Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF65B3B0DA2A11EFB07DBA59762E951A.roa
File: EF65B3B0DA2A11EFB07DBA59762E951A.roa (raw, json)
Hash identifier: 97gT4Uxlzd3m2GJGeSJtXqcwfr/Mp55S08q17TqRw6k=
Subject key identifier: 4E:13:0E:B3:5B:E1:D2:B2:FA:E0:40:92:C8:40:29:56:99:64:00:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01444E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF65B3B0DA2A11EFB07DBA59762E951A.roa
Signing time: Fri 24 Jan 2025 08:12:21 +0000
ROA not before: Fri 24 Jan 2025 08:12:17 +0000
ROA not after: Wed 05 Mar 2025 08:12:17 +0000
asID: 202656
IP address blocks: 154.222.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83022 (0x1444e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:12:17 2025 GMT
Not After : Mar 5 08:12:17 2025 GMT
Subject: CN=67934b65-63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:db:47:83:66:a7:cd:8c:1d:94:27:da:92:
a4:7a:3e:72:07:28:12:57:f2:d9:c6:d1:67:63:70:
f9:ef:2c:e0:13:57:27:f1:cb:d0:b6:49:24:8b:4a:
24:3a:0b:74:d1:ea:cf:54:2d:75:50:e0:17:17:06:
4a:1f:29:8e:0d:13:a3:3d:e6:1c:36:17:da:08:98:
bf:75:20:c1:2f:0e:be:fe:19:e0:c1:f9:aa:17:9c:
8e:37:6a:e7:38:68:85:6f:8c:b1:92:f6:0e:10:e8:
08:b0:96:ae:8f:8c:5b:37:fd:4d:55:f5:34:c8:16:
4b:c4:1e:d7:04:f9:b0:75:50:c2:2d:99:aa:df:75:
d7:43:ea:5d:ac:2a:c2:c1:6a:ca:b7:e2:1b:d3:a9:
a3:eb:b4:28:af:b5:d8:4e:1a:5c:0c:e6:0c:a9:95:
a5:15:38:0e:16:ce:de:0d:75:d7:99:40:05:ca:74:
9d:5d:c3:05:af:43:e9:c0:39:6d:df:e4:06:c0:94:
79:f5:e8:9c:1d:10:a9:f0:d0:f1:36:6a:65:0f:a9:
5c:07:00:04:61:de:16:fa:c5:95:78:20:af:67:b7:
bc:75:2f:8b:10:a9:c7:66:e7:3d:70:7b:1d:52:bb:
1e:e8:7b:db:17:a4:d8:f0:f8:67:34:ba:5a:19:db:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:0E:B3:5B:E1:D2:B2:FA:E0:40:92:C8:40:29:56:99:64:00:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF65B3B0DA2A11EFB07DBA59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.14.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ea:bc:65:bc:3c:db:36:28:08:9a:96:80:ba:83:cc:aa:42:
2a:1e:18:c7:f3:5f:b0:2d:97:7e:cc:bc:ef:88:b6:10:7a:c1:
49:a3:42:f8:72:97:64:5a:af:1e:ae:15:ae:4e:b6:f6:36:62:
21:e9:cd:23:c3:77:69:b5:69:16:02:76:94:0d:8e:9f:c7:cf:
18:fd:3d:b5:26:1e:8a:26:d2:7b:df:fc:9f:1f:4d:ea:0c:de:
b7:9e:74:74:7d:cc:e5:54:5b:33:99:ec:5a:bc:f5:4e:7b:c5:
15:e0:58:ab:f2:e7:45:b6:bb:d0:50:95:1f:49:44:2c:71:0a:
c8:92:3e:e1:46:b4:b0:a6:b5:ba:d1:4f:ad:1f:3a:fb:ba:14:
3c:46:7d:86:7c:f0:0d:04:2b:aa:70:83:f4:00:ed:17:04:83:
42:03:d9:b3:6b:71:53:db:4c:98:16:86:da:5c:d1:b0:df:b9:
62:4e:6b:71:53:76:ae:f7:b7:c0:1f:36:2d:10:64:a9:6a:63:
83:80:91:40:51:d3:63:2f:03:c6:d3:36:6c:63:d8:62:e0:75:
93:8e:13:86:ec:98:76:c0:77:31:d6:6f:a6:7d:1a:a7:b6:bc:
51:26:6b:a2:c2:13:a0:d3:47:22:62:43:cd:15:10:a6:7f:8b:
39:73:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:49 2025 by rpki-client