Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B7DCA2DA5F11EFB5A1E0BC762E951A.roa
File: 98B7DCA2DA5F11EFB5A1E0BC762E951A.roa (raw, json)
Hash identifier: jzkL5f7c0DprenJD8PJbeHQ+yfrv5b+FqKOikbOCsig=
Subject key identifier: E5:E9:69:19:DF:F8:DA:55:19:52:05:61:65:A8:E5:38:5E:2E:6F:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01482E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B7DCA2DA5F11EFB5A1E0BC762E951A.roa
Signing time: Fri 24 Jan 2025 14:29:19 +0000
ROA not before: Fri 24 Jan 2025 14:29:16 +0000
ROA not after: Wed 05 Mar 2025 14:29:16 +0000
asID: 48031
IP address blocks: 154.222.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84014 (0x1482e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:29:16 2025 GMT
Not After : Mar 5 14:29:16 2025 GMT
Subject: CN=6793a3bf-65b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:f9:60:fd:e4:b2:af:47:b6:5e:89:0e:10:
09:1d:0a:54:64:a5:90:c2:97:b5:2b:6f:04:01:8d:
94:15:0a:66:11:67:5f:0d:87:9a:d3:73:40:72:79:
72:57:9a:5b:19:e5:ab:b1:02:ee:22:7f:b8:73:d8:
47:5d:42:50:d8:9a:e1:a9:15:fa:66:ca:f5:60:60:
bf:11:eb:3f:89:a1:89:91:da:d0:60:d0:b5:ff:ce:
a4:bd:57:93:1b:43:a7:ec:13:81:d7:cf:ed:11:9b:
23:a6:49:03:9a:07:9a:8a:17:51:b5:a1:33:fa:1b:
64:ee:21:23:bb:a4:aa:f7:5f:26:f0:a5:51:ec:03:
a3:56:bb:33:40:12:f8:18:b4:2d:a8:16:66:e2:26:
4b:84:c1:8f:79:de:83:9c:32:19:10:80:58:a9:6c:
16:f2:57:1c:9b:17:af:19:ee:84:d9:23:39:9f:af:
aa:cb:cf:78:e3:fa:b3:f9:03:88:ec:dc:55:01:8e:
f5:2b:9e:a2:cd:71:fd:fa:37:24:bf:b5:d7:85:85:
20:77:bc:11:31:ce:bb:d4:9e:61:81:7b:de:a5:d9:
a3:07:69:32:92:54:6a:84:d4:4e:8d:ec:b5:16:aa:
26:3b:a7:96:98:1c:71:23:1e:b2:c3:7e:a1:25:21:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:69:19:DF:F8:DA:55:19:52:05:61:65:A8:E5:38:5E:2E:6F:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B7DCA2DA5F11EFB5A1E0BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:12:b0:e8:6d:fd:09:d4:4d:76:bc:b7:1e:68:26:ad:4a:52:
d0:4d:a8:e4:03:ec:80:f5:ce:8b:3f:ec:f7:b9:ae:9b:07:3c:
60:10:b2:39:58:39:ee:35:f8:fc:6f:e9:5d:e8:ee:cf:a6:74:
a8:55:18:10:40:4b:8d:95:c9:d6:d8:4f:f9:94:91:12:87:7a:
00:7a:e2:52:6a:eb:2d:ca:a0:94:59:fe:14:e2:76:ff:4b:1a:
47:57:85:69:1f:9b:9d:c9:70:6f:5b:bf:48:99:57:6c:da:d4:
d1:88:e3:8b:a5:ba:b8:41:d2:80:35:56:cb:29:e2:32:a5:22:
34:cb:72:13:c1:6b:49:a4:ef:cc:3d:fd:5d:36:35:21:ec:1e:
93:41:3b:80:a6:c8:0d:49:1a:a9:3c:17:33:02:4b:5e:5c:e3:
fe:48:f2:88:03:6c:19:d3:99:ca:ea:fc:24:b9:cb:51:7f:95:
e9:4a:18:58:58:39:ce:45:69:fa:04:01:b8:e3:2b:87:af:7e:
8f:cb:da:16:fa:0d:88:02:98:9d:91:f9:fc:31:a8:5c:64:90:
66:f0:9c:98:96:75:2d:0b:d1:b2:98:71:fe:ef:37:3d:d9:8b:
66:bb:e9:36:c4:43:cd:26:14:d4:ea:d3:55:94:22:a1:78:11:
5a:34:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:14 2025 by rpki-client