Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FD414DB3411EF81A4045E762E951A.roa
File: AE8FD414DB3411EF81A4045E762E951A.roa (raw, json)
Hash identifier: vgVE/UiOJFp01NnAv6CkNDoRYs/e04FH+SSNz1HwZuI=
Subject key identifier: 1C:F8:82:BA:36:54:A6:8D:D4:BC:0D:80:69:3A:7D:3B:A9:21:A9:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FD414DB3411EF81A4045E762E951A.roa
Signing time: Sat 25 Jan 2025 15:54:38 +0000
ROA not before: Sat 25 Jan 2025 15:54:35 +0000
ROA not after: Fri 07 Mar 2025 15:54:35 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84502 (0x14a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:54:35 2025 GMT
Not After : Mar 7 15:54:35 2025 GMT
Subject: CN=6795093e-9878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:1e:a1:86:b7:5e:7a:a6:4f:d5:fd:f5:45:
5d:8f:9f:15:53:22:68:d4:1b:73:19:af:86:ff:1d:
a7:ba:d9:6b:bf:be:9d:32:18:92:fb:0b:b0:89:88:
10:81:76:04:56:2d:01:7b:33:ec:1f:a0:d2:8f:00:
af:e9:28:aa:c3:cd:d9:8b:bc:5d:44:19:1a:e3:6b:
6d:2e:84:63:b3:a8:a6:4f:4a:d0:a9:af:11:3b:b7:
07:a5:19:e2:0b:22:5b:fe:46:41:fa:e2:63:59:b3:
1a:54:e8:68:47:59:1b:59:fc:cd:bf:6e:1c:08:7f:
80:f1:66:2b:88:fb:77:27:e6:e2:aa:3f:c7:d1:ef:
62:93:b3:69:59:92:91:ba:b1:b2:29:bb:39:4a:36:
0e:c8:67:84:f6:c7:4c:c8:55:e0:37:5d:19:d7:fe:
10:78:c9:c7:8c:5d:59:a6:d2:f0:2a:50:17:9c:ba:
6a:0d:45:56:0e:9c:fe:1b:86:12:28:2d:76:23:91:
ee:a9:c9:cb:21:5d:ad:04:b8:11:a2:d2:12:25:5c:
0f:ac:8d:9a:cb:dc:6d:67:ed:8b:3e:b8:1a:ee:5d:
4f:09:5a:21:a9:f7:3e:b3:0e:6d:d0:8d:d7:ae:f6:
0b:72:8c:65:f3:d5:dd:39:1b:fb:4e:77:6f:28:c4:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:82:BA:36:54:A6:8D:D4:BC:0D:80:69:3A:7D:3B:A9:21:A9:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FD414DB3411EF81A4045E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d8:d4:98:d4:ee:f0:2b:0c:fa:7c:f5:28:d7:c4:b4:b2:6a:
dd:23:d2:7c:10:ba:b2:5a:00:7b:7a:ed:a2:d2:2a:54:42:d6:
97:25:aa:02:94:03:c6:01:f4:f3:23:2f:dd:9d:ce:c8:4b:f2:
b8:1e:c3:fe:31:55:45:e4:bd:91:17:bd:c9:1b:1e:76:c7:fb:
8a:39:03:58:5f:36:9d:13:45:b9:2d:7c:b0:32:c2:6c:a9:54:
ab:6b:cc:6e:72:63:d8:00:ca:de:5b:eb:52:c5:06:4c:61:b2:
ef:77:5d:cf:3e:be:96:31:55:69:57:3c:f7:bd:fb:1f:d8:62:
db:93:4a:28:9b:03:73:69:7a:60:62:49:13:b4:04:97:75:88:
f9:48:07:e8:cf:64:96:88:ee:3f:fa:28:66:6d:a1:55:6a:00:
69:2e:99:57:8d:6c:6c:32:9b:a5:fe:11:92:b7:66:a5:24:fe:
16:36:60:10:88:41:8d:66:db:db:63:24:52:9f:0c:b4:2f:07:
d6:1c:8e:a9:b3:c6:a4:9b:90:0a:6e:b4:74:92:a7:42:e9:b5:
67:c3:fd:61:05:02:12:07:b6:11:54:d2:dc:05:64:73:29:a0:
85:80:69:be:ec:3a:a2:f1:b6:97:f5:18:c7:92:5c:f4:78:d8:
56:ba:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:04 2025 by rpki-client