Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC9815BAD9D611EF9FB7EF93762E951A.roa
File: DC9815BAD9D611EF9FB7EF93762E951A.roa (raw, json)
Hash identifier: wZK/AtDHIAgj9GjmjfsAx6mUqJk9Ou+STK3MNOM0ohc=
Subject key identifier: 5F:63:76:A1:4C:3D:AB:F0:11:94:D2:A1:73:FD:D6:2B:83:91:5C:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01433B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC9815BAD9D611EF9FB7EF93762E951A.roa
Signing time: Thu 23 Jan 2025 22:10:32 +0000
ROA not before: Fri 24 Jan 2025 22:10:28 +0000
ROA not after: Sat 01 Mar 2025 22:10:28 +0000
asID: 44559
IP address blocks: 154.205.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82747 (0x1433b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:10:28 2025 GMT
Not After : Mar 1 22:10:28 2025 GMT
Subject: CN=6792be58-8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:38:c4:90:31:1f:1f:8e:7c:53:68:96:2a:c2:
d6:ab:c9:3a:29:99:60:bc:d5:d5:c8:90:f1:fa:5c:
ef:f2:5e:03:ce:be:df:b3:43:ea:02:e1:b5:a8:a6:
0b:71:e6:55:bb:1d:df:bc:70:fe:eb:26:14:ae:b1:
db:58:20:8c:1a:a9:e6:11:de:73:f6:1c:22:cb:28:
53:74:a1:c5:0f:2c:12:34:e0:73:34:9f:f4:2d:ff:
e2:e2:30:29:87:3c:24:36:13:79:8f:76:8c:ee:a5:
e2:d9:d9:2f:a8:5d:6e:92:d8:9d:64:d4:56:2d:aa:
c8:4b:46:14:7e:f3:02:27:8d:95:3e:7a:15:90:cd:
df:72:ca:45:0f:25:c5:f7:a9:7c:62:53:63:cf:80:
2c:82:78:6e:8c:32:f4:45:7e:52:d5:4c:25:14:41:
a3:75:13:01:c5:7d:03:a1:01:49:cc:80:84:78:8b:
76:c0:0f:9b:8f:30:41:43:ec:95:bc:fc:2c:77:9a:
99:17:aa:00:82:5a:fe:70:ea:03:31:f1:77:49:c0:
66:d1:60:f4:f2:5f:f9:2b:e1:cd:37:a5:e5:40:1c:
ab:11:70:37:c0:ba:e2:99:ee:43:50:38:6e:85:d2:
f5:00:51:ff:3f:80:c0:d9:26:72:0b:a2:d4:cb:eb:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:76:A1:4C:3D:AB:F0:11:94:D2:A1:73:FD:D6:2B:83:91:5C:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC9815BAD9D611EF9FB7EF93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ed:5f:8c:2c:c6:6f:d8:b5:ba:38:75:f4:ef:4f:9f:a3:68:
58:85:53:bd:02:45:e7:a9:d0:c3:d2:ec:e8:28:ed:3f:44:63:
1e:c7:1f:85:b1:d5:62:13:fb:31:8a:95:8e:5d:dd:e6:a2:0e:
a9:45:11:63:1a:6f:d8:c5:8a:10:ac:60:f7:dd:2a:94:a9:d5:
d7:da:ec:fd:99:9d:48:c2:4b:34:48:6e:64:32:3a:37:48:4b:
9a:a2:eb:89:1c:b1:b3:c1:b4:32:e2:2d:f0:db:7f:2e:5f:83:
bc:18:ad:96:a7:40:6e:cf:50:a5:aa:07:38:31:cc:26:89:58:
3a:1f:31:6b:de:9d:48:4e:60:69:e9:6e:11:12:3f:38:2f:a2:
0a:56:cd:58:2f:a0:ee:fb:bf:3d:04:24:73:19:73:66:63:fd:
8f:9a:93:be:b9:c1:b5:e8:0d:24:39:d4:42:da:09:b9:56:da:
b2:33:30:0a:b4:65:d4:56:ef:16:eb:69:99:3a:e2:71:ca:1a:
21:8c:ae:5b:7d:39:4c:f6:e7:46:7e:93:96:f5:a5:3a:c9:d9:
a4:53:f5:2d:05:1d:5f:d2:66:4b:97:71:dc:a6:d9:51:43:4a:
cc:32:fc:99:a1:2b:19:43:1e:c7:d2:95:d0:2c:51:15:da:f5:
da:c3:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:10 2025 by rpki-client