Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45B617ED9D711EF92EE8D9C762E951A.roa
File: F45B617ED9D711EF92EE8D9C762E951A.roa (raw, json)
Hash identifier: BCkQwR3++g2vPulPJCLkR90wBgh5Fqvpv6aNO4GxdCY=
Subject key identifier: 2F:4E:3D:09:A3:E0:27:92:C0:C1:F1:58:DF:C4:A8:06:2F:FA:76:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45B617ED9D711EF92EE8D9C762E951A.roa
Signing time: Thu 23 Jan 2025 22:18:21 +0000
ROA not before: Fri 24 Jan 2025 22:18:17 +0000
ROA not after: Sat 01 Mar 2025 22:18:17 +0000
asID: 44559
IP address blocks: 154.205.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82755 (0x14343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:18:17 2025 GMT
Not After : Mar 1 22:18:17 2025 GMT
Subject: CN=6792c02d-a52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:49:cf:e2:52:ce:b3:d3:5a:28:32:eb:2e:
3f:3e:72:47:5b:73:41:f2:f9:24:80:75:cb:c6:8c:
fa:1a:b8:bc:42:ed:e1:13:56:a8:6e:a7:7c:b3:b4:
d6:5e:94:dc:b3:d7:f4:2b:54:76:1c:36:30:07:61:
47:d9:06:64:50:0c:62:61:e8:ed:91:0b:aa:f4:cf:
62:a9:b9:98:90:0f:d7:27:e8:fe:72:8d:eb:f9:22:
b8:0b:ad:24:7a:15:7d:b3:ae:e1:9c:b2:ef:38:0b:
ff:1a:3e:8c:ff:d0:65:c1:cb:b8:bb:a1:2e:d7:82:
90:95:6a:e7:79:31:4e:0b:71:74:8d:32:b4:34:ee:
df:0a:78:9f:58:44:ec:cd:de:2f:b7:42:f4:a8:a8:
21:5d:8c:b8:e3:6e:4a:81:22:c4:07:75:8c:89:cf:
6b:ac:73:5a:3c:9d:4d:cd:3f:5a:35:b2:bd:dc:f6:
00:dc:94:46:61:83:c7:79:87:f9:4e:70:f6:af:cc:
52:41:6c:05:dd:38:e0:54:91:f7:c1:98:55:95:e3:
b5:44:64:a2:78:64:26:b8:d0:d5:53:2f:84:97:f3:
64:db:96:43:d7:c7:62:f3:d9:7a:9b:fc:70:86:19:
a5:d6:82:2b:87:da:83:7a:ed:06:76:2f:ef:a7:00:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:3D:09:A3:E0:27:92:C0:C1:F1:58:DF:C4:A8:06:2F:FA:76:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F45B617ED9D711EF92EE8D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.232.0/24
Signature Algorithm: sha256WithRSAEncryption
06:77:2c:cc:65:8b:53:ca:ad:98:49:9a:3e:8b:d1:57:aa:20:
7c:ed:ca:90:80:b1:03:b7:28:47:04:72:71:b7:02:e1:43:b7:
9b:36:62:10:d3:26:40:ad:67:2a:00:ae:c5:88:16:9c:cf:0c:
35:0e:9d:82:e7:60:60:86:72:55:c5:b5:75:74:97:87:18:2d:
99:50:5c:49:57:3e:6c:cb:83:60:7c:25:7b:e8:fb:e0:ed:9f:
39:c8:40:7c:09:89:b6:dc:40:e2:be:55:de:26:bf:02:24:be:
3c:80:f6:a8:03:69:c8:72:f6:b1:10:a8:a4:46:c4:e6:83:ca:
77:f4:d3:a8:56:89:0a:36:fb:b4:54:c9:40:f8:ab:70:42:01:
2f:50:10:b7:fd:0b:67:3e:be:24:94:b4:94:2c:26:b2:2c:05:
3d:0b:e9:30:07:39:fc:39:42:d0:6c:23:02:a6:aa:55:19:a2:
2f:db:40:26:f0:18:94:62:94:e6:68:da:03:13:6c:5a:ad:01:
8c:19:0f:cf:66:17:46:7a:14:7c:90:52:d5:17:c4:fe:b6:a9:
f3:1f:ed:2e:dc:86:c5:46:b4:69:e0:0a:8c:98:80:b7:ef:03:
3c:dc:25:5a:1f:85:55:67:34:7a:fb:4d:11:d5:8e:af:95:ba:
e4:bc:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:34 2025 by rpki-client