Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4E731AB5FE11EFA1A0FBA6762E951A.roa
File: BA4E731AB5FE11EFA1A0FBA6762E951A.roa (raw, json)
Hash identifier: 5dHFuC86GeKDA9Px1SOvSBQsXge0xysjb4zVXjtw6pw=
Subject key identifier: 96:07:93:24:26:CC:9C:E9:3C:1F:A8:09:6D:C8:1F:39:35:82:EC:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4E731AB5FE11EFA1A0FBA6762E951A.roa
Signing time: Mon 09 Dec 2024 07:25:12 +0000
ROA not before: Mon 09 Dec 2024 07:25:09 +0000
ROA not after: Thu 06 Feb 2025 07:25:09 +0000
asID: 137443
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72135 (0x119c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 07:25:09 2024 GMT
Not After : Feb 6 07:25:09 2025 GMT
Subject: CN=67569b58-e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:d2:42:17:75:e0:bb:56:3d:55:ab:f9:2b:
2e:01:8d:a4:e8:3e:20:7c:67:00:aa:0b:bc:d5:db:
bd:33:30:ef:a1:73:1e:09:02:5d:f0:f8:da:fb:98:
02:d7:3c:29:d2:c4:cb:d5:3a:9f:18:fd:10:23:f9:
9b:e2:a7:dc:c7:e7:62:2b:9d:8f:8a:1c:9d:61:f4:
ff:88:01:21:1c:01:f5:7f:7c:10:23:90:db:b7:b8:
4f:9d:db:2c:69:a2:dc:ec:61:67:e3:c5:c5:b9:c5:
5a:7f:4a:55:31:19:21:62:00:e3:6e:8d:77:1f:4f:
9a:93:a0:40:89:f6:4f:d9:23:05:8c:7c:8f:0f:bb:
94:d9:1a:e0:f5:69:ff:bd:44:70:42:af:d9:7d:f9:
9b:9d:c6:e5:81:a0:68:a4:24:6a:fa:69:e0:96:2c:
98:74:ce:58:04:41:f1:fe:c7:fb:af:b7:97:1e:28:
a2:7c:c7:39:53:f5:54:f5:94:01:7d:97:3a:2f:8d:
57:5f:b3:0d:1c:84:f1:e2:5a:b7:1b:5f:73:e8:14:
be:61:5c:36:f9:4c:e3:5c:5c:6a:f6:95:6a:a3:fa:
78:55:e0:f7:a9:69:a9:8f:2e:89:99:86:fe:8c:52:
03:10:83:1e:dc:c5:47:9c:67:eb:b5:73:56:af:06:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:93:24:26:CC:9C:E9:3C:1F:A8:09:6D:C8:1F:39:35:82:EC:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA4E731AB5FE11EFA1A0FBA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
84:58:06:51:47:ae:1f:9d:86:83:39:9e:a5:91:71:eb:de:94:
f2:c5:07:cd:08:cc:e5:c5:91:8a:3f:5a:6d:19:23:71:08:7d:
d8:50:70:3f:a2:c8:f7:18:c2:fb:1b:25:54:cb:db:d6:c3:2d:
c3:2f:7e:d7:59:da:c4:f6:26:88:6f:2c:24:9e:05:bc:4f:dd:
64:bd:72:a8:8b:5d:91:b9:dd:ce:9c:65:ff:f7:75:af:ae:41:
5b:e3:6a:1c:0d:b0:29:58:87:8b:02:10:0d:21:57:a5:b3:1e:
e4:58:e6:7a:ca:7a:fd:f5:aa:f0:f4:ae:f3:fb:c9:5a:d3:2b:
64:43:f9:bb:9b:cd:11:4b:ec:8a:9e:3b:fa:d8:34:75:6d:85:
82:11:40:04:2d:fe:0f:b8:32:07:0b:d9:77:34:d4:bb:06:58:
78:e7:25:a8:03:13:70:3e:43:73:fb:e8:f5:23:5d:bd:e6:55:
5c:80:49:37:63:f4:90:35:ab:95:f4:8a:fd:95:53:d9:4d:c1:
71:79:86:b9:af:88:37:a0:2a:14:64:a3:1d:57:b0:db:b4:e1:
90:0a:71:82:40:2a:81:7b:ef:39:38:3d:e0:7c:10:1b:4d:53:
af:66:19:46:f4:45:5c:98:f6:47:3b:e8:7d:1c:c5:e0:06:91:
cf:b7:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:34 2025 by rpki-client