Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B587A3D0D3D411EF973FBD91762E951A.roa
File: B587A3D0D3D411EF973FBD91762E951A.roa (raw, json)
Hash identifier: oXW/mx2Agh0zLh298nXj6DOx5BuDlg7sCHUl9u9trAw=
Subject key identifier: 5E:47:83:83:08:00:50:A0:0B:98:81:A8:41:AA:7F:13:29:E1:22:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B587A3D0D3D411EF973FBD91762E951A.roa
Signing time: Thu 16 Jan 2025 06:40:00 +0000
ROA not before: Thu 16 Jan 2025 06:39:57 +0000
ROA not after: Wed 19 Feb 2025 06:39:57 +0000
asID: 7018
IP address blocks: 154.223.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80824 (0x13bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:39:57 2025 GMT
Not After : Feb 19 06:39:57 2025 GMT
Subject: CN=6788a9c0-811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:96:67:2e:2e:bc:e1:24:e0:33:b2:3c:65:
b8:ab:23:84:12:e6:76:16:e4:18:b4:f1:e2:70:e1:
c0:9d:6c:fb:c3:88:42:49:75:1d:f3:99:db:02:ee:
88:1f:df:de:33:03:ce:0b:5c:f9:6d:8c:d0:5b:47:
35:fd:8a:4a:f7:8a:14:89:16:7e:c9:fe:e5:9b:3c:
b1:be:c9:dd:4d:37:fb:17:4a:a3:5b:fa:60:23:f8:
4b:31:6a:4b:52:25:cf:c8:2f:55:ab:d3:79:b2:d4:
9f:33:5c:71:0b:35:49:bb:06:24:89:16:3e:de:65:
36:39:4f:7c:56:87:03:22:fe:1a:38:f4:2b:97:eb:
7a:b2:c1:53:f3:74:7f:d0:ab:16:5c:98:39:ba:e1:
36:75:48:9e:1c:9e:94:c7:1a:30:7e:42:71:0f:6e:
60:c1:8f:b5:6c:49:98:39:52:32:5e:af:21:0b:3c:
5b:65:94:80:1a:0d:0e:e3:9d:86:bd:e2:ee:1a:07:
1f:e9:7b:41:78:43:a0:1c:fd:de:72:48:85:b4:62:
65:22:08:81:2b:28:08:8e:6a:20:b9:7b:26:1b:a0:
d6:7c:2d:37:18:f8:e6:13:58:d8:83:0f:ad:28:5d:
8f:54:98:d1:77:da:8e:b3:41:14:4c:a2:e7:3e:20:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:83:83:08:00:50:A0:0B:98:81:A8:41:AA:7F:13:29:E1:22:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B587A3D0D3D411EF973FBD91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.192.0/24
Signature Algorithm: sha256WithRSAEncryption
97:49:74:d9:d5:10:67:00:19:a7:b0:d5:99:c1:1b:cb:de:bc:
25:73:f3:c8:42:f8:b8:ca:5c:20:38:3d:97:b6:7c:5f:fd:cf:
72:0d:32:81:54:92:0b:90:54:45:8e:92:95:30:77:25:a6:ed:
69:cb:b7:88:cc:c9:4b:50:11:af:93:68:28:6f:a4:d4:2b:96:
45:89:1f:7e:e3:2a:1e:82:96:bb:60:00:da:13:f1:6a:10:72:
5d:8f:db:f2:20:3a:ed:ed:f8:b4:d6:86:6f:3b:63:56:ec:d3:
8d:5b:0e:7e:11:a4:a7:04:5e:47:48:32:9e:24:95:8e:d3:c6:
27:a6:a3:31:5b:cc:ec:7a:52:25:2b:ef:5a:20:98:f3:5c:6b:
24:55:ac:49:2f:45:43:d9:81:09:c5:55:26:74:d7:c1:2e:7c:
bb:f6:a8:73:f7:22:41:15:d6:48:3f:fa:46:aa:d0:ad:21:0a:
af:d4:c3:22:e6:35:90:92:e5:3c:ed:40:38:d4:16:af:18:2d:
86:7a:4a:ef:29:14:4d:ac:ae:ad:24:12:33:94:f0:10:23:2d:
ab:66:e7:a8:46:d4:7f:5d:47:2b:1f:19:89:6f:89:8d:05:1c:
23:9b:88:71:b8:df:59:3c:f8:6e:70:14:30:4d:79:e6:9f:05:
48:55:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:19 2025 by rpki-client