Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2EB632DA5411EF9D0EB574762E951A.roa
File: BE2EB632DA5411EF9D0EB574762E951A.roa (raw, json)
Hash identifier: qBQrAXBzAP/KV0nb5tOifeG3DvbPS0VG1XPBZVWzwx4=
Subject key identifier: 6F:FF:26:F7:1E:D1:E6:51:F9:76:24:CF:AF:B6:03:60:D3:C7:5E:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014748
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2EB632DA5411EF9D0EB574762E951A.roa
Signing time: Fri 24 Jan 2025 13:11:37 +0000
ROA not before: Fri 24 Jan 2025 13:11:34 +0000
ROA not after: Thu 27 Feb 2025 13:11:34 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83784 (0x14748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:11:34 2025 GMT
Not After : Feb 27 13:11:34 2025 GMT
Subject: CN=67939189-7f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:5a:e4:10:b1:20:66:4b:07:da:e9:e5:51:
36:3f:20:1c:bf:c2:51:ee:ab:73:b4:b3:0e:34:68:
b5:1d:5a:ed:85:ff:1d:99:25:cb:fe:87:e4:98:98:
ad:6f:a5:3e:66:4f:82:bc:38:62:ff:7d:51:b5:d0:
8d:1e:19:bb:f5:76:b6:9f:12:01:c0:2b:c1:c0:cd:
20:63:4e:07:7b:e5:30:ce:63:eb:a1:4f:3d:7d:e9:
04:fa:de:32:10:54:13:a2:b1:1a:47:4f:64:02:ff:
d3:cb:21:68:ce:f2:68:6b:f5:67:52:b0:98:ef:ec:
7b:81:34:4a:d5:a8:28:3b:6e:56:0f:f4:72:79:18:
23:e6:ed:6d:66:46:b3:84:68:71:80:73:e4:5f:0c:
8b:76:f0:98:bc:64:6d:19:e5:cd:1b:37:94:07:58:
ca:af:95:d7:7a:06:3c:d1:ad:aa:e8:38:9c:c9:85:
66:f0:c0:d5:45:21:15:bb:20:9f:4c:45:f4:2a:18:
e9:dd:dc:3d:c0:6d:02:d4:ad:68:4d:58:e2:38:a2:
3a:5a:4c:8b:c1:e2:32:29:d5:4a:8e:f1:26:8e:c5:
91:a2:25:9a:98:0d:d0:18:65:cb:fd:f2:52:3e:23:
84:cb:d7:e9:fa:26:77:3a:bd:ef:8b:fb:57:3e:da:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:26:F7:1E:D1:E6:51:F9:76:24:CF:AF:B6:03:60:D3:C7:5E:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2EB632DA5411EF9D0EB574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
41:36:a2:d1:7f:23:b6:fd:a3:0e:fa:bb:b3:f8:b9:28:81:ae:
36:b7:3f:de:c6:59:ab:a3:2e:7d:e4:57:35:fa:d4:5c:1e:4a:
e4:b2:fe:fd:9f:49:7f:11:c4:83:1b:d1:35:7d:02:e2:5f:bf:
9a:20:92:c1:e0:7a:d5:62:aa:79:8c:dd:cf:9b:95:55:e6:bf:
34:b6:98:05:b4:4f:e3:ea:c0:fa:a8:ef:eb:da:b3:9a:fd:59:
e8:a4:3d:9b:2c:0f:14:e6:64:7b:91:2b:3d:12:81:98:eb:40:
f7:0f:9a:0a:80:73:04:bd:7f:70:78:53:c0:b4:4f:0e:d1:79:
35:85:ea:fe:2e:f8:5a:cd:f7:9c:0b:61:fc:8b:42:b0:d7:f5:
c0:57:e0:92:73:b6:2e:32:20:a6:63:c8:fa:48:10:ba:fd:90:
14:d2:cd:30:75:fd:f4:4a:4b:00:b4:b0:83:0e:56:4d:8c:b8:
5e:43:1a:e2:1f:3a:20:63:25:8c:5e:32:e4:69:7f:13:4f:95:
06:cd:86:81:ab:d0:d6:c9:78:17:7a:5f:1b:fa:b2:9e:69:57:
ec:dd:a7:e5:9a:11:f7:e9:b3:8e:f4:61:44:43:1e:c2:91:18:
bc:e6:26:e8:b5:50:6a:78:9e:69:da:07:1e:9e:1f:ce:02:f5:
89:63:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:06 2025 by rpki-client