Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58E9A88DA6311EF902E7B5A762E951A.roa
File: B58E9A88DA6311EF902E7B5A762E951A.roa (raw, json)
Hash identifier: cVuWtxmsjjLWyStdc8VOLg4Y6RQGyE3G3Gszq4vC8UA=
Subject key identifier: 22:A6:BE:3F:D9:B9:34:80:AB:8E:0A:07:86:6C:ED:F3:10:87:A9:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014886
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58E9A88DA6311EF902E7B5A762E951A.roa
Signing time: Fri 24 Jan 2025 14:58:46 +0000
ROA not before: Fri 24 Jan 2025 14:58:42 +0000
ROA not after: Sat 01 Mar 2025 14:58:42 +0000
asID: 44559
IP address blocks: 154.203.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84102 (0x14886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:58:42 2025 GMT
Not After : Mar 1 14:58:42 2025 GMT
Subject: CN=6793aaa5-3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:cc:b0:3a:91:74:3f:1f:7f:e1:75:72:46:
8c:31:59:39:3e:2c:18:93:3c:9c:26:07:99:5c:33:
7c:e4:b6:66:e7:88:eb:75:50:cc:05:84:b4:e2:59:
02:51:d0:76:5e:71:29:76:74:3a:d4:11:89:fa:e7:
3b:74:66:03:a9:f9:aa:1c:a3:f9:36:ea:d6:c1:14:
e0:4f:85:94:b9:a1:66:00:0b:57:98:4f:02:18:0f:
77:fa:88:f4:c1:f2:6f:0f:d3:94:c9:61:ec:ff:a9:
c4:34:35:67:d0:98:ea:3b:4f:b2:6a:56:c8:06:d3:
27:1f:40:ec:48:97:d8:22:ab:74:ac:b5:da:c6:c9:
89:ea:07:94:57:b0:49:a7:2d:64:82:29:a5:ee:27:
6d:c4:d8:63:17:1e:2f:36:16:0e:9d:09:ec:dc:7f:
31:fa:c9:22:fe:67:22:02:2d:96:62:84:52:ce:37:
2c:ff:6e:64:c4:96:6e:df:c3:16:d3:bb:08:58:55:
43:8a:f7:36:cb:47:63:33:ce:5f:68:70:19:85:66:
3e:6a:bd:52:36:c1:7c:ba:fd:0d:d7:95:48:45:40:
42:36:b7:87:6e:d2:29:23:ab:6a:f5:09:b5:88:ce:
ba:76:b5:67:91:60:e7:46:a3:b1:0e:b2:80:7a:bd:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A6:BE:3F:D9:B9:34:80:AB:8E:0A:07:86:6C:ED:F3:10:87:A9:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58E9A88DA6311EF902E7B5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4a:d6:fe:2c:51:a0:f4:07:57:4d:e7:62:33:b0:b7:b9:cc:
7f:60:34:9d:af:b2:95:f2:6f:78:a0:af:d2:b0:8c:1f:7c:64:
70:b6:9e:16:6f:dd:0d:03:bf:01:24:22:36:e1:e0:d6:1d:8d:
d3:ad:9d:0b:87:d4:94:ec:00:7b:b6:0a:a0:72:d8:e1:79:52:
98:aa:b9:7b:dd:99:54:ea:2c:08:e8:74:09:0e:a1:54:9f:89:
22:27:09:8b:f8:f6:90:c9:ed:1b:84:f3:ca:54:1f:eb:e3:1a:
f7:60:cb:e7:e0:63:73:2a:e0:1f:e9:9d:2e:17:47:82:4f:07:
54:ea:da:1b:06:62:e8:fe:54:54:66:bf:44:a1:a8:76:38:3a:
78:1d:15:1c:66:1f:ba:da:4b:5d:f3:08:ed:11:81:9c:9f:87:
62:c5:07:12:5f:34:26:18:14:5e:e2:9c:f1:0a:dc:86:f9:89:
15:a5:08:16:d6:49:ef:e9:23:b9:f7:31:9f:11:6d:c9:06:39:
d8:35:b4:9b:1f:f5:c9:c0:4f:db:5b:d8:b2:fa:11:69:83:e2:
90:28:96:fe:08:2a:5d:40:9b:35:a9:16:09:64:92:50:ba:a9:
05:f7:a8:6c:29:b8:8d:2a:38:3b:6a:fc:5b:6c:2d:33:8f:d0:
ac:5a:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:16 2025 by rpki-client