Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7F3C68DA4811EFAF40B7A0762E951A.roa
File: AE7F3C68DA4811EFAF40B7A0762E951A.roa (raw, json)
Hash identifier: JdVb00S9k7fGS8Jq/uCMILkBy6CqFqD0G/0u7tow3rk=
Subject key identifier: 57:5A:E9:BD:04:68:C3:8C:A5:D4:07:D1:1B:5F:E2:EB:A7:AC:45:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01463E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7F3C68DA4811EFAF40B7A0762E951A.roa
Signing time: Fri 24 Jan 2025 11:45:17 +0000
ROA not before: Fri 24 Jan 2025 11:45:13 +0000
ROA not after: Wed 05 Mar 2025 11:45:13 +0000
asID: 48031
IP address blocks: 154.222.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83518 (0x1463e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:45:13 2025 GMT
Not After : Mar 5 11:45:13 2025 GMT
Subject: CN=67937d4d-b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:8e:a5:df:68:a6:1a:cc:1f:71:3a:6b:07:
72:f8:f1:a4:b3:65:7c:53:4c:bf:23:6b:08:b3:fe:
84:09:8f:60:8a:4d:67:c1:73:60:36:29:19:6c:b6:
7d:d2:90:93:97:1b:67:90:a2:8a:b1:68:ad:0a:ce:
65:68:72:e8:66:b0:da:1e:2d:9f:f7:20:71:66:f5:
1d:74:7a:43:ff:97:e7:a6:86:26:73:38:d5:68:0c:
41:e0:51:bc:48:2b:e8:06:ad:e6:f1:c0:28:1f:72:
f4:b6:bd:5d:d2:98:4c:6d:1e:2f:58:ae:71:f0:24:
a8:a0:70:93:48:90:05:44:01:34:ce:4e:35:54:6d:
a8:c7:fa:07:bf:75:26:47:b7:17:e0:37:f2:bd:98:
7a:b3:a1:f6:e8:e4:0d:27:53:56:53:b9:f8:b2:92:
75:4b:08:fb:8c:4d:7d:2f:99:cf:69:15:d1:50:d5:
9f:b8:1b:c0:64:7a:82:24:d6:43:28:2b:68:88:29:
c4:73:3a:64:71:fc:c0:8a:fb:5d:c0:5f:d9:5d:7a:
b1:88:53:5e:98:9f:9a:f3:56:6b:c7:61:53:e4:3a:
66:27:67:d3:fd:46:2a:15:83:64:ec:7e:5a:56:d4:
1b:f0:42:a9:63:a3:5d:af:fe:67:42:2d:96:7d:93:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:E9:BD:04:68:C3:8C:A5:D4:07:D1:1B:5F:E2:EB:A7:AC:45:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7F3C68DA4811EFAF40B7A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.223.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:30:b0:57:91:e2:cf:83:fb:20:d6:1a:09:48:d4:c3:d6:77:
98:a2:ee:43:dd:15:37:f2:81:6a:eb:92:cc:67:0a:3d:51:ce:
c6:89:9a:1d:1b:93:cf:ee:85:28:da:45:b5:d7:1b:57:b6:ae:
05:df:dc:39:22:be:f4:2d:06:66:c4:f0:61:5f:24:c2:71:c7:
1f:12:df:c2:99:3a:c9:23:f8:7d:23:50:0a:73:d7:0e:35:51:
dd:1a:fc:ad:bf:28:9f:28:ce:c9:fb:ec:49:59:7c:13:3c:9f:
d2:49:95:74:4c:e9:39:59:4d:b7:12:d7:f2:80:dc:6a:5e:b4:
91:72:73:e1:a4:55:4b:aa:9f:bb:18:d5:03:2b:28:0f:64:58:
4e:6e:c6:90:26:f3:25:87:ce:4e:0d:20:c3:4d:6f:5f:79:89:
05:c5:df:4b:ef:17:10:6c:89:7c:ef:ca:7a:cd:df:2c:f0:0d:
12:ae:c8:0f:38:47:48:74:c0:25:5a:8a:79:49:3a:ef:cc:23:
fe:ae:20:7b:a5:b5:ec:00:a6:11:8b:a4:ab:96:90:21:a0:37:
06:73:22:bc:88:64:5b:b3:05:a2:70:13:5f:0b:2b:b3:7f:33:
57:17:44:a5:3c:bc:ee:a8:a0:97:01:99:e6:78:2c:b2:55:9e:
98:7d:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:38 2025 by rpki-client