Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987608BEDA2C11EF9F586563762E951A.roa
File: 987608BEDA2C11EF9F586563762E951A.roa (raw, json)
Hash identifier: TWpop1T5KX74aspQas3vgldtlnhia7x7+MEEnIjV1+s=
Subject key identifier: 04:FA:83:8A:E0:1F:AE:2A:77:B7:EB:F0:F0:53:54:C7:CF:00:0A:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014466
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987608BEDA2C11EF9F586563762E951A.roa
Signing time: Fri 24 Jan 2025 08:24:14 +0000
ROA not before: Fri 24 Jan 2025 08:24:11 +0000
ROA not after: Wed 05 Mar 2025 08:24:11 +0000
asID: 202656
IP address blocks: 154.221.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83046 (0x14466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:24:11 2025 GMT
Not After : Mar 5 08:24:11 2025 GMT
Subject: CN=67934e2e-bfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:52:cb:c1:e5:57:bc:80:75:f0:0f:5d:5c:
21:f3:97:9b:9f:1e:04:19:f6:32:ff:de:56:78:06:
da:ce:6d:37:70:61:0a:1b:22:f1:f7:5a:e7:8e:85:
3e:ff:19:b8:ed:91:9d:fe:a5:01:25:81:95:3f:54:
e3:53:32:8b:b1:7b:13:1d:d5:ac:a6:f3:75:e5:6e:
e1:47:ea:40:67:73:c4:df:c8:aa:79:a3:37:d4:c9:
25:21:c0:14:85:88:d7:c9:fe:4a:96:2e:03:23:5b:
1c:cd:4c:4e:7a:b6:6b:c7:38:1e:24:58:ec:c8:47:
ad:c0:9b:fb:c6:b9:69:c9:41:d3:22:6d:fd:ed:87:
e5:cf:13:ab:0a:f8:9f:de:d2:ce:fb:08:e0:bd:9d:
e0:50:36:bf:f6:69:7f:be:07:47:7b:6e:23:95:06:
d2:d4:22:6e:cb:a5:a8:e6:d9:d4:36:66:02:a1:5a:
88:25:24:bd:4a:61:3c:38:72:cb:0d:aa:fe:42:fb:
ed:fb:f2:95:38:18:25:a8:f5:35:ee:e0:14:7c:5b:
c9:6b:f5:f6:72:6f:be:d0:d3:f0:ad:b9:bb:96:54:
94:13:bf:fc:53:da:d4:18:6c:8a:1e:22:33:e5:89:
b8:54:b3:1b:f1:b4:4c:9a:35:4d:bd:e2:90:9c:a0:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:83:8A:E0:1F:AE:2A:77:B7:EB:F0:F0:53:54:C7:CF:00:0A:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/987608BEDA2C11EF9F586563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9c:19:b8:30:fc:3f:98:3b:fa:55:a5:42:7c:47:6f:4a:a2:
09:ad:00:2a:0c:60:73:9c:b7:3b:80:f4:4f:a2:20:18:93:84:
13:ee:3b:e5:45:6e:b3:b9:92:3c:b0:73:e3:f8:75:f8:f0:43:
71:e7:e7:1e:4f:08:f1:2f:dc:99:b2:53:b2:fc:61:d1:49:2c:
e2:67:e8:0f:b7:a0:a3:74:dd:b8:ae:98:4f:51:f3:c9:64:f3:
90:a0:22:cb:8e:06:d3:48:7d:ba:de:ff:0e:87:93:c9:83:2f:
f2:23:91:35:89:5e:70:34:28:ec:81:c6:ff:bf:7a:51:3a:b7:
0b:4b:d2:7e:fd:5a:e3:3a:28:3d:97:7a:1d:d4:69:41:c9:1a:
19:44:c8:72:c0:4c:c9:c6:8d:61:b8:1d:03:c3:07:c1:89:81:
fe:ff:dd:66:98:3f:53:82:c7:9d:bb:6e:dc:ed:0d:c4:15:c2:
b6:44:16:f2:1a:9a:af:9d:6b:24:43:cd:fc:57:fd:92:28:08:
27:82:28:b1:80:57:14:70:55:a6:00:65:67:66:8d:09:6f:73:
44:0a:34:80:17:f6:54:77:17:fe:0d:5d:aa:30:85:90:7e:4d:
2b:92:01:ba:3e:29:75:6d:cf:a6:47:be:8e:68:49:d4:f6:12:
64:c8:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:07 2025 by rpki-client