Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC88A52B5F911EFB9545087762E951A.roa
File: BEC88A52B5F911EFB9545087762E951A.roa (raw, json)
Hash identifier: xSigj/eFOjOCoFhGlMpBzG6s3xlUayMdyYsbnegpD0k=
Subject key identifier: 01:5C:26:8C:95:24:E4:F0:DF:3C:D0:F4:DE:0F:59:89:46:A5:A7:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC88A52B5F911EFB9545087762E951A.roa
Signing time: Mon 09 Dec 2024 06:49:32 +0000
ROA not before: Mon 09 Dec 2024 06:49:29 +0000
ROA not after: Thu 06 Feb 2025 06:49:29 +0000
asID: 149014
IP address blocks: 154.223.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72123 (0x119bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 06:49:29 2024 GMT
Not After : Feb 6 06:49:29 2025 GMT
Subject: CN=675692fc-60f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:2a:fa:22:28:3e:6d:fd:39:65:cf:4b:1a:
64:7f:1d:d1:34:48:82:c4:8c:ee:6c:66:30:0d:dc:
f0:b7:ae:9e:04:16:ab:e3:1b:79:c1:99:d3:a8:b5:
36:2e:bc:09:8b:1f:ef:01:bc:c8:98:f3:1f:75:58:
8a:cd:0d:41:4c:16:99:6b:9d:d0:f3:7e:5e:ee:6c:
13:e6:df:48:75:4a:57:b8:17:ca:fb:13:da:1a:ce:
7d:17:1f:53:eb:a1:ca:c1:4b:56:b2:d8:b8:a9:a2:
9a:27:8c:9d:f2:78:e3:63:e1:af:fc:e2:6a:21:78:
cd:88:8e:54:97:28:a6:b2:d3:5d:dc:34:e1:f5:ac:
0a:07:13:92:72:83:a0:ef:55:6d:f6:7b:da:c2:24:
ff:43:57:42:8c:b0:c4:9d:d1:67:a0:17:02:b7:70:
b4:ec:66:2a:a9:3e:3d:05:9a:34:92:0b:0d:1f:41:
d0:90:3a:c1:70:5e:be:b9:5c:39:7e:8c:7f:48:00:
6c:ef:2c:7d:12:ad:b3:a9:e3:41:8c:53:7a:4e:81:
68:1a:6f:e0:a4:0f:07:29:17:a8:d2:71:cb:f6:58:
24:8a:1f:1f:b7:8d:66:c2:4f:63:25:da:7b:9f:ca:
cf:86:08:e3:0b:1b:4c:4a:80:27:1e:f2:2c:93:66:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:26:8C:95:24:E4:F0:DF:3C:D0:F4:DE:0F:59:89:46:A5:A7:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC88A52B5F911EFB9545087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:25:22:42:e1:19:40:c5:2a:4d:5d:69:84:4b:b6:1b:01:a2:
a7:99:eb:65:01:80:e5:e6:20:aa:67:5d:99:e3:93:96:cb:83:
e4:05:ee:ee:4f:c8:62:3a:ba:37:fd:63:a6:1d:1d:2d:e1:f7:
c7:67:8f:c6:7d:92:06:c3:d0:a5:9e:fb:13:98:bc:8e:fb:84:
a5:45:58:6d:eb:17:9c:ab:ea:18:75:ad:ed:cc:87:d8:18:fd:
bd:ac:ef:49:ca:55:a6:aa:af:a2:7e:09:59:56:fa:33:af:37:
36:96:38:f9:d5:9e:7c:8a:4c:2f:35:9b:67:75:de:dd:40:9d:
dc:b6:4d:27:d8:6d:6c:78:e1:c1:10:75:8e:2e:aa:d0:7e:d6:
4c:56:46:44:1e:91:42:dc:b6:6f:9a:35:c4:0a:a1:4f:3c:35:
62:43:cc:28:05:c4:f4:89:c9:57:cd:3f:0f:10:76:6c:60:d4:
db:ae:fe:28:d4:ae:f1:e6:fd:f5:cb:5d:7e:b9:39:2e:cb:6f:
82:d3:48:fb:3b:87:cd:df:9f:a8:ab:f9:44:63:05:89:4d:0d:
fb:61:04:c2:6b:b4:cb:1d:f0:bb:49:b1:0a:04:e8:19:1b:f7:
be:68:80:d3:e2:ca:a6:97:ac:b6:c6:16:27:36:10:a0:4e:80:
1f:87:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:40 2025 by rpki-client