Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E138DAD8B5FE11EF89A49BA7762E951A.roa
File: E138DAD8B5FE11EF89A49BA7762E951A.roa (raw, json)
Hash identifier: AyaT2A++2GwgzsqXD40dmveDEWNX6qwD1scQfT3fzfs=
Subject key identifier: FE:1F:DC:59:38:25:C0:16:39:18:BA:F1:9B:63:BF:A6:7E:35:C1:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E138DAD8B5FE11EF89A49BA7762E951A.roa
Signing time: Mon 09 Dec 2024 07:26:18 +0000
ROA not before: Mon 09 Dec 2024 07:26:14 +0000
ROA not after: Thu 06 Feb 2025 07:26:14 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72137 (0x119c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 07:26:14 2024 GMT
Not After : Feb 6 07:26:14 2025 GMT
Subject: CN=67569b9a-dd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:17:b9:1c:39:12:cb:3c:9c:c4:4c:78:ac:
af:c1:a0:bd:3f:ba:eb:b9:f2:2e:92:15:95:6d:47:
30:d9:41:b9:45:81:fc:2c:fb:e0:5f:2f:92:cb:3c:
d3:f5:19:40:d7:60:e4:b3:d3:46:47:b0:5d:93:db:
62:fa:3d:70:12:7e:75:93:a3:09:18:06:96:bd:7d:
c7:de:79:42:90:a3:16:91:50:91:09:dd:a1:f9:a6:
31:e3:2b:95:89:a9:79:27:05:27:64:4a:08:1b:44:
b5:65:57:a1:f3:fe:6f:15:b2:f0:e8:e0:e5:67:f4:
88:a2:2a:12:cd:ae:05:5d:2a:68:18:88:73:b8:3f:
22:59:6f:4d:eb:1e:7f:86:b8:12:a5:80:54:e4:71:
56:e5:b9:9d:84:f1:9e:f7:9f:da:0b:ab:a8:9a:71:
42:80:c0:40:2e:71:fd:12:c7:52:95:87:5e:8d:57:
2b:c3:67:29:01:2f:93:88:51:af:23:02:4e:b0:d3:
e8:90:29:97:a0:d0:fd:9b:d4:67:f6:b0:24:f0:91:
c0:ef:c2:ad:c8:5f:23:5c:1f:3a:95:9a:94:5f:43:
88:bc:c5:77:dc:7d:3d:4e:ee:5b:07:83:d4:bf:fd:
57:b0:15:29:05:55:84:5c:bd:a2:a8:56:56:23:73:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:DC:59:38:25:C0:16:39:18:BA:F1:9B:63:BF:A6:7E:35:C1:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E138DAD8B5FE11EF89A49BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:55:08:96:53:f3:b6:ef:ed:5d:ad:b8:ce:dd:fe:76:88:a7:
6a:0b:92:65:c9:03:94:82:33:f6:18:fc:a6:33:f1:58:4f:29:
1c:4c:c0:b2:50:a3:b1:10:18:7c:0d:06:6a:ab:1d:2c:09:e8:
db:8c:85:a2:d0:27:bf:f3:92:6d:1b:85:a8:21:ce:a2:2c:f1:
8d:06:c9:55:77:45:b6:00:7b:fa:86:02:b0:f8:b3:d6:fe:4b:
0f:b3:5b:b0:70:07:ab:c4:14:13:e4:df:a5:5e:0c:68:74:d9:
9e:bf:fb:a6:ad:cb:aa:42:bf:cc:6c:d6:87:d2:fc:84:9f:ad:
af:df:de:46:fa:1b:d8:64:72:8d:a0:7f:5d:a3:94:b9:91:b5:
97:16:34:0e:28:23:f3:8e:7f:32:37:12:98:8e:b4:84:48:0d:
7b:8b:63:05:ea:ab:6b:b2:a3:57:80:aa:74:10:60:51:34:79:
e9:5f:8a:9e:ac:86:0b:4a:ea:04:fc:2b:1b:8d:94:80:d0:2a:
02:b3:40:48:55:89:0d:60:c4:5a:47:60:09:60:96:5e:b3:32:
fe:14:ae:25:fd:3b:88:37:9c:2f:b1:3f:9e:0e:eb:52:20:e6:
08:2d:40:81:db:de:0d:f7:50:5b:cd:12:dd:67:89:b3:7e:6f:
67:39:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:30 2025 by rpki-client