Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6ECE1F2DA2911EFBBD11951762E951A.roa
File: C6ECE1F2DA2911EFBBD11951762E951A.roa (raw, json)
Hash identifier: VnoWpiBqGcpsNh1wJeF6HdqiMRfw3bsDeL5FbrbWTa4=
Subject key identifier: 4A:2F:E6:ED:FA:BA:D0:D3:59:57:8B:84:A7:1A:67:19:EB:84:5E:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014444
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6ECE1F2DA2911EFBBD11951762E951A.roa
Signing time: Fri 24 Jan 2025 08:04:04 +0000
ROA not before: Fri 24 Jan 2025 08:04:00 +0000
ROA not after: Wed 05 Mar 2025 08:04:00 +0000
asID: 202656
IP address blocks: 154.222.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83012 (0x14444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:04:00 2025 GMT
Not After : Mar 5 08:04:00 2025 GMT
Subject: CN=67934974-2db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:28:c4:9c:b5:84:a2:ef:d9:71:18:f0:77:
cf:52:5b:75:71:fe:2b:14:15:e6:0e:5f:de:d3:41:
59:5b:eb:55:35:c4:df:8d:09:ad:b9:e3:eb:01:75:
af:3a:65:bc:23:d0:32:15:b2:8f:bc:2c:0a:63:dd:
6e:f8:c3:c1:4c:36:b4:a2:0a:cf:ab:f4:73:a8:7c:
5b:f1:1c:60:80:52:fa:2e:ad:e3:a7:ad:32:99:4a:
7a:25:48:62:98:94:fb:51:12:66:18:e1:d2:dd:4c:
1a:e5:8d:0d:73:ab:cd:61:11:87:aa:fa:09:ff:54:
da:32:34:9d:9b:fb:8a:e8:bf:9d:0a:62:3b:44:1d:
0d:bc:19:64:79:5a:7b:f4:3a:33:c3:c7:6e:92:aa:
68:a1:d3:9f:47:84:1d:33:08:72:d2:f0:8a:9e:4f:
fb:ac:19:fb:cd:77:08:7f:7f:df:3f:3c:7a:20:f8:
cc:e1:d2:c6:0c:21:62:e9:74:56:06:29:64:fe:b4:
62:b1:33:e4:57:de:95:39:4a:2d:e0:80:74:aa:c7:
76:4b:c3:1c:1c:c6:2b:19:27:b5:98:3d:25:b1:1f:
74:f8:fa:41:95:0e:19:58:30:41:bf:72:70:42:48:
4c:ff:d1:22:2e:26:d8:e4:8e:04:b8:55:b6:bb:79:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2F:E6:ED:FA:BA:D0:D3:59:57:8B:84:A7:1A:67:19:EB:84:5E:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6ECE1F2DA2911EFBBD11951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:66:82:5b:c9:d5:b3:ae:21:3b:36:25:88:43:fc:47:69:ff:
a8:6f:18:92:65:5e:54:28:9a:9a:0c:b7:25:6e:90:14:2b:24:
46:c8:09:23:6c:30:c0:1d:0f:1c:ba:ee:0e:4b:b5:bb:1e:9d:
ea:37:24:38:f7:4d:13:92:1a:4b:32:fa:8c:7a:ec:ee:66:be:
ac:d5:ce:0f:85:a9:ea:88:28:43:4b:5f:f4:c1:a1:12:f7:bc:
cb:f2:0d:c9:49:40:eb:7d:52:ec:cb:ce:61:6b:03:50:f7:06:
08:55:6c:20:d6:d1:14:a2:03:31:1c:0b:73:70:1f:d9:cb:e5:
d9:b4:9f:eb:2b:da:49:6e:53:27:33:69:e1:be:ec:9e:10:12:
1c:11:b5:51:33:f7:9c:de:4f:62:ee:f5:bf:94:76:23:76:69:
ea:97:e7:b7:8b:de:bd:28:bc:f0:76:03:dc:b0:ec:5a:3a:3f:
37:ff:23:f2:fe:8a:ce:f4:1e:78:cd:1d:32:09:78:22:bd:83:
05:2d:7a:d5:96:a9:57:52:4d:8e:c9:47:8b:5f:a9:ef:b8:7c:
ea:18:eb:b7:55:ba:86:fd:7e:1c:f2:b1:5a:46:e7:c0:c3:a3:
9c:3c:4a:cd:cb:56:60:cc:27:bd:77:3b:37:82:41:42:a5:d8:
a7:36:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:47 2025 by rpki-client