Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9276C82DB3011EFB3DCC944762E951A.roa
File: C9276C82DB3011EFB3DCC944762E951A.roa (raw, json)
Hash identifier: VVv772XHCGf9lj47LVQ+nCxJ6HB7reZHRxFpm6zKAco=
Subject key identifier: CD:C6:04:66:73:8B:88:94:12:CB:1F:84:E7:4D:18:3E:7D:57:4B:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9276C82DB3011EFB3DCC944762E951A.roa
Signing time: Sat 25 Jan 2025 15:26:45 +0000
ROA not before: Sat 25 Jan 2025 15:26:41 +0000
ROA not after: Fri 07 Mar 2025 15:26:41 +0000
asID: 63139
IP address blocks: 154.223.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84478 (0x149fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:26:41 2025 GMT
Not After : Mar 7 15:26:41 2025 GMT
Subject: CN=679502b5-6d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:d5:2a:de:0c:6e:f9:f0:a7:15:c3:eb:ce:
fe:18:ea:bf:a3:03:ea:d2:f6:82:7b:6f:12:66:7c:
b5:0c:ec:88:84:53:29:2e:02:68:37:e7:f1:a5:b3:
66:db:6e:d9:2a:90:53:b9:30:19:07:94:d7:b8:4f:
aa:4d:00:c7:9e:5b:36:71:b6:98:5d:5f:ee:f4:50:
cf:b0:dc:42:c6:f6:1c:99:60:04:39:c2:df:46:e2:
87:9b:c7:81:7b:e1:47:7b:0a:a2:88:bb:59:08:4d:
8b:ec:5d:67:be:c2:6d:a3:9d:b9:ba:b3:42:d1:b2:
02:eb:f8:7c:51:31:01:76:b1:66:f5:ec:d8:2a:1a:
5e:56:02:d3:83:38:b4:ef:f0:b0:23:23:ae:0b:29:
4e:09:5b:53:36:d4:c9:ae:6d:cc:fc:47:85:a4:81:
b4:26:c7:ea:cf:07:09:0b:02:aa:5e:4a:51:c9:c4:
d5:46:ac:37:8d:70:1f:18:8e:44:ce:b1:2b:62:7d:
96:37:2b:62:6e:54:44:7c:5f:70:46:8a:02:67:fd:
5e:6d:42:b6:38:a0:3b:d6:8c:9a:5d:e1:61:bb:e1:
6f:37:ac:c8:ff:39:0d:25:59:d5:16:2a:28:26:7b:
14:c6:2c:55:4a:22:39:66:f0:8a:00:c1:01:20:9d:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:04:66:73:8B:88:94:12:CB:1F:84:E7:4D:18:3E:7D:57:4B:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9276C82DB3011EFB3DCC944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:97:4f:1a:21:b3:f8:ff:3c:8f:1c:c0:dc:00:e9:c1:4f:e2:
28:4e:32:b2:1b:ef:28:6a:75:5b:84:70:36:10:18:e1:14:bd:
a1:01:78:a2:ef:3e:ed:c1:0a:28:fb:04:b2:33:06:62:88:bf:
f9:b7:34:5a:38:74:6d:a3:13:27:57:b9:33:48:92:49:cc:26:
50:a0:dd:10:24:a3:c6:d3:eb:2d:af:a6:59:74:63:20:7a:f9:
da:fd:59:ae:ca:22:64:b1:c8:cf:94:98:cf:d4:1e:d4:e7:25:
2e:92:1c:a2:4d:f7:0c:e3:19:ec:af:2b:76:ec:b6:f4:1a:ca:
53:49:77:26:7f:c6:fb:75:dd:73:bf:da:97:55:fc:d1:d7:92:
86:8d:21:b2:8b:6d:ce:1b:66:b6:c5:19:0a:6d:6a:aa:3e:ae:
b3:1f:e6:25:c3:c7:41:ec:de:fe:2c:8a:b7:42:e0:67:dd:9b:
a0:e9:70:b8:f1:f3:cf:13:be:86:1f:1d:7c:74:13:3c:d5:df:
07:2c:c4:51:f5:50:97:68:7b:12:58:cb:c1:28:f8:ce:80:4e:
b8:b9:0a:54:0f:80:d1:d1:c8:11:5f:fb:47:21:4b:2a:52:20:
ce:c8:b9:56:67:6e:c9:ef:2e:df:66:06:b8:92:99:28:7d:59:
d6:36:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:35 2025 by rpki-client