Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47225CCD9FB11EFB61DBE96762E951A.roa
File: D47225CCD9FB11EFB61DBE96762E951A.roa (raw, json)
Hash identifier: 9hUyb+Tt0Rcxtj3BaIkHplILtyWA8m4vQTjA32gh/oA=
Subject key identifier: 8E:4F:08:28:B5:70:F3:FE:C5:26:E6:3E:31:AF:BB:D4:35:54:43:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014368
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47225CCD9FB11EFB61DBE96762E951A.roa
Signing time: Fri 24 Jan 2025 02:35:10 +0000
ROA not before: Fri 24 Jan 2025 02:35:06 +0000
ROA not after: Sat 01 Mar 2025 02:35:06 +0000
asID: 62240
IP address blocks: 154.223.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82792 (0x14368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:35:06 2025 GMT
Not After : Mar 1 02:35:06 2025 GMT
Subject: CN=6792fc5d-ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:75:b1:f1:fa:78:f5:b1:cc:fe:48:65:96:
16:db:a5:7b:4e:ab:69:3f:97:6e:2a:64:88:11:59:
cc:07:2e:0e:e5:85:5a:ae:4e:ce:9f:e6:81:f6:1c:
e4:2f:8b:9d:88:3b:4f:68:00:c1:14:c1:1e:85:2b:
d3:4b:8d:d9:d8:39:bd:d8:78:ae:ce:2e:50:85:14:
4d:bf:c2:56:b4:ef:db:5c:d1:ba:e1:4d:72:ca:37:
04:24:83:45:5d:e0:d7:d8:77:60:25:b3:e1:cf:5c:
61:49:9a:5a:9c:5c:3d:98:55:ba:12:0c:fa:c4:13:
da:50:70:1f:88:0c:46:2a:de:75:fd:ab:36:71:ac:
01:cf:d3:60:db:31:05:58:c3:8c:ad:54:11:e7:87:
9d:52:39:85:f5:b3:8d:f6:64:cc:98:39:46:5b:c2:
94:f2:fc:31:71:ad:39:27:f0:bb:40:2e:83:89:7d:
47:e5:e2:8b:c3:33:62:bd:5e:f5:ed:7b:80:1d:8f:
37:3f:09:11:55:a6:97:fd:ab:1a:60:7d:77:d6:cf:
73:b3:1d:c9:23:fc:ca:6c:44:d5:30:7b:d6:fe:cb:
98:05:22:01:9b:4f:7f:5e:dd:d8:9c:59:10:32:15:
a9:6c:88:e2:df:fb:fd:29:bf:e6:c2:2c:26:61:06:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:08:28:B5:70:F3:FE:C5:26:E6:3E:31:AF:BB:D4:35:54:43:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D47225CCD9FB11EFB61DBE96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.219.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7c:6b:f2:fb:7d:fa:d7:66:39:d1:a9:8c:d7:35:5b:d1:3b:
11:af:e6:2f:ae:f6:40:35:31:b3:7b:bd:93:83:f7:13:56:2e:
8c:7e:c7:47:73:92:c8:6f:b7:d1:e9:66:c4:bd:4a:61:62:93:
6b:04:dd:ef:16:48:5a:a4:4d:4a:39:db:3b:1b:27:20:ba:6a:
1d:77:9d:34:d3:71:11:80:8c:dd:2d:41:4a:5d:ba:65:7a:a1:
99:ca:10:a4:8b:38:8e:bf:35:b6:2f:af:9b:d0:8c:64:5f:0c:
47:66:c8:17:d3:e2:b2:d4:31:a0:fd:0d:be:22:ba:38:de:d0:
4d:98:7e:f4:8c:4f:3a:2d:30:c9:d0:46:2a:c7:ba:3b:ab:78:
49:fd:d5:63:e1:87:68:aa:77:d6:09:aa:d2:3b:a8:2f:cb:a7:
12:2e:64:44:7b:75:49:81:e1:73:bf:9b:9c:5e:17:05:1e:27:
cf:92:89:6f:2d:26:ca:a0:4c:ec:1a:78:4b:4d:98:1f:36:22:
60:9a:4b:a7:d9:58:f1:3b:ac:b9:b6:5c:d4:ec:f6:aa:f1:06:
a3:bf:e1:0f:fc:2d:9f:44:18:34:d8:fe:f0:eb:2c:d2:cb:8c:
4a:bd:a3:e6:0e:c4:dc:8d:ac:e2:93:81:7e:24:2e:1a:30:eb:
a8:b4:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:30 2025 by rpki-client