Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8DAD2FCDCC411EF9B9EDA65762E951A.roa
File: B8DAD2FCDCC411EF9B9EDA65762E951A.roa (raw, json)
Hash identifier: KBglM0VQRNq55St46q/JoScMtBz23OYYS5ULPtXhnWY=
Subject key identifier: DB:0E:46:1C:A5:1D:A5:BA:18:B3:EB:DF:89:9C:BB:39:29:62:4A:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8DAD2FCDCC411EF9B9EDA65762E951A.roa
Signing time: Mon 27 Jan 2025 15:38:14 +0000
ROA not before: Mon 27 Jan 2025 15:38:11 +0000
ROA not after: Thu 13 Feb 2025 15:38:11 +0000
asID: 5065
IP address blocks: 154.207.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85067 (0x14c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:38:11 2025 GMT
Not After : Feb 13 15:38:11 2025 GMT
Subject: CN=6797a866-b2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:53:85:46:91:84:9d:c6:bd:67:5f:da:50:
6f:a2:8e:1d:6f:4b:1e:d2:f8:37:b6:dd:b9:ae:2d:
64:77:3d:6e:ce:2f:7a:f3:8e:3f:1a:b3:2f:27:e0:
c8:9b:7d:b2:3b:a1:da:7f:85:0b:56:e6:ad:a5:1d:
a3:91:14:97:96:b0:ce:44:2f:a3:3b:9f:c1:7d:ca:
a6:9b:ea:0e:eb:b8:46:85:33:90:c3:60:15:d7:c0:
5c:95:bd:b9:07:c7:1d:93:14:c1:93:c6:c8:67:55:
48:02:5d:a2:d0:a8:26:3e:5a:ca:32:7f:03:e5:dd:
6a:fd:99:a3:08:50:32:29:d4:40:03:70:ef:ab:f0:
52:43:ce:13:27:d2:01:a6:8d:38:ba:f0:1e:d2:44:
78:3c:8d:77:c5:a5:05:0a:ad:99:92:51:19:6b:91:
52:0b:56:6c:2e:2a:62:1b:d3:e9:40:73:54:f3:11:
57:56:fa:23:23:71:ef:05:7f:45:d1:57:3f:98:f7:
66:9d:e7:cd:c4:76:f5:7d:a7:84:75:96:bc:98:62:
96:d5:af:75:22:e4:dd:b1:8e:52:fe:7b:ed:b7:f5:
de:e9:ec:38:f9:8f:26:f4:a7:48:aa:74:b5:5c:c2:
40:b3:59:80:de:af:c4:01:70:54:e4:ba:29:6d:46:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:46:1C:A5:1D:A5:BA:18:B3:EB:DF:89:9C:BB:39:29:62:4A:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8DAD2FCDCC411EF9B9EDA65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:dc:3e:70:96:1c:4b:ce:f6:b5:80:07:a5:9c:a9:8a:bc:07:
2f:49:0d:dc:79:c2:47:bb:65:b9:bd:e0:04:65:cc:47:40:3a:
17:67:e6:7e:ff:03:c3:a3:4b:fd:64:ac:5f:05:21:5d:33:c5:
c8:80:3e:96:87:8d:96:e6:46:7f:a7:99:8d:ea:07:db:61:01:
03:85:83:dc:0b:87:e3:26:45:17:5d:33:64:e3:15:32:5d:db:
ee:bf:84:ec:08:4f:12:6b:2e:f0:16:8f:b1:0d:ac:4b:00:9c:
1e:40:cf:b7:c0:3f:98:cc:ee:7b:f3:62:51:e2:97:67:6f:78:
0b:03:a0:02:68:ab:ab:b6:78:ba:f7:07:c3:89:32:a0:66:87:
10:bc:89:74:a6:b6:5f:a2:21:b8:e4:38:0e:b6:0c:3c:71:a4:
6a:ad:28:26:2f:80:38:1a:3b:50:50:95:98:e3:b4:52:68:2d:
c1:da:dd:90:24:35:29:fd:3a:1d:d3:ae:bd:29:08:9e:e5:a9:
c0:a1:cf:d5:8e:4c:8e:80:9f:6d:43:49:73:60:7d:c7:45:1e:
38:cb:bb:bd:ce:45:c6:e9:04:53:45:a3:0c:75:f7:ef:a1:7b:
b6:8f:ae:e2:c0:cc:06:e1:68:89:99:85:5b:50:0f:40:5a:60:
b3:d5:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:35 2025 by rpki-client