Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26CCD8EDA6A11EFBA54138A762E951A.roa
File: E26CCD8EDA6A11EFBA54138A762E951A.roa (raw, json)
Hash identifier: 4xX1XCksOIiSz6nufnwg112HH3qwopD61DkmFfhCTiM=
Subject key identifier: A3:91:1E:DC:7E:2B:41:52:E4:0F:4E:F3:C5:85:63:38:8D:A9:B2:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26CCD8EDA6A11EFBA54138A762E951A.roa
Signing time: Fri 24 Jan 2025 15:50:07 +0000
ROA not before: Fri 24 Jan 2025 15:50:04 +0000
ROA not after: Mon 03 Mar 2025 15:50:04 +0000
asID: 203020
IP address blocks: 154.223.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84169 (0x148c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:50:04 2025 GMT
Not After : Mar 3 15:50:04 2025 GMT
Subject: CN=6793b6af-ac75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:a9:22:b2:1d:fb:10:f2:d7:4f:5e:51:85:
b1:c6:55:cf:07:53:7b:b5:23:59:88:49:8e:51:8d:
43:23:72:33:b2:d7:dc:df:44:ad:68:b7:b2:97:50:
0f:5f:93:86:c5:de:b4:18:3b:83:27:13:68:f7:f2:
97:3c:bb:d1:b8:79:92:d4:e4:05:97:2b:4e:1a:49:
67:db:1e:3d:17:3c:6e:37:f5:25:b9:5b:5d:88:42:
01:a8:c3:36:1f:d1:57:dd:cd:9b:56:16:d6:99:d1:
c3:af:18:c2:b2:23:ae:c3:e1:99:3b:3c:3c:c0:5c:
3e:d3:95:44:0b:36:62:38:eb:0d:19:1f:ed:6a:3f:
0c:5d:bd:81:6f:54:f5:d6:12:30:1f:58:8a:02:92:
cd:37:ce:54:e1:74:4d:ed:9b:ba:16:5d:1e:d0:76:
fe:ef:1c:86:43:d9:2d:e8:33:7b:e4:64:ac:13:cb:
74:53:ad:97:cf:77:b2:c5:87:34:ec:9e:ad:d4:31:
62:fd:69:04:01:f2:60:fd:b7:d0:90:32:1c:90:01:
f5:13:7e:7c:8e:02:35:c7:e5:02:7e:84:fe:06:dc:
12:26:d1:d2:fd:ce:03:06:e7:9d:1b:45:41:d2:64:
af:54:55:de:80:59:43:63:79:7e:03:85:1b:9e:1e:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:1E:DC:7E:2B:41:52:E4:0F:4E:F3:C5:85:63:38:8D:A9:B2:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26CCD8EDA6A11EFBA54138A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.174.0/24
Signature Algorithm: sha256WithRSAEncryption
86:38:8a:4d:e5:bf:6c:d1:59:a4:dd:b4:a7:42:83:0f:72:4d:
fb:ab:01:03:a6:cb:5e:b4:96:12:aa:be:65:bf:b5:8b:5a:58:
21:32:0a:3e:a6:e0:62:35:87:62:21:36:8b:0c:20:36:19:77:
9e:87:eb:ec:bf:4f:65:85:f6:ed:f0:27:9f:7e:69:43:5f:70:
15:a5:62:a2:8e:c8:fd:65:00:2d:98:be:0b:88:84:01:8f:a7:
a0:bc:2d:a1:0c:54:a5:41:68:64:b2:30:be:38:c3:a3:db:8d:
df:34:b4:ed:48:ab:d4:04:a6:56:1a:09:fa:f7:c8:ba:d8:1f:
a1:1c:ed:b8:66:25:8e:17:51:ee:25:82:2a:35:13:33:b7:85:
6e:ea:c6:a0:f6:61:82:95:6f:e7:1a:3d:1b:8e:8d:8c:88:df:
ae:2f:28:f5:40:53:49:8d:8c:e2:4d:b4:00:34:4a:62:38:29:
e5:0b:74:e3:f5:52:ba:85:63:d3:1b:9b:45:37:60:d7:db:ad:
ce:ab:50:4c:c4:07:52:68:74:ea:11:15:87:8f:88:56:bc:b3:
27:5e:56:49:0b:79:b5:ae:0c:e2:b0:6d:29:d2:19:7d:03:18:
e1:5a:1d:d8:ea:ba:c1:7c:43:67:c5:06:87:a6:40:04:39:57:
ee:ac:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:55:12 2025 by rpki-client