Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50DBE48DA0311EF9ECCED56762E951A.roa
File: E50DBE48DA0311EF9ECCED56762E951A.roa (raw, json)
Hash identifier: EiYORHMZUcenq2e+gAhUG3oe6+BaVtuIVN+JepPA5hI=
Subject key identifier: 54:8E:ED:E7:24:7A:9C:D7:35:8A:1D:B8:EF:A2:38:FA:94:73:09:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014390
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50DBE48DA0311EF9ECCED56762E951A.roa
Signing time: Fri 24 Jan 2025 03:32:53 +0000
ROA not before: Fri 24 Jan 2025 03:32:50 +0000
ROA not after: Sat 01 Mar 2025 03:32:50 +0000
asID: 44559
IP address blocks: 154.205.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82832 (0x14390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:32:50 2025 GMT
Not After : Mar 1 03:32:50 2025 GMT
Subject: CN=679309e5-cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:cb:84:28:06:9c:4a:82:c8:57:c8:c2:b4:
d7:52:55:be:14:49:08:4a:fc:45:ce:f8:e3:9b:e6:
e1:11:e1:74:61:81:37:c3:3f:99:3a:e8:0e:7b:9a:
dc:e5:66:22:23:8b:15:dc:43:94:37:be:a6:60:0f:
34:6d:71:e8:dc:47:b2:44:bf:a6:4d:8d:f5:80:3d:
78:63:6e:5a:6e:91:44:1d:d0:b4:36:9b:30:aa:0c:
b7:d4:4c:f0:9d:80:37:fd:e9:24:96:b7:e3:27:86:
76:c7:e1:41:97:48:ca:75:c5:97:95:d2:f5:3f:75:
65:de:db:ee:a6:75:59:3d:2f:76:7e:d3:dd:46:69:
c5:e2:fa:23:4b:db:cb:59:ca:cc:f6:ef:7a:9d:a5:
a9:64:ee:4a:59:f3:34:6b:69:0c:4f:8d:0f:34:ca:
9f:94:ab:69:28:fb:08:9e:43:06:46:86:28:17:4e:
99:1d:a6:4d:7a:7c:0d:8b:a7:48:3c:9b:d4:25:ec:
1b:11:03:15:96:cc:15:52:02:59:33:e0:f0:da:19:
70:79:35:91:4c:03:bb:64:3e:fe:9a:0a:9d:bc:08:
fe:02:a6:23:38:f3:3a:1b:0a:a9:ec:5e:70:b0:a4:
7c:24:52:f3:d4:04:be:26:e1:4f:56:69:e1:d7:f7:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:ED:E7:24:7A:9C:D7:35:8A:1D:B8:EF:A2:38:FA:94:73:09:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50DBE48DA0311EF9ECCED56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.29.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8a:5a:00:a4:3e:93:df:56:95:d5:9d:99:37:e2:7e:e3:67:
2e:c7:be:13:56:06:74:4a:c0:2f:45:08:e1:c5:51:2f:93:fd:
72:4a:6a:dd:63:87:43:f1:a5:f4:28:02:3f:af:32:28:54:37:
bb:df:ef:af:8b:10:05:74:a8:af:ab:78:2b:f7:8f:a5:f2:24:
0d:9e:1c:a3:c0:da:08:c1:a1:3b:46:ff:8f:b0:72:3e:3c:ec:
c2:42:38:b6:42:27:ee:8c:2a:a3:ed:a6:ad:d8:b3:c9:27:d7:
4c:05:fb:9a:f3:12:50:a1:81:5d:4e:2b:5d:ea:61:6b:9b:5e:
c8:41:08:d7:d1:ff:79:68:d5:4c:b2:d7:e7:be:be:f9:68:ad:
92:55:ec:5c:a6:49:d3:ed:f6:93:e7:e6:04:07:ff:55:88:e2:
10:65:de:0e:ef:a4:98:a4:45:a6:cc:4e:42:d1:5a:5a:ba:46:
22:11:41:91:5f:3d:6e:17:a8:eb:6d:c2:ee:1a:98:ec:3e:f0:
d7:81:69:1f:4d:b1:a1:b5:4b:1d:90:2b:97:b3:48:a3:57:dc:
d4:a2:26:99:a2:0b:21:48:33:7a:43:41:2f:ff:b8:54:2d:9f:
a6:a9:56:a0:5d:b2:7b:02:62:b6:7b:6a:0b:16:46:c7:29:e2:
b3:a1:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:09 2025 by rpki-client