Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC3A2C22DAE511EFB716814E762E951A.roa
File: AC3A2C22DAE511EFB716814E762E951A.roa (raw, json)
Hash identifier: /pi/8rGN49h0JALbrJ468yLWxOlJDgMQD3Fx/F3n3nw=
Subject key identifier: CD:AE:50:F9:CE:B2:7A:C4:A5:20:B3:E5:CB:07:11:54:A2:B2:A8:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC3A2C22DAE511EFB716814E762E951A.roa
Signing time: Sat 25 Jan 2025 06:29:04 +0000
ROA not before: Sat 25 Jan 2025 06:29:00 +0000
ROA not after: Thu 27 Feb 2025 06:29:00 +0000
asID: 398704
IP address blocks: 154.200.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84201 (0x148e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 06:29:00 2025 GMT
Not After : Feb 27 06:29:00 2025 GMT
Subject: CN=679484b0-e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:2b:d7:05:7b:ac:66:82:2f:a4:1a:9b:5c:
18:e2:08:0d:4e:0c:45:20:5c:19:22:a5:44:7e:62:
95:8d:b3:1e:3a:87:fc:b6:42:2d:0f:d7:62:f4:32:
66:bc:4d:49:04:39:6c:52:20:57:ed:c3:df:32:2f:
fc:66:9e:6b:09:fe:48:91:ba:69:35:23:c2:21:95:
c3:34:3b:71:f4:ad:95:b6:75:15:7a:21:31:cd:67:
1f:47:7a:00:59:37:56:6f:84:47:0e:c1:72:c8:56:
99:8f:08:4c:4e:80:31:42:2e:8a:6b:43:52:d1:5f:
77:70:d1:bb:cd:7a:b8:05:9a:86:4c:6b:27:ae:d6:
d1:44:32:d0:dc:70:ea:cf:33:42:7f:77:28:32:b4:
2b:c5:53:5f:94:88:7b:8f:17:42:72:cf:e9:8b:af:
df:7c:03:7b:21:d4:ab:5b:35:9f:03:a5:8f:99:0d:
8d:1d:8f:37:7b:be:64:53:42:3d:d5:9a:75:e3:a7:
20:a9:e2:cc:34:54:e8:99:2c:35:39:ce:6d:d2:2f:
e7:09:96:8a:fb:af:9f:cc:e4:21:f8:ce:9b:7e:c9:
a8:18:c6:ba:c0:74:99:60:1c:ca:e9:ba:70:bc:6a:
fb:7d:a1:46:4e:c5:e1:6d:66:59:57:b6:fb:4c:83:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:50:F9:CE:B2:7A:C4:A5:20:B3:E5:CB:07:11:54:A2:B2:A8:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC3A2C22DAE511EFB716814E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:46:0c:3b:8f:bd:52:2a:01:32:d1:10:81:11:c0:9d:79:00:
99:c5:86:ac:c9:50:b5:a7:03:71:36:13:dd:45:16:56:89:3f:
b6:3d:16:a5:79:44:92:3c:1a:ce:49:50:c5:60:7a:8c:73:ba:
69:4b:57:21:79:31:de:da:9e:32:88:11:a2:6c:f9:86:61:0d:
99:55:64:0d:50:34:57:98:bc:4a:11:2c:e9:87:f9:8b:97:85:
1a:84:92:96:8d:b6:e0:f0:43:3a:09:3f:98:22:45:45:df:ff:
54:f5:5b:80:55:88:39:68:5f:0b:5c:59:c9:cd:9e:7a:7e:a4:
9a:2d:92:66:f7:7e:3c:04:0c:35:5e:17:06:1b:12:88:79:b9:
a6:99:7f:03:b6:e3:d7:95:fe:39:dd:05:8a:e4:c6:51:f2:c1:
28:ee:34:e0:a6:0a:69:e4:d0:9d:ec:f0:c6:46:1b:63:bd:70:
aa:e2:59:d2:c3:85:35:39:d4:2a:7e:44:1d:60:3c:67:e0:3f:
ae:f8:4e:53:1b:db:e1:0e:9a:45:c1:5e:e3:b6:63:e5:fe:29:
29:71:98:ff:4a:e5:8e:66:c6:be:ad:fa:99:49:75:d5:1e:5e:
eb:78:0d:30:56:6b:3f:f9:3d:ea:1f:d6:f9:ee:7b:f1:6f:57:
66:b3:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:13 2025 by rpki-client