Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AE51C4DA5D11EFB5A455AF762E951A.roa
File: B7AE51C4DA5D11EFB5A455AF762E951A.roa (raw, json)
Hash identifier: wvYY/m/sZGYy8+JFBb1z3JXQdzFT3LCgTB29VKHofSU=
Subject key identifier: 49:7D:24:F1:52:75:B2:22:67:7C:9A:F1:F1:4B:38:24:FC:37:18:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014802
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AE51C4DA5D11EFB5A455AF762E951A.roa
Signing time: Fri 24 Jan 2025 14:15:52 +0000
ROA not before: Fri 24 Jan 2025 14:15:49 +0000
ROA not after: Wed 05 Mar 2025 14:15:49 +0000
asID: 48031
IP address blocks: 154.222.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83970 (0x14802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:15:49 2025 GMT
Not After : Mar 5 14:15:49 2025 GMT
Subject: CN=6793a098-cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:64:d9:bd:0b:96:32:7c:6e:85:9f:5b:2a:
5a:dd:68:6d:b7:8e:5d:c2:b9:c9:aa:8c:57:95:fc:
97:13:ce:1d:85:ed:fd:44:51:37:56:7f:40:10:61:
9a:30:ea:32:57:f8:30:0c:b2:c1:63:e7:5f:81:1e:
e2:28:e6:21:4d:ae:22:ab:70:91:63:41:a5:b2:e8:
a1:d7:70:db:64:85:b5:16:58:a8:33:f6:81:ce:60:
ec:c3:e8:3b:a2:62:a0:dd:64:54:8c:c7:f6:35:b7:
29:25:42:28:56:ae:ff:95:dd:65:bd:62:80:74:01:
c0:30:97:d3:5e:ff:ac:49:f0:78:c4:58:17:16:ba:
33:36:7c:8a:f3:5e:71:c3:81:3a:76:7a:ca:df:f3:
b3:6a:8d:00:77:75:bd:62:2e:e5:ea:05:f4:63:03:
e4:9d:95:dc:21:ff:f7:e3:8e:f8:1a:47:23:21:d2:
5c:ba:60:55:dc:3d:c9:fc:6c:fd:51:a9:5b:66:b6:
d8:60:7b:cc:d9:73:2a:be:62:68:45:5c:d8:7d:e8:
bf:33:0f:ea:38:c8:0c:d3:ad:d3:c0:5a:5b:d3:d0:
ee:4d:b7:a5:cc:4c:47:90:2e:27:bb:9d:38:17:8a:
1a:b7:86:47:ba:53:93:de:71:df:e4:18:1e:57:97:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:24:F1:52:75:B2:22:67:7C:9A:F1:F1:4B:38:24:FC:37:18:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7AE51C4DA5D11EFB5A455AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9a:8f:14:ec:30:74:42:be:bd:62:c7:b8:51:ea:32:80:bf:
ec:44:78:5c:02:11:ae:82:40:72:3a:f6:8e:b9:44:e7:b5:be:
04:ac:45:b8:87:8c:fe:8b:90:cc:ad:22:80:3f:e3:29:c1:a5:
97:7d:d4:fa:d1:12:88:50:cb:8f:fc:b1:f3:d8:38:3c:4c:2b:
f9:cb:b1:6d:7d:70:1f:f9:ce:81:fb:ef:2e:55:3f:af:10:4d:
94:91:35:93:3f:e0:fd:6c:09:32:2e:72:cd:9b:8a:d2:9c:2a:
99:c3:d7:57:06:33:8f:8b:28:79:9c:8f:29:00:17:38:7b:15:
a5:71:2f:6a:e0:f2:e1:e0:74:9c:b5:fd:39:0f:2c:58:df:21:
2d:1c:ab:a8:4d:34:9a:60:0c:7a:21:7c:c3:32:05:cb:e6:1e:
1c:c6:99:28:17:24:4d:ba:da:e8:9f:10:d0:73:1a:4a:6f:53:
a6:33:f0:de:94:33:a4:a6:68:48:c4:36:55:97:ac:94:09:6a:
d9:98:ec:b7:aa:80:db:fa:1d:8d:f6:a6:fa:38:29:2c:b9:7a:
7a:92:ba:e0:4d:49:e1:8d:ae:32:27:77:33:26:34:9a:c1:49:
c9:06:25:fc:26:d9:63:99:f1:cc:37:7e:d9:51:3a:e8:6b:dd:
28:18:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:59:07 2025 by rpki-client