Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E0C1C4D9FA11EFB45A5490762E951A.roa
File: D7E0C1C4D9FA11EFB45A5490762E951A.roa (raw, json)
Hash identifier: FIbeD2k5PhWC520/nfAqlS1CFpeF1fDM7Vi9d8VyXtc=
Subject key identifier: 45:E2:B3:9C:84:3D:08:32:2B:15:E3:AD:3E:0E:1F:3E:7C:F1:78:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014364
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E0C1C4D9FA11EFB45A5490762E951A.roa
Signing time: Fri 24 Jan 2025 02:28:06 +0000
ROA not before: Fri 24 Jan 2025 02:28:02 +0000
ROA not after: Sat 01 Mar 2025 02:28:02 +0000
asID: 62240
IP address blocks: 154.223.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82788 (0x14364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:28:02 2025 GMT
Not After : Mar 1 02:28:02 2025 GMT
Subject: CN=6792fab6-a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:65:99:36:ce:a9:17:5b:e4:2b:d8:9c:49:
14:24:be:ca:03:0a:a9:4d:8c:ea:16:a5:01:34:dc:
47:b8:50:85:45:05:14:7f:57:8a:db:e1:f3:e8:ef:
ae:14:59:87:3c:2e:0f:18:b9:10:11:ff:29:a5:52:
c8:6b:4b:76:ee:98:34:1e:6d:de:ef:2f:29:57:01:
77:01:40:92:b2:9e:f5:d9:c3:9c:e6:76:20:2e:5d:
9d:ce:f2:62:cb:ea:99:44:c7:42:83:73:87:43:77:
9c:8f:aa:92:31:2a:a1:5b:b3:60:d7:04:47:47:6b:
3c:ac:12:17:41:c2:9f:0f:ef:eb:c7:1c:bc:d7:54:
4f:70:6d:c9:ee:9e:d7:94:d9:59:b7:22:d6:38:72:
c0:67:a0:4c:14:2e:a5:69:cc:2e:dd:41:ad:5f:05:
d9:93:a8:f8:41:3c:9f:91:be:0f:31:f6:c1:dc:c7:
f4:34:5b:01:75:75:b1:59:b9:f5:e9:38:81:6d:c4:
4c:fb:5a:2e:34:28:6d:4a:3a:53:38:6d:64:64:c1:
8f:b4:54:ec:68:ef:a3:21:a5:37:63:c4:25:e8:1f:
66:ef:d6:46:e4:5e:78:09:73:ec:12:f7:14:9a:9f:
ab:d6:e7:7e:42:51:00:66:43:ad:3c:81:f4:27:15:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:B3:9C:84:3D:08:32:2B:15:E3:AD:3E:0E:1F:3E:7C:F1:78:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E0C1C4D9FA11EFB45A5490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.217.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c1:2a:47:dd:7a:f9:aa:6f:a2:1b:88:04:ee:f8:74:dc:a7:
ed:8a:b5:d6:25:ce:7b:55:73:1b:dc:c5:fd:a8:ce:47:a7:6c:
ff:ad:6b:8d:fb:8a:46:38:e6:5a:14:e3:af:cb:13:40:30:a1:
8c:85:1b:eb:fa:a6:18:d0:5a:09:c0:17:84:5c:12:56:2e:cb:
fa:e7:bb:9b:4e:79:c1:3d:6f:ed:2f:90:7d:cf:de:ea:4d:16:
59:fd:8d:72:f9:bc:b2:fa:37:7a:86:de:02:8d:f5:41:4b:db:
1a:59:da:a8:68:e4:af:eb:cc:74:0b:a6:17:bc:cc:22:76:04:
b0:60:fd:43:fd:73:da:0d:ce:1b:13:97:81:d8:50:f7:db:c6:
7a:e2:6a:44:93:03:3c:8a:78:ff:b1:53:f4:2e:8e:82:e3:5a:
25:65:73:52:37:fc:14:a7:63:c3:4b:fa:76:de:eb:22:8d:db:
3a:aa:fb:2c:40:84:93:80:84:8b:52:01:e2:39:4b:32:22:c2:
b7:e9:54:26:d9:75:b4:0a:3a:cb:60:46:45:26:dc:25:ca:ca:
e6:26:ba:5f:5a:52:06:aa:0c:d3:85:63:36:db:11:fb:a5:13:
6d:16:72:f9:14:e9:99:a7:7d:ea:b7:58:e1:15:c5:87:27:f4:
2e:40:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:00 2025 by rpki-client