Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA31AA10DA4F11EF8892F652762E951A.roa
File: DA31AA10DA4F11EF8892F652762E951A.roa (raw, json)
Hash identifier: jzyHN+k5o8ScypOqpQT56Ro54L/t807Ny61tl+RzBlE=
Subject key identifier: 3C:57:B0:0D:2C:E7:08:29:06:45:CF:51:0D:A0:6D:A6:C5:46:F8:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA31AA10DA4F11EF8892F652762E951A.roa
Signing time: Fri 24 Jan 2025 12:36:37 +0000
ROA not before: Fri 24 Jan 2025 12:36:33 +0000
ROA not after: Sat 01 Mar 2025 12:36:33 +0000
asID: 44559
IP address blocks: 154.205.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83684 (0x146e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:36:33 2025 GMT
Not After : Mar 1 12:36:33 2025 GMT
Subject: CN=67938955-9699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:63:62:c2:ea:61:38:a6:c4:40:bf:d3:5e:
46:87:51:a0:32:43:a1:9a:6e:59:54:c5:65:33:fe:
23:02:06:1a:bb:b9:7c:66:0b:2e:a6:18:66:3f:31:
33:0b:51:09:d8:3c:84:cf:6a:80:27:08:be:cb:75:
11:69:1e:79:77:81:f1:df:7d:db:5f:1b:21:0e:4c:
aa:4e:68:48:aa:42:8e:70:a1:db:cd:f4:61:2a:55:
3c:85:42:1b:aa:0f:b6:d4:29:4f:2a:5b:ed:f5:c7:
ab:1c:91:82:80:a7:d9:3c:2a:68:8b:48:7b:a4:0e:
a0:9d:d3:71:1f:c6:e6:1e:63:cf:9d:24:58:44:c5:
53:28:7b:d3:d4:5a:2f:56:74:5b:ff:7a:47:29:91:
3b:74:4a:f2:cb:a5:7b:a5:af:ce:28:62:25:4f:05:
7f:ca:95:aa:01:9e:6e:0c:fb:3d:68:48:63:c0:75:
02:80:8d:99:d0:24:7e:94:78:d7:8b:68:44:89:a9:
16:2b:6c:30:03:9d:51:86:ca:63:4c:12:2e:e2:38:
8c:d1:0c:61:23:4f:46:d9:f4:e4:2a:cf:d3:ec:b0:
82:43:36:1b:14:12:9a:7c:de:a3:ab:e0:71:1d:14:
9b:dc:40:5a:39:d4:b2:e9:3d:b4:c7:00:cf:25:50:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:B0:0D:2C:E7:08:29:06:45:CF:51:0D:A0:6D:A6:C5:46:F8:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA31AA10DA4F11EF8892F652762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7b:45:7c:39:61:ec:8a:38:43:74:41:1a:e3:d1:23:b3:87:
78:23:b2:d3:d5:98:a6:52:f6:f3:8f:50:56:85:34:8f:d9:90:
2c:5f:fa:19:39:a8:67:9a:7b:2a:8e:9b:a2:c5:e1:6f:31:ca:
ca:d2:2a:6d:46:1f:4d:af:ec:58:a8:68:df:73:d6:81:5e:1d:
a4:45:c2:bd:a5:33:9d:0f:fa:3c:47:96:10:14:99:2c:95:66:
c6:39:e6:d0:4a:48:6b:ef:75:1a:9a:cd:bc:19:5b:ec:2c:f9:
e3:cd:94:ce:1a:e3:91:b5:4c:a1:d9:9e:c1:b3:e5:33:86:e6:
c3:74:20:ea:4e:51:c2:b5:2e:b3:27:9d:8b:22:13:27:dc:bc:
48:4c:c8:bb:f0:8a:58:16:d5:56:76:d3:5c:a4:d9:55:e2:6a:
c8:ac:bf:fd:fc:ae:3c:07:64:28:c2:31:23:b4:5a:79:46:c6:
71:17:a3:19:25:2d:6f:2b:e8:49:86:ed:98:e6:fc:e1:ee:57:
c2:74:b1:71:bf:ea:9c:63:ca:94:13:b3:e2:d7:40:ef:15:01:
32:1a:0a:70:f4:73:ee:8c:5b:98:49:65:7c:56:4a:f8:0d:24:
5d:95:14:f8:64:aa:d7:c6:9e:be:12:01:b5:21:f0:e1:e7:3e:
72:f9:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:28 2025 by rpki-client