Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C644EDA4E11EF913FB24B762E951A.roa
File: A72C644EDA4E11EF913FB24B762E951A.roa (raw, json)
Hash identifier: rB5PUXZYoNT4kfgMo/e2+30vcB818zHJGjeSHeYnOLU=
Subject key identifier: AC:60:FA:DF:F0:16:0B:0D:2C:FA:D3:46:2F:CB:B4:4D:B1:95:0A:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C644EDA4E11EF913FB24B762E951A.roa
Signing time: Fri 24 Jan 2025 12:28:02 +0000
ROA not before: Fri 24 Jan 2025 12:27:58 +0000
ROA not after: Sat 01 Mar 2025 12:27:58 +0000
asID: 44559
IP address blocks: 154.205.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83654 (0x146c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:27:58 2025 GMT
Not After : Mar 1 12:27:58 2025 GMT
Subject: CN=67938752-e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:3b:39:9a:b3:e7:bf:7b:8c:0e:34:a8:52:
7c:71:5a:ea:34:c4:d3:2e:df:8f:03:db:1b:43:c8:
1b:89:e6:d8:26:b2:93:17:d4:75:0a:4e:90:db:48:
73:3f:55:a9:ef:e7:af:f5:21:b4:89:34:75:76:8d:
08:4a:86:e7:07:a4:f7:34:3b:6b:98:94:8e:4c:d9:
22:24:07:38:5b:a2:59:3d:57:be:85:57:c3:d9:b5:
4d:19:c9:0d:03:1e:f0:43:2b:e6:dd:62:98:52:f6:
d6:68:d6:ee:4e:4d:e6:9c:e9:98:da:bc:0d:18:5d:
da:be:75:84:de:54:de:e8:8d:6c:8e:c4:10:00:78:
c5:42:8b:02:d9:1b:7b:64:13:a5:a3:fc:9d:be:28:
aa:ca:3c:40:35:90:f8:5e:72:a4:a6:fa:f8:cf:2d:
0f:35:2c:03:78:a6:96:be:21:ca:85:05:e5:59:f0:
05:b1:1c:2a:6f:c9:7e:d0:03:54:d9:b1:53:8a:47:
dc:7c:9f:31:22:86:fe:98:4a:e1:20:7a:2f:da:59:
6c:e0:ac:93:1f:e6:44:8b:d0:ec:9d:61:00:08:69:
13:b1:1e:57:11:c6:6e:5c:21:8a:4e:00:a8:46:bd:
89:df:df:ec:6d:ae:fa:f9:10:66:30:89:97:5d:79:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:FA:DF:F0:16:0B:0D:2C:FA:D3:46:2F:CB:B4:4D:B1:95:0A:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A72C644EDA4E11EF913FB24B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:ac:50:c1:df:9d:ae:3d:9f:e3:96:96:2d:84:f9:8d:aa:
ee:fb:fb:a7:8f:73:f0:f5:d2:0d:94:41:e8:6e:da:4a:f8:18:
0a:68:42:a7:37:04:de:e4:c0:f6:fe:52:0a:f8:6b:69:ea:90:
ab:bf:d2:97:b4:ff:7a:63:df:73:98:ed:ff:5b:6f:05:08:52:
a2:e0:8f:bb:c2:c9:af:b3:1b:ec:ba:63:10:2a:fb:9c:99:21:
45:52:f7:16:81:a8:02:fa:f0:6a:63:0d:a1:21:12:cc:0a:01:
7a:d8:52:f8:68:18:64:bb:34:b7:7f:b0:14:51:47:7b:23:4f:
61:9f:16:3d:ed:28:31:d3:8a:71:ba:91:9f:b0:64:c2:eb:3b:
6f:e6:b3:bb:3f:a6:44:69:1b:b0:b0:59:72:24:62:33:05:05:
bd:ac:7b:ea:a4:c7:bf:92:7a:02:71:c4:70:eb:6c:df:63:c1:
fc:e4:4b:f7:2b:4d:cb:63:61:c3:48:71:84:0d:ba:5f:9e:27:
0d:d6:92:55:33:71:d7:34:c1:95:6f:09:63:2a:e5:cf:59:d4:
3c:86:82:1a:b9:ae:92:9d:2f:a3:17:06:20:ae:47:84:07:3f:
0e:11:f3:ff:b1:54:a8:f9:9d:a2:61:e3:d4:6d:55:36:cf:dc:
4b:13:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:37 2025 by rpki-client