Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE002CCADA2411EF8C8701AF762E951A.roa
File: BE002CCADA2411EF8C8701AF762E951A.roa (raw, json)
Hash identifier: Gkq3Zg6Av7+ofjOOvHq4ahBDUGSq+anaA8yMTGPKK1s=
Subject key identifier: 3B:0D:4B:EE:F5:01:74:BC:24:2B:25:C4:C6:2D:DE:EC:A6:3D:84:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE002CCADA2411EF8C8701AF762E951A.roa
Signing time: Fri 24 Jan 2025 07:28:01 +0000
ROA not before: Fri 24 Jan 2025 07:27:58 +0000
ROA not after: Wed 05 Mar 2025 07:27:58 +0000
asID: 48031
IP address blocks: 154.222.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82966 (0x14416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:27:58 2025 GMT
Not After : Mar 5 07:27:58 2025 GMT
Subject: CN=67934101-690b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:2f:7b:f5:1e:44:9d:2d:c8:12:30:d0:1b:
f4:e8:c6:11:d8:32:cc:c7:74:af:5b:93:77:e2:ec:
21:80:de:78:43:82:64:a1:be:2b:e6:4a:f0:7a:dc:
25:c6:8d:2b:95:bb:f0:a5:73:94:10:90:b0:44:ee:
25:1b:77:ee:64:71:c4:ae:80:91:52:6f:64:14:eb:
e0:f4:80:9d:92:77:75:ba:1b:85:da:4b:19:29:ef:
b8:4a:cd:61:6d:30:12:6b:f4:52:95:8b:67:ec:d8:
65:20:20:3e:ab:88:30:67:b3:44:3d:f0:e5:cd:b8:
7a:a5:aa:8d:3d:60:e2:1f:cb:90:a2:ff:47:4f:d9:
31:5c:66:eb:53:30:ec:6b:ef:27:e2:f2:14:32:54:
32:e7:bf:13:ac:1c:84:53:8e:ac:42:7b:98:5c:df:
1f:7a:2d:9d:d5:33:d3:2c:6a:79:60:b8:1f:52:d1:
56:7e:69:b4:1d:d6:b7:c9:c5:53:26:41:d3:a8:ba:
32:c9:e5:17:da:2d:7b:4b:83:4b:94:50:4e:c7:3b:
6e:63:2b:eb:a1:f1:bf:ba:8b:8a:af:3b:20:4b:21:
33:5b:b3:66:20:3c:84:eb:f3:02:99:b1:64:76:1e:
e5:f2:d9:55:82:8d:b5:fe:de:8c:31:4a:6f:3f:74:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0D:4B:EE:F5:01:74:BC:24:2B:25:C4:C6:2D:DE:EC:A6:3D:84:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE002CCADA2411EF8C8701AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:36:e0:50:d3:80:8b:00:c5:a0:3e:92:57:74:8d:b8:6a:
2a:d1:a1:28:3e:46:67:57:20:6d:61:20:b3:75:6e:7c:2e:cd:
c4:c5:8e:6b:21:e8:e6:44:26:67:a9:11:3c:a1:44:e9:21:10:
09:47:54:ba:6e:57:41:24:92:d4:98:51:9d:04:ca:d9:ce:98:
79:b5:b1:9d:3a:27:05:41:a5:4f:1b:34:40:08:39:cd:c4:21:
a9:e1:a5:0f:f0:35:37:46:d9:bb:41:3d:79:56:1c:6d:b0:ff:
dc:0a:5f:68:70:11:17:8c:54:01:18:e5:0f:c2:e1:41:21:d2:
7f:bb:dc:f7:5a:a9:c2:d0:0e:57:be:4e:6f:f5:63:d7:ca:4a:
04:a6:cf:09:63:85:57:6a:74:7a:7a:0f:87:9c:92:e6:2e:0c:
f5:39:b6:87:7d:69:81:2e:9e:ee:3b:26:bb:66:09:61:b8:07:
43:75:98:de:d6:f5:4e:03:95:63:b7:70:0d:3b:84:ba:0f:35:
d8:36:c7:bb:04:99:9e:4f:3d:ff:b1:0a:95:05:ee:be:1b:80:
8e:2e:b7:b3:b2:02:42:b7:8c:cc:e7:b8:33:81:88:50:c7:d2:
86:c1:03:7a:27:f5:d0:6e:85:bf:ae:c7:41:e3:01:0d:ff:70:
ad:43:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:23:57 2025 by rpki-client