Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2B78D8DA2E11EF8701AE72762E951A.roa
File: CF2B78D8DA2E11EF8701AE72762E951A.roa (raw, json)
Hash identifier: 3ZhTZSqMewPSZQsofWoQec4iQsSgHD9WB8WNnP8U8MU=
Subject key identifier: AA:77:33:E1:BD:C8:A2:EC:EE:0D:3A:27:E6:75:F2:C4:0B:5E:B6:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01447D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2B78D8DA2E11EF8701AE72762E951A.roa
Signing time: Fri 24 Jan 2025 08:40:05 +0000
ROA not before: Fri 24 Jan 2025 08:40:01 +0000
ROA not after: Wed 05 Mar 2025 08:40:01 +0000
asID: 202656
IP address blocks: 154.221.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83069 (0x1447d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:40:01 2025 GMT
Not After : Mar 5 08:40:01 2025 GMT
Subject: CN=679351e5-97de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:c7:95:8c:ae:17:bf:1d:c7:23:83:6d:25:
77:6b:3e:f8:ce:b2:2e:6e:a6:4a:e2:a6:c1:18:d6:
76:d8:d8:68:88:65:3f:0b:a4:c2:08:56:72:7a:96:
f0:e8:5c:ab:e0:14:cd:8c:41:52:ae:50:dc:4e:97:
8a:b2:f6:0e:62:13:18:4c:bb:0f:28:19:15:4b:01:
30:04:51:f7:f5:e7:ed:41:63:7a:e0:f0:43:32:e6:
2a:72:c7:f0:16:76:4f:2f:f9:c6:a6:e2:88:7b:38:
c6:0e:62:36:bc:42:dd:72:23:33:94:44:5d:6c:51:
0b:05:fe:63:c3:fa:3a:a3:5c:c7:01:5c:a9:6d:aa:
19:12:5c:1c:c9:22:3b:6e:fc:c9:2b:ae:78:9d:81:
a6:ea:9d:bc:6b:8b:ee:ad:eb:6f:21:65:fc:a0:44:
0d:d2:92:97:5f:47:a8:ff:cf:ac:a3:f7:2b:77:d6:
a2:ae:4b:00:54:46:b0:28:6a:76:a5:22:9a:0a:db:
24:5e:2e:2c:df:2e:3e:e3:d3:77:8f:ae:77:65:46:
58:1d:4f:b3:a6:19:f5:90:59:3d:8a:b0:3b:df:7d:
e8:6b:2b:49:e7:e1:fd:5f:eb:1f:c9:3c:dc:05:84:
b4:30:26:6d:cb:d9:a6:31:37:c2:77:da:2b:e8:32:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:77:33:E1:BD:C8:A2:EC:EE:0D:3A:27:E6:75:F2:C4:0B:5E:B6:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF2B78D8DA2E11EF8701AE72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e9:d4:51:a7:8c:c4:7e:c8:7b:2c:38:28:45:1e:ea:3c:97:
46:f2:ea:d2:13:0a:92:d1:9c:8d:a5:86:51:f6:60:7d:09:b0:
a6:65:ab:e8:1a:ce:82:da:95:ad:b7:03:d8:7b:50:e7:cc:8e:
9b:0b:a7:80:b8:1e:25:cb:4f:d2:9f:ac:4d:e3:18:8f:d5:fa:
67:b1:b8:9a:7e:6b:75:3f:05:d3:d1:c5:b2:5c:a0:56:e1:fc:
9c:b2:36:9a:8f:8a:34:7f:4c:9b:76:43:80:57:ea:12:58:ca:
27:48:42:87:61:3c:97:8c:e8:5c:af:f0:20:4b:14:df:a6:04:
90:e7:06:b1:5c:6d:e7:e2:36:4c:c3:f0:34:25:ce:9f:e6:2c:
95:bb:98:04:e2:61:21:84:71:86:7d:a9:9f:54:d0:67:ba:8f:
0e:47:5e:c3:37:97:30:b0:c6:7f:2a:04:3c:f6:73:8d:0a:d2:
23:df:f4:ad:ed:ea:a2:30:90:86:46:62:ce:54:bd:18:eb:87:
e0:60:fc:7d:cb:a9:89:75:6e:ba:a0:97:88:1b:7a:7a:a6:71:
29:97:fd:50:80:a6:18:da:53:5b:dc:4c:fa:d3:7c:16:ad:ea:
75:d0:a9:27:7f:38:d9:87:25:55:2e:56:55:cf:25:dc:7d:32:
78:ed:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:37 2025 by rpki-client