Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56AA57EDB2D11EF93AF2AAF762E951A.roa
File: E56AA57EDB2D11EF93AF2AAF762E951A.roa (raw, json)
Hash identifier: o0FQBLYiuNzs+fhux3gxtVAg3xr4Jepk/dw3s9V+F0Y=
Subject key identifier: 86:84:27:2D:02:57:CD:EA:1B:53:72:30:74:98:F5:FE:AC:CE:D0:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56AA57EDB2D11EF93AF2AAF762E951A.roa
Signing time: Sat 25 Jan 2025 15:06:04 +0000
ROA not before: Sat 25 Jan 2025 15:06:00 +0000
ROA not after: Fri 07 Mar 2025 15:06:00 +0000
asID: 138915
IP address blocks: 154.223.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84460 (0x149ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:06:00 2025 GMT
Not After : Mar 7 15:06:00 2025 GMT
Subject: CN=6794fddc-a939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:4d:f0:7d:02:16:ee:6c:b9:b3:01:12:1a:
45:a6:b8:4d:2b:c3:76:b5:53:50:53:2a:a0:65:8b:
99:2c:77:53:10:73:d2:b3:8b:7b:47:8f:b4:f1:93:
a2:e4:90:e9:4f:8b:f5:a0:cb:6c:93:87:30:25:dd:
94:90:66:d5:6f:c4:7b:af:06:66:92:6b:69:f6:38:
f2:90:4b:49:ea:29:6a:dd:52:ae:a1:e7:9b:ca:ae:
87:96:df:9a:48:e9:be:5f:2f:14:e6:29:ea:00:dd:
af:28:12:91:e7:0f:1b:61:bb:e2:91:1a:21:15:f4:
e5:d9:01:cb:c9:73:bc:8e:d1:b5:93:86:59:72:2c:
fa:95:a9:18:ca:46:47:d1:a6:c5:8a:87:fa:0b:95:
3b:0d:e3:94:d8:77:b7:d2:c1:ee:61:ac:16:20:0a:
d4:53:d9:fb:b2:2c:99:e9:51:23:c1:a7:78:bf:c0:
c5:2b:0d:52:51:7d:e2:bd:9a:69:aa:68:ab:a4:d2:
18:9d:62:ce:dc:a0:b9:e2:7b:98:25:22:66:0e:e4:
b2:71:56:d6:24:82:6e:56:4e:35:49:ff:35:9a:b1:
c4:1c:6d:55:fb:b1:af:4b:94:88:7c:e7:9b:2f:6e:
9e:6b:61:8e:18:44:2e:58:11:2b:66:c6:a1:bc:cd:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:27:2D:02:57:CD:EA:1B:53:72:30:74:98:F5:FE:AC:CE:D0:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56AA57EDB2D11EF93AF2AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.56.0/23
Signature Algorithm: sha256WithRSAEncryption
79:5d:a8:00:43:d4:16:6d:e5:41:fe:dd:5a:b4:ca:c6:68:be:
a8:4d:bb:08:2d:53:ff:12:16:71:64:09:c5:d7:87:f9:2f:0a:
58:b2:15:7b:ce:dd:23:74:46:66:55:65:23:48:c3:42:6b:ed:
85:7c:64:82:07:a2:22:92:66:2e:b8:cb:67:72:65:e7:66:ef:
a0:ba:ca:50:40:42:c1:b2:ae:6c:6e:b2:10:d5:d0:2c:c8:5b:
39:0e:4e:b1:70:8a:0f:d4:7f:74:3a:0c:2b:be:fe:2e:8d:86:
54:73:16:64:e3:f7:4f:57:a1:c4:98:57:4a:e4:66:2f:af:5c:
d3:6e:aa:fe:71:42:5b:67:e4:b2:c9:63:12:6c:7c:44:ee:f8:
11:a5:96:49:fa:81:9b:1f:87:e2:a9:a3:60:c9:f0:36:51:4c:
d9:e2:98:5b:b5:f4:cd:a5:8d:92:f1:29:15:73:9d:34:42:77:
78:b2:29:c0:66:59:35:86:d4:fd:e2:52:8d:69:0c:e2:b7:58:
7b:6b:20:50:f9:1b:a6:d4:8b:48:95:8c:23:0e:27:77:15:b2:
cf:4d:a8:f8:4e:32:d0:6e:83:5d:74:27:12:ac:a3:ef:8d:90:
67:8f:34:3e:f3:ce:cb:d6:60:64:46:c8:5b:60:05:f6:47:73:
0a:3a:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:53 2025 by rpki-client