Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0363AA6DFFE11EFA9306DAA762E951A.roa
File: F0363AA6DFFE11EFA9306DAA762E951A.roa (raw, json)
Hash identifier: n04Dkp41QQsgbbhvjqs55GJ8SCxKT22qIwtFjDB0298=
Subject key identifier: 0F:80:6B:83:C4:26:92:B9:64:C4:FF:FF:18:CD:F5:19:7C:1F:C2:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0363AA6DFFE11EFA9306DAA762E951A.roa
Signing time: Fri 31 Jan 2025 18:12:32 +0000
ROA not before: Fri 31 Jan 2025 18:12:28 +0000
ROA not after: Fri 07 Feb 2025 18:12:28 +0000
asID: 328608
IP address blocks: 154.201.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85577 (0x14e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 18:12:28 2025 GMT
Not After : Feb 7 18:12:28 2025 GMT
Subject: CN=679d1290-8d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:15:bf:21:93:b1:be:4e:95:5a:b9:05:90:
f0:6e:f6:47:6d:47:80:a2:1e:c5:15:8e:66:0c:a7:
05:ce:4f:fa:55:11:a3:ba:cf:64:a0:6c:12:0e:c7:
6f:1b:f2:ce:07:5b:85:9a:17:c2:5e:1a:38:97:52:
5e:17:23:9b:62:4e:16:6d:bf:3e:54:b1:6e:3b:9b:
f2:81:79:89:54:31:ed:2a:9f:93:3f:20:7a:34:d1:
46:a2:4c:14:2d:6a:66:12:94:25:dc:23:a5:3d:cc:
fd:c8:71:f4:96:89:22:0b:1b:f0:bb:e5:53:4a:93:
50:f7:48:8e:47:c1:d7:af:ba:4b:59:71:24:15:6d:
5f:67:29:54:7c:65:1a:ed:52:7c:92:77:97:55:9d:
9b:30:70:5b:cd:ca:f4:f4:cb:08:cf:ba:c9:74:c5:
c3:09:ef:c3:3d:94:02:4c:86:80:da:cb:48:3c:9a:
e7:17:66:f5:48:35:03:41:e6:95:22:90:cc:c1:ef:
13:66:46:5e:2c:ab:3e:1f:e0:bd:1a:35:3f:de:2b:
4c:ee:fd:a9:19:fa:b3:22:f5:74:3c:ea:58:0c:60:
1e:20:ff:3b:73:b1:88:d3:c9:b5:a9:1f:34:75:7a:
aa:7a:18:b5:8e:8f:94:63:84:70:f5:5b:aa:59:79:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:6B:83:C4:26:92:B9:64:C4:FF:FF:18:CD:F5:19:7C:1F:C2:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0363AA6DFFE11EFA9306DAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.52.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0a:40:f3:42:94:dc:70:79:29:ac:5f:3f:85:6f:a5:63:48:
64:94:69:2f:76:9e:d3:ac:37:a9:9a:a0:52:55:13:a9:1e:b8:
f5:19:d8:5d:b4:59:7f:71:8f:78:ed:e3:ea:b1:80:72:13:71:
f3:37:67:77:a5:fe:ad:23:39:50:e5:77:a0:41:2d:7a:07:13:
26:18:82:53:d5:4b:f4:7a:1c:1d:d5:d1:ef:62:ff:e9:af:5b:
c7:cd:0f:ae:93:1c:22:c7:7b:bf:8b:08:57:54:e3:58:ce:ac:
f1:56:cf:d1:ca:d5:eb:cb:99:a1:39:f3:41:85:5d:2b:77:7b:
1f:4b:6a:6d:0f:c4:f5:11:75:e0:db:21:f2:b5:f1:13:ed:7d:
81:ad:87:43:a0:d7:60:ac:1d:65:8b:f4:80:e5:cb:a7:f8:38:
76:f3:ec:b7:76:5d:e4:6f:ca:1c:53:00:e7:31:ad:98:df:c2:
44:21:f5:16:cc:c1:f4:f1:33:7b:0c:bc:85:52:5f:84:83:2c:
1c:79:92:26:12:e3:79:52:c7:b5:97:07:ad:5b:6c:a6:b2:f5:
83:c7:7b:29:64:29:19:13:29:f5:ef:d8:05:e8:d8:eb:e0:a3:
ad:c0:cc:7f:08:95:45:23:88:2f:10:1c:f4:cb:bf:5f:37:68:
1e:db:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:55 2025 by rpki-client