Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E2CA82DA5511EFB77F2E7C762E951A.roa
File: F4E2CA82DA5511EFB77F2E7C762E951A.roa (raw, json)
Hash identifier: uDVInx7xB7fZ3kHqomNfZ8LJl9humb3XD1es0CWpie4=
Subject key identifier: 99:4B:89:4B:45:EC:B2:00:A1:CB:C2:E2:D7:B7:B2:31:78:03:1E:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E2CA82DA5511EFB77F2E7C762E951A.roa
Signing time: Fri 24 Jan 2025 13:20:19 +0000
ROA not before: Fri 24 Jan 2025 13:20:15 +0000
ROA not after: Sat 01 Mar 2025 13:20:15 +0000
asID: 44559
IP address blocks: 154.205.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83809 (0x14761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:20:15 2025 GMT
Not After : Mar 1 13:20:15 2025 GMT
Subject: CN=67939393-4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:d9:23:5b:5f:51:62:10:18:e7:c5:e1:2f:
39:3f:47:18:a8:ed:53:aa:3c:04:18:9f:3e:18:f5:
32:9a:69:97:e8:cc:24:2b:60:cc:a7:77:7c:a5:85:
e2:9e:9b:50:8a:d5:b1:d4:d6:31:a2:11:7e:6f:ef:
6a:a2:fd:e1:d5:15:25:00:78:08:7f:bb:d5:43:f8:
d8:61:9c:93:08:04:67:4a:1c:43:6a:16:d1:82:ea:
d6:d7:b0:77:66:b0:bc:88:61:4f:33:b6:43:d6:5e:
98:6a:be:71:68:ef:a2:74:16:24:07:68:41:5d:fc:
3f:d9:76:51:92:0e:0d:8a:75:fe:36:e1:53:5e:0c:
43:19:ec:99:6c:e5:72:25:62:a8:bb:7e:69:21:0e:
c7:6e:38:f8:97:4b:de:46:78:ea:3c:96:7f:39:3d:
54:a4:38:82:f0:d2:f6:5d:8f:22:2d:03:65:5b:33:
d6:8f:10:55:e7:24:d8:60:5c:88:3d:9a:1e:3b:c1:
38:0e:0c:a3:30:04:7f:c2:1d:0e:14:a7:0c:ad:d7:
e8:f7:ed:7e:94:0e:30:70:b5:75:8f:eb:45:8b:a5:
3b:12:8f:22:94:6c:6c:b2:55:c5:df:c0:8a:15:23:
b2:22:5f:2e:68:40:49:0f:56:7c:f9:71:70:ea:7c:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4B:89:4B:45:EC:B2:00:A1:CB:C2:E2:D7:B7:B2:31:78:03:1E:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E2CA82DA5511EFB77F2E7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.242.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:bf:9c:1c:94:d2:61:03:d8:f5:2f:bc:61:0d:1c:86:28:35:
1f:03:be:e5:38:17:b7:8d:62:1a:89:f3:8f:3e:53:72:d4:11:
c2:2c:13:d1:5c:e9:b0:c0:e6:da:ce:97:ce:b0:44:21:28:cc:
6b:4e:1c:25:84:8f:fd:c3:6c:e0:b6:2e:b4:d6:c3:38:b3:7c:
bb:70:fb:c1:6d:02:da:e2:67:1c:f9:1c:c3:2c:98:7d:66:2d:
65:17:10:a9:b9:84:89:eb:91:36:37:c3:8c:ad:bb:cf:3a:71:
cc:3c:e0:66:2f:24:7b:84:12:a4:55:7a:06:c7:08:5c:69:90:
fa:e4:18:10:ec:13:a4:4d:9f:a5:26:96:9c:36:79:9a:a6:9e:
c2:95:e7:f9:95:6d:19:11:31:dd:be:4b:e5:0f:de:67:16:f7:
d3:74:b1:5a:d4:aa:36:2f:72:f5:16:d9:ba:0d:e3:5f:5b:30:
73:a9:d0:19:7e:44:ed:f9:10:31:e6:a8:01:c3:12:87:f2:bb:
c2:d8:ee:d7:51:99:50:a8:75:b8:61:0c:8c:d3:1b:84:7f:a5:
52:42:6b:c3:c2:d3:a6:d6:62:1b:54:cc:4b:3b:12:29:70:45:
29:81:36:8e:5f:ef:05:db:d1:4b:ef:07:ff:a2:f7:60:13:67:
ab:4b:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:53 2025 by rpki-client