Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C9E94DB3A11EFBFA7D187762E951A.roa
File: D16C9E94DB3A11EFBFA7D187762E951A.roa (raw, json)
Hash identifier: p8PugKuqrjnaLSERzUxEjHhqmYhQF4Xsnfm+3id/Vig=
Subject key identifier: D7:02:30:6F:69:CE:FE:2B:63:E3:6A:56:E9:7B:D4:68:3C:DC:2E:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C9E94DB3A11EFBFA7D187762E951A.roa
Signing time: Sat 25 Jan 2025 16:38:34 +0000
ROA not before: Sat 25 Jan 2025 16:38:30 +0000
ROA not after: Fri 07 Mar 2025 16:38:30 +0000
asID: 138915
IP address blocks: 154.223.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84540 (0x14a3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:38:30 2025 GMT
Not After : Mar 7 16:38:30 2025 GMT
Subject: CN=6795138a-8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:04:73:2a:48:9f:3d:e5:ec:8d:03:47:31:
7b:8d:a1:3b:f9:ba:7b:12:f8:e8:c0:4a:c2:0e:80:
22:06:44:a1:9d:74:28:6a:40:bf:df:66:43:f4:e0:
b5:ab:b1:25:d1:00:91:17:74:25:cc:27:30:71:ff:
6b:5e:b6:68:5a:ce:25:3f:54:48:b9:0d:eb:60:1c:
e5:05:43:f9:0a:8a:42:b9:03:6e:1b:e3:fa:c4:e0:
49:7d:b8:e0:6c:73:5c:61:7c:bc:81:59:36:d1:14:
96:94:49:99:ff:34:5f:5d:3b:33:eb:c4:a1:83:c5:
83:81:05:a4:d0:d5:b9:e8:38:ed:aa:3c:a8:62:b2:
b8:c4:69:ba:72:03:d3:ad:27:a4:d8:29:f8:c7:bf:
2d:ad:7e:a8:23:fc:8a:64:de:96:13:42:79:c5:70:
4c:0f:62:09:28:14:97:4c:e1:94:8d:34:b1:7a:a7:
ff:2e:49:e4:fe:75:64:85:02:dc:30:36:1f:fa:91:
38:0d:f5:1d:a5:e0:02:19:9c:90:94:53:f5:61:12:
9e:e5:42:b1:07:3f:3c:1d:21:fe:a8:35:61:de:68:
01:51:99:8d:3b:4c:24:01:8e:e7:13:0e:7c:b6:ba:
cb:6b:d2:b0:8d:61:5b:af:4a:e0:6f:6a:9c:f3:80:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:30:6F:69:CE:FE:2B:63:E3:6A:56:E9:7B:D4:68:3C:DC:2E:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D16C9E94DB3A11EFBFA7D187762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.21.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dc:24:a0:33:6e:b2:84:fd:34:f4:b7:64:95:7c:b9:cb:34:
f2:a2:d5:d8:4d:a6:41:53:c0:0a:90:cc:71:3f:4a:19:be:aa:
80:4a:aa:c5:e4:7c:92:7a:34:c0:c2:14:8d:26:9b:77:fe:47:
39:38:c4:67:f0:27:76:bd:41:fd:80:d9:99:6c:3e:54:46:be:
05:4d:ce:5a:ab:99:94:29:e4:2d:4f:00:31:6a:ab:f6:3f:61:
4a:18:81:e9:05:c9:f3:62:85:2a:9d:1d:85:b0:7f:7c:e2:b3:
f9:fd:5b:9c:85:4a:b8:1f:9b:5c:ac:22:9d:2c:1e:f9:f2:01:
42:5a:2a:4d:56:c4:7c:ad:9e:51:08:a5:24:ab:20:5f:05:1e:
9d:dc:f6:ff:f0:1d:b6:6b:4b:3b:a2:58:e3:52:99:29:a0:36:
b6:eb:e5:a3:b0:d0:07:fd:7e:2f:cf:4f:8e:0a:8f:7c:43:d3:
b8:bc:3f:e5:fd:d2:a3:43:06:a9:d4:e4:bd:3b:8f:e9:65:8f:
e6:ce:8e:be:f2:1a:89:75:80:fe:06:0a:df:2f:2d:31:bd:1c:
5c:8b:30:4b:fc:3c:98:ee:a4:8a:af:82:b9:86:26:bb:68:c7:
fd:56:9d:98:a2:69:e0:62:ab:02:a3:c1:e0:01:d2:c9:75:19:
8c:46:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:35 2025 by rpki-client