Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497A4E6DB3311EF8E310F59762E951A.roa
File: B497A4E6DB3311EF8E310F59762E951A.roa (raw, json)
Hash identifier: OCgJ0UOlLDdnstezkmupizwe2Ttj164U0UvqbJJ1cT0=
Subject key identifier: BF:60:DF:90:A5:CD:0C:3E:32:55:66:6A:E6:6F:11:F9:DD:FB:25:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497A4E6DB3311EF8E310F59762E951A.roa
Signing time: Sat 25 Jan 2025 15:47:39 +0000
ROA not before: Sat 25 Jan 2025 15:47:35 +0000
ROA not after: Fri 07 Mar 2025 15:47:35 +0000
asID: 138915
IP address blocks: 154.223.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84496 (0x14a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:47:35 2025 GMT
Not After : Mar 7 15:47:35 2025 GMT
Subject: CN=6795079b-f03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:31:50:b4:c5:04:a3:d2:c0:0f:85:53:d9:
bd:ff:f0:ca:36:f9:9d:9c:e6:75:84:08:b9:97:68:
53:a6:78:46:5f:61:18:52:2b:da:a4:5e:96:7b:69:
9d:ef:7a:72:14:07:fa:65:05:3b:f2:e7:99:a9:39:
16:e0:a6:92:b4:e1:21:b4:65:0f:e5:21:32:0d:dc:
35:18:c5:7d:1f:6d:bd:01:62:70:da:57:d4:6e:ae:
68:57:eb:1c:03:1b:b8:09:20:f9:2f:ab:7f:e2:70:
0b:03:86:34:ea:21:6c:9a:63:e4:2c:74:ea:dc:1b:
87:cb:c5:8f:25:3e:7d:db:ec:eb:44:d1:17:91:65:
0c:cc:df:52:c0:2e:f5:65:7a:65:d0:5c:75:58:2b:
5e:13:28:fa:c2:f6:8a:ea:85:ba:5a:24:eb:83:05:
77:c0:0d:34:0f:c6:0d:ae:c9:98:d4:99:94:e6:d2:
ab:b7:d3:16:ad:87:8b:76:52:d5:dd:12:03:49:26:
b8:eb:6f:6d:93:25:9e:41:14:e4:57:3f:d8:a1:d1:
5e:88:25:b1:af:15:53:43:8b:d9:96:9f:4e:ac:18:
3d:0b:29:59:3f:38:c5:ce:cc:50:4b:5d:b4:49:82:
96:3c:61:31:d2:bd:e8:88:46:e8:f2:f2:c7:c4:c0:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:DF:90:A5:CD:0C:3E:32:55:66:6A:E6:6F:11:F9:DD:FB:25:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B497A4E6DB3311EF8E310F59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:7c:13:c0:d0:37:32:87:3d:29:11:e5:0f:0f:78:3e:68:
97:38:fb:a3:41:27:d2:6f:66:fd:68:a5:b3:df:48:4b:13:ec:
51:2d:7a:9b:3c:3b:6c:c6:98:c6:2a:78:40:78:76:cd:d5:a2:
54:fd:00:29:07:7b:08:3a:0d:cb:25:68:ad:ea:00:1f:5a:26:
c7:cf:3c:eb:6f:44:b5:61:de:02:d0:f6:c2:25:c2:fb:aa:b3:
fa:d9:65:3a:a8:71:46:ab:46:e4:01:09:33:9e:41:99:26:60:
a0:ef:6f:c4:cd:4d:83:cf:df:3b:28:c2:5b:4d:46:a0:c6:17:
45:9c:18:de:c2:98:14:b2:cd:9d:45:38:fe:7b:92:a5:ee:31:
d4:a9:a7:65:a8:1a:1e:8c:c5:90:be:c8:8c:9a:46:68:66:66:
d5:40:2d:a2:85:78:89:75:67:57:70:bd:70:6b:5e:6b:ab:bb:
df:50:d8:a1:65:59:d7:85:a8:7e:4e:5a:bd:7e:93:37:b9:8c:
27:cb:9c:2b:63:d0:1e:d0:31:ef:36:a1:ba:7e:97:a0:87:2c:
97:7a:59:a2:6f:6f:a5:d6:e9:a9:c4:d3:3b:ed:bc:37:e0:ac:
a9:6b:79:14:fa:5e:2c:88:a6:bf:9a:27:64:f6:3c:06:f4:0b:
0d:44:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:16 2025 by rpki-client