Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1E1C12DA4011EF81A6916D762E951A.roa
File: BB1E1C12DA4011EF81A6916D762E951A.roa (raw, json)
Hash identifier: 4hCrZzOi/QyQRU9KpdpRwxbI6ABkzI/1V7TavlvJiB0=
Subject key identifier: 73:AB:CA:AD:61:22:06:34:D4:29:3E:F9:34:A4:04:B3:51:6C:E8:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1E1C12DA4011EF81A6916D762E951A.roa
Signing time: Fri 24 Jan 2025 10:48:22 +0000
ROA not before: Fri 24 Jan 2025 10:48:19 +0000
ROA not after: Wed 05 Mar 2025 10:48:19 +0000
asID: 202656
IP address blocks: 154.219.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83388 (0x145bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:48:19 2025 GMT
Not After : Mar 5 10:48:19 2025 GMT
Subject: CN=67936ff6-704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:de:95:89:ab:e5:00:f6:fe:48:ea:16:c9:
06:fc:0f:c5:eb:40:b2:48:c1:e6:f9:17:50:c6:54:
89:e8:be:03:50:5e:5c:1d:e6:37:43:9b:6f:f9:d0:
61:3d:b9:05:42:49:76:b8:2c:e8:33:43:17:1d:1a:
0f:dd:70:20:91:9c:b7:db:63:6a:02:db:34:b9:1a:
0c:41:28:a3:d1:dc:ed:2b:68:06:93:d3:e6:75:70:
dd:d6:36:b3:79:03:19:5e:b6:8c:1a:5c:bd:0b:89:
9b:71:e4:71:36:44:58:d5:55:a2:5f:54:94:c6:46:
19:0e:58:e4:62:1f:22:f9:f3:b9:a8:36:ce:47:9f:
70:67:08:6c:7c:ad:8e:e2:d2:46:80:45:58:7c:bf:
a6:ff:b9:56:de:0a:5e:29:c5:f4:db:bf:ef:b0:db:
d4:ae:41:8a:15:f1:bc:a8:40:45:ac:03:25:3d:aa:
4c:b9:ac:8e:d7:91:cb:78:b7:21:7e:13:22:68:9e:
47:5b:d3:e6:5e:fd:8b:84:d7:2e:5a:02:b0:a4:a3:
93:27:6a:0b:5a:c8:8e:33:8a:31:e2:a6:e5:b2:08:
08:5a:8e:83:6d:84:86:c2:41:5e:bd:c5:91:de:a8:
5c:60:83:6b:f0:bc:88:59:fc:f3:24:63:ed:2f:da:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:CA:AD:61:22:06:34:D4:29:3E:F9:34:A4:04:B3:51:6C:E8:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB1E1C12DA4011EF81A6916D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:27:1b:1d:43:27:db:41:21:f3:26:ad:a2:d2:25:f1:e5:a9:
3e:56:76:2c:51:1e:9d:8b:34:b9:c4:c7:38:a6:74:48:8c:71:
77:b5:86:e6:5c:0c:21:ab:0b:24:aa:88:aa:3c:a2:8e:81:98:
ff:4a:4c:2a:03:35:61:01:c8:07:97:74:9c:72:d4:f4:17:32:
a7:b4:fc:67:b1:d5:b1:86:e0:9b:19:07:a9:49:59:e3:33:d7:
48:a3:b0:48:6d:60:23:cc:81:61:c2:b8:d3:d2:f2:f7:17:97:
d0:6e:b2:be:08:22:bb:e3:17:66:8f:4d:72:0e:60:d9:e0:86:
1d:e0:54:e4:0b:b6:c7:23:87:c8:26:b6:c2:c1:bd:96:83:23:
51:76:b6:19:5f:9f:f9:65:50:23:7f:4c:42:d8:ac:84:71:ee:
6a:c5:52:f6:54:44:5f:7d:9e:bb:fe:19:e9:fb:03:c6:84:da:
a7:0c:60:58:d1:57:6b:05:76:c2:25:d4:1b:c4:66:6d:b6:83:
f6:ae:91:13:d3:72:43:c4:21:79:6a:e3:19:99:a5:61:d4:ac:
64:7d:f6:1d:af:8d:bb:14:90:60:23:66:97:84:5e:74:7d:19:
21:9c:75:d6:38:16:cc:2c:10:75:90:46:d4:5f:45:ba:4b:ca:
d3:9b:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:37 2025 by rpki-client