Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96157332DB3711EFA0989F71762E951A.roa
File: 96157332DB3711EFA0989F71762E951A.roa (raw, json)
Hash identifier: 4WQSaODXQy9mihfvJYX5p1jFkq3IYr8BS1DTJvnnOAc=
Subject key identifier: 44:57:C3:7C:8D:1C:4C:AD:24:59:75:62:A5:31:DC:7D:23:C5:9D:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96157332DB3711EFA0989F71762E951A.roa
Signing time: Sat 25 Jan 2025 16:15:26 +0000
ROA not before: Sat 25 Jan 2025 16:15:22 +0000
ROA not after: Fri 07 Mar 2025 16:15:22 +0000
asID: 138915
IP address blocks: 154.223.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84520 (0x14a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:15:22 2025 GMT
Not After : Mar 7 16:15:22 2025 GMT
Subject: CN=67950e1e-6ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:19:ec:61:92:f6:aa:94:d5:f3:c7:d7:3f:
b5:c8:79:88:6e:a4:0f:30:30:72:da:38:c9:63:18:
64:f2:e8:2f:90:1f:ad:09:00:33:a7:86:12:5a:4f:
d0:0d:c5:97:dc:92:f0:2c:5b:c0:ef:55:9d:bf:10:
05:3b:ab:ac:37:15:05:f1:08:80:2b:95:63:9e:0d:
ac:22:1f:97:74:38:f3:bd:ea:e4:fe:71:0b:25:30:
01:58:d8:e9:f8:e6:18:7e:26:73:02:44:fe:4e:3c:
cf:0b:36:82:f3:0b:b8:1e:3a:d0:d0:da:fd:51:ef:
29:fa:c8:d0:4b:c8:87:4f:b0:73:25:7f:33:c9:98:
83:e8:66:02:4c:51:72:77:cf:88:81:52:96:6d:95:
7f:e6:55:76:f3:29:ca:f7:40:8d:f2:a7:f8:e7:b5:
1f:f0:72:34:ac:b9:f8:bd:1f:c3:36:f4:40:9b:0c:
35:07:c9:78:ab:5a:4c:12:50:a7:5d:ae:fa:73:79:
2f:d6:11:52:8c:48:e3:63:12:c8:bf:5c:35:05:a6:
48:29:17:91:30:85:5b:b3:3c:b1:ac:9a:c5:ee:28:
bc:66:24:72:80:fe:8a:b3:66:3c:9b:8c:2a:8c:57:
48:7e:2c:85:48:58:31:ba:46:63:26:f9:ae:3b:d9:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:57:C3:7C:8D:1C:4C:AD:24:59:75:62:A5:31:DC:7D:23:C5:9D:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96157332DB3711EFA0989F71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.72.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:cd:08:79:06:fb:d9:94:00:ce:57:b5:1a:43:60:e5:58:05:
03:21:63:3d:f5:dd:31:c2:de:32:8f:d0:6d:6b:dd:a7:1e:30:
ed:8e:95:ea:0d:7a:7e:2c:70:9a:a6:99:90:e8:cc:0a:54:83:
57:a7:a2:5c:07:d7:87:0e:2b:01:e2:21:be:8b:d5:d5:2e:4f:
56:0f:3a:ab:8f:0d:53:9a:c3:4c:aa:12:f9:7d:e8:f2:ee:db:
2d:a7:d9:1e:8f:f8:95:aa:38:5d:91:67:d2:c4:9d:68:d1:88:
ec:8f:0c:3e:8e:ac:6b:f0:75:2f:b6:f9:0f:7a:9b:55:fe:e6:
88:88:de:8a:51:a3:06:61:d0:5f:e8:e4:6e:81:98:77:f1:3e:
20:24:60:65:7a:53:1a:f0:32:f7:b9:1e:28:ca:b6:18:63:2c:
e8:90:cb:c0:89:4d:50:b1:70:8d:c0:5c:83:32:4a:eb:20:dd:
e5:65:09:3b:ff:f0:17:88:b9:c5:0c:5a:5b:ab:ed:2a:e8:ef:
0f:0d:8f:57:5c:1b:fa:59:89:3e:6a:f9:38:2a:8d:74:69:6c:
0e:3c:5e:62:e9:74:00:dc:03:f0:f2:9a:73:81:f2:bc:71:bc:
50:65:c8:6f:7a:e5:f5:08:eb:ed:17:d0:94:04:57:85:56:84:
10:b1:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:02 2025 by rpki-client