31:94:bf:f7:4d:
36:3b:e2:c1:40:de:bc:ba:4a:c7:37:30:69:8b:88:a4:e1:89:
38:60:04:01:50:60:50:af:c2:9b:5d:fc:16:00:2d:d4:8e:f0:
7f:4a:47:f1:d0:9b:f6:45:72:6d:45:4b:19:75:aa:4f:19:99:
84:5e:d4:37:9b:aa:6b:70:7c:6b:b7:56:b7:5a:46:8e:89:09:
6e:1f:7d:fc:0a:53:f9:4c:73:64:3c:ea:69:63:55:38:23:70:
af:55:04:99:6b:01:8e:cb:90:11:09:11:90:11:f9:c6:4f:de:
e7:11:50:63:d0:48:16:ff:ba:51:cd:64:86:2e:0d:16:c7:7b:
3b:e5:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:44 2025 by rpki-client