Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FB42CDA5C11EF96F93FAA762E951A.roa
File: CE5FB42CDA5C11EF96F93FAA762E951A.roa (raw, json)
Hash identifier: /1kWinJev3fbhx8ROvW1fJW/UPl2nV6Sq52h5rzdfQg=
Subject key identifier: AE:7C:AB:F3:CD:0F:41:D3:60:21:C4:6D:5F:F5:94:84:68:EE:82:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FB42CDA5C11EF96F93FAA762E951A.roa
Signing time: Fri 24 Jan 2025 14:09:21 +0000
ROA not before: Fri 24 Jan 2025 14:09:17 +0000
ROA not after: Wed 05 Mar 2025 14:09:17 +0000
asID: 48031
IP address blocks: 154.222.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83950 (0x147ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:09:17 2025 GMT
Not After : Mar 5 14:09:17 2025 GMT
Subject: CN=67939f11-9f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:98:f3:b0:73:e2:60:c2:f2:11:2a:1c:7d:
11:fe:14:86:8b:3f:de:aa:70:1d:fd:21:8b:83:62:
6c:f3:11:a4:89:b1:a4:51:a3:cf:23:22:28:be:23:
ce:40:b5:13:7f:6b:13:af:05:e6:1f:0b:fa:9b:38:
75:b3:ae:c8:be:19:3d:35:35:20:1b:7c:41:f8:46:
2a:f8:b9:14:6c:e2:b6:0f:39:25:0c:92:a4:14:fd:
86:89:58:ea:4c:51:e6:c9:50:0f:f8:e8:a6:e1:68:
ec:f0:d9:34:1c:ce:b4:15:35:7a:62:e8:32:1c:7a:
04:f7:6c:1d:3b:06:93:34:8d:48:a1:19:67:b4:1a:
a4:7a:1d:2d:35:2e:08:5f:38:16:e1:b9:52:0d:ba:
90:a4:d6:08:cf:fd:cb:26:3a:45:63:09:88:25:75:
db:9d:43:b7:57:ab:4b:68:3e:47:80:71:19:52:60:
c6:f1:a5:80:77:17:6e:84:46:07:5d:8b:27:05:16:
41:be:67:4d:0a:61:94:85:3e:e0:4a:c8:fd:d7:f4:
b7:80:ee:69:98:99:2a:fc:56:4c:52:52:0d:5c:44:
6a:96:25:1b:b9:93:b6:33:5b:a8:1b:bb:ea:87:bb:
23:c6:c7:74:e0:fb:c3:98:66:f0:df:be:94:db:c2:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7C:AB:F3:CD:0F:41:D3:60:21:C4:6D:5F:F5:94:84:68:EE:82:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FB42CDA5C11EF96F93FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.241.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:dd:35:27:66:70:cb:4d:c5:06:47:4e:f5:78:46:a4:da:22:
e8:32:61:b9:93:29:9d:38:2d:e5:0b:8a:74:90:4b:34:25:26:
7b:33:db:a6:de:83:41:ad:fa:f6:61:28:d5:4a:d3:21:57:2a:
03:8e:6c:4c:6d:9e:9b:f3:46:39:81:59:90:a9:61:ed:b4:1c:
15:b3:59:ae:31:6c:75:c0:7f:92:77:c5:84:b0:4d:f0:7e:e0:
1d:c3:64:d8:7e:5c:1c:ad:2a:e7:21:85:73:b8:1d:f4:21:eb:
20:f6:d7:ea:49:9d:10:2f:16:83:7b:74:0c:8f:0b:88:4b:82:
9a:dd:59:42:5d:e4:b5:b9:2f:1b:fb:41:77:1a:98:81:ef:9f:
94:01:47:d3:45:b7:53:e7:e0:49:c7:6f:00:e9:af:4f:09:b5:
8a:39:37:3e:fd:4c:70:59:7f:34:87:d1:f4:2f:01:cd:e2:95:
b8:e0:45:59:1e:2c:4d:81:6d:07:88:66:5b:96:48:8c:79:fa:
1e:7c:ad:69:6a:a1:26:39:8b:fe:c4:b0:70:ca:9b:5e:9b:18:
20:30:2b:83:f4:d9:30:92:d4:16:8d:12:cb:99:00:39:13:d8:
31:72:dc:c0:55:48:ce:52:52:17:34:53:4d:f4:f6:17:52:1b:
ac:7a:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:52 2025 by rpki-client