Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7D05AEDA4D11EFB69DBB44762E951A.roa
File: BF7D05AEDA4D11EFB69DBB44762E951A.roa (raw, json)
Hash identifier: YQPqyx/dCpgQ8cA8yTlxoFFLftedza9fDJq2bLIYpyg=
Subject key identifier: 37:12:98:34:E2:60:05:8F:D0:8C:D2:0C:C5:F3:8C:73:D6:8F:F3:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7D05AEDA4D11EFB69DBB44762E951A.roa
Signing time: Fri 24 Jan 2025 12:21:33 +0000
ROA not before: Fri 24 Jan 2025 12:21:30 +0000
ROA not after: Sat 01 Mar 2025 12:21:30 +0000
asID: 44559
IP address blocks: 154.205.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83635 (0x146b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:21:30 2025 GMT
Not After : Mar 1 12:21:30 2025 GMT
Subject: CN=679385cd-e8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:08:7a:14:f6:5d:fc:60:3c:c5:f6:63:30:
2b:c1:93:9f:d5:f9:88:59:ef:0f:3c:09:07:09:f2:
ac:0d:01:4c:d4:9b:7e:92:8a:a4:d4:fd:c4:66:1b:
ed:af:2f:0b:0b:43:89:5e:a9:41:56:de:f5:86:42:
2a:7b:eb:bb:67:0c:18:10:f5:95:1f:e3:bd:e6:ea:
5c:71:7d:2a:b0:88:80:23:50:c4:4f:59:7e:f6:d5:
bb:b9:3f:47:10:bb:eb:19:93:b9:24:48:4c:ce:d5:
31:be:dd:96:c5:0d:e7:33:03:76:6e:61:33:14:d4:
56:a6:9e:d3:40:65:52:97:71:69:39:bb:cb:42:08:
da:8c:1b:e1:68:0c:06:00:db:4a:36:1e:1e:7a:e4:
94:bd:a3:84:07:32:ba:de:e7:4c:bf:14:4d:33:97:
3c:e7:98:20:a5:3a:93:70:6a:ca:95:12:37:80:16:
29:4b:58:23:9c:a4:82:52:c6:94:c8:64:80:7e:02:
75:99:22:95:8e:04:72:ef:ee:c9:54:c7:b7:d4:8c:
d4:9f:8c:66:e0:09:51:6f:c5:d6:48:60:b2:cc:95:
85:ed:b2:ad:b5:0d:49:ab:37:ca:71:d5:b8:f6:7d:
34:8e:3e:61:f2:57:b0:d4:be:29:87:07:d3:9f:74:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:98:34:E2:60:05:8F:D0:8C:D2:0C:C5:F3:8C:73:D6:8F:F3:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7D05AEDA4D11EFB69DBB44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5c:bc:d8:79:6b:bb:f3:01:84:5f:33:99:eb:d4:1b:a4:7e:
04:66:5d:cb:90:96:94:4d:e0:43:06:12:eb:51:11:22:d0:2a:
71:4c:de:f9:b2:ac:ce:7c:75:e4:43:65:76:1e:57:64:40:a2:
8d:51:fe:ad:64:da:0b:4b:2c:d0:4d:17:95:54:eb:f8:ed:d8:
b4:23:67:7c:a9:39:2d:94:cb:e8:95:d9:8a:e7:63:dc:3b:48:
61:9b:65:81:6c:57:6f:32:48:e0:9b:9d:a6:77:32:9c:f8:fe:
e4:14:de:e9:d1:25:7a:29:4f:be:dd:bc:9a:3b:c2:bf:82:d3:
0b:47:06:9b:05:36:4a:5c:e3:2f:70:38:97:10:79:c1:79:71:
f0:18:48:1e:47:d9:ea:5b:b5:80:80:de:c4:b1:aa:10:47:10:
08:b8:f0:4b:f4:74:40:6c:f4:a6:21:f0:4c:d1:5f:75:f3:0d:
45:29:04:4c:6a:37:d3:40:40:8b:fe:c9:55:8c:a7:c8:14:f7:
e0:0a:2f:17:00:c8:98:fd:1d:5f:5d:a0:75:95:73:77:37:2f:
10:39:ea:82:51:3f:19:be:c5:72:84:00:c6:59:f0:f5:6a:96:
47:ca:33:a4:1d:3c:73:af:5d:98:1a:54:99:2e:cd:7d:d6:26:
a6:48:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:31 2025 by rpki-client