Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDE812DA0311EFA2085353762E951A.roa
File: A0BDE812DA0311EFA2085353762E951A.roa (raw, json)
Hash identifier: D4pYT3wRSkhKSeiVubEDbxHn5zhPxYNmO6q6qtSeM6g=
Subject key identifier: 89:A3:62:88:B7:15:51:4A:4C:5A:16:D7:64:18:7F:83:C1:D5:34:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01438E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDE812DA0311EFA2085353762E951A.roa
Signing time: Fri 24 Jan 2025 03:30:59 +0000
ROA not before: Fri 24 Jan 2025 03:30:54 +0000
ROA not after: Sat 01 Mar 2025 03:30:54 +0000
asID: 44559
IP address blocks: 154.205.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82830 (0x1438e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:30:54 2025 GMT
Not After : Mar 1 03:30:54 2025 GMT
Subject: CN=67930973-da96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:0a:ff:b4:46:ee:ae:e4:b6:41:b9:20:13:
ef:5b:6c:11:92:45:28:65:d6:7e:5c:d2:44:ae:05:
ce:03:cb:6e:74:26:84:73:e7:cf:ee:cf:3a:d1:e6:
64:73:9a:84:82:4f:d6:08:58:73:99:50:75:ee:c5:
d8:42:ba:50:e7:fa:e6:a0:47:0c:93:7d:2c:c5:9c:
54:cd:7d:1a:3a:bc:55:99:7f:0b:ef:23:57:05:c0:
58:84:c2:9c:82:7a:38:77:f1:af:fe:f7:42:a2:37:
d1:70:40:eb:99:19:71:a1:1f:d7:a1:7c:ca:f0:ab:
69:68:62:20:13:f5:9b:0c:76:d1:90:bb:d7:83:6b:
a3:cb:2a:1b:2b:46:1e:38:9f:f6:09:b6:a5:67:aa:
99:36:75:95:ec:97:c2:bb:81:bf:5e:9e:2c:99:7a:
84:fc:f9:df:9b:15:e6:7c:04:d5:b0:fc:5e:4d:5d:
a4:fc:a0:b4:60:44:4b:a2:8f:70:9a:a9:29:dc:55:
cb:2f:f1:e6:3f:22:ba:4a:23:0a:a1:34:a1:4c:22:
78:31:e6:f7:c0:b2:d1:0d:bd:cd:a0:a2:af:4a:d3:
08:e3:48:21:bf:c2:a0:b7:92:12:3c:db:54:68:c9:
2a:9c:71:a1:33:a9:3e:43:15:c2:e8:60:0d:a2:e3:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:62:88:B7:15:51:4A:4C:5A:16:D7:64:18:7F:83:C1:D5:34:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0BDE812DA0311EFA2085353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.28.0/24
Signature Algorithm: sha256WithRSAEncryption
36:17:e5:66:24:a0:d1:ed:09:2f:5d:37:22:9e:83:6f:3f:8e:
bf:aa:77:1d:4b:90:00:e3:64:eb:4f:2a:d7:0d:dd:d4:47:0a:
58:0b:c5:6d:cc:a1:3e:d4:51:8b:32:a0:5e:f9:ac:cb:1c:a6:
94:81:2b:cb:42:c4:d0:5f:cf:1f:a0:2a:46:94:df:d7:22:4d:
a0:2e:f0:3d:08:3c:cf:7a:05:00:53:aa:4a:4b:3f:bb:10:86:
21:65:b8:e9:56:9d:e5:cf:5f:fd:30:a4:64:ef:64:20:7b:23:
41:15:50:63:a7:4f:48:65:29:13:27:55:86:e8:ea:7e:eb:a2:
ae:86:b5:86:a2:a7:2a:d6:45:37:7b:2a:4e:54:b9:d2:75:98:
71:90:3c:62:cc:14:47:02:68:34:be:ef:22:0c:c0:29:4c:33:
77:0b:34:b4:97:92:67:66:71:86:f7:d8:4d:08:47:57:8e:6f:
9e:21:ff:ce:83:7c:86:bd:f7:bd:4f:60:c4:b5:91:9b:12:1e:
e6:32:41:f3:7d:64:23:3e:3d:02:75:5a:09:b2:b5:73:8f:aa:
76:ef:0d:36:d8:e0:62:ac:6e:7a:bf:3f:df:d2:fe:84:fc:52:
11:d0:b7:94:44:10:db:40:4d:13:3c:45:da:23:63:87:a2:71:
6a:3e:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:15:01 2025 by rpki-client