Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5461034BB7811EFB5AA899A762E951A.roa
File: F5461034BB7811EFB5AA899A762E951A.roa (raw, json)
Hash identifier: XBYspLtj14HZCDzqJbXzd8J+UOGPP61vnIwB3ti1QOg=
Subject key identifier: 7E:07:3C:43:33:A6:04:C2:30:FB:77:62:DD:E6:CF:A3:98:6D:16:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5461034BB7811EFB5AA899A762E951A.roa
Signing time: Mon 16 Dec 2024 06:42:46 +0000
ROA not before: Mon 16 Dec 2024 06:42:42 +0000
ROA not after: Tue 04 Mar 2025 06:42:42 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72604 (0x11b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:42:42 2024 GMT
Not After : Mar 4 06:42:42 2025 GMT
Subject: CN=675fcbe6-221d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:d3:e9:49:cf:73:77:f7:27:8e:51:c9:6b:
74:71:3c:05:0b:47:ce:e2:19:d2:ae:40:dc:d7:a0:
53:35:53:ad:aa:e1:a9:b5:3b:85:55:7e:f7:ab:0f:
ec:37:dd:d5:89:04:7e:b7:40:b3:69:cd:74:d9:4f:
50:2f:17:d9:e3:39:00:7f:63:07:16:b4:99:e1:95:
0e:55:bd:cf:c2:fa:a4:e5:9a:7c:26:a2:0a:e4:6d:
87:8e:c6:1c:f5:6a:c1:e2:26:e2:e1:0d:e7:06:58:
16:91:6f:99:e5:a7:ed:c8:87:79:c6:42:39:ef:74:
e7:e5:b2:46:4f:2a:2c:75:86:ee:ad:c0:06:3d:72:
50:27:45:45:6f:56:e9:e9:6f:83:e4:08:01:8f:55:
53:68:6c:34:a1:51:5d:da:e6:c0:02:e6:4f:da:d1:
a6:aa:87:78:3b:e0:f0:0e:7e:70:5a:92:90:57:00:
9d:06:b8:0f:f4:67:27:2f:6a:64:7b:cf:98:18:15:
2b:1a:93:c7:bb:02:d6:b8:54:66:00:a7:2e:90:15:
94:4e:c7:82:dc:d7:94:8c:bd:fb:8e:5b:3f:b7:72:
14:07:f6:1b:8e:56:24:53:8f:45:3c:72:da:bf:17:
87:e7:d1:57:b5:ce:22:49:97:89:89:38:d6:b7:a5:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:3C:43:33:A6:04:C2:30:FB:77:62:DD:E6:CF:A3:98:6D:16:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5461034BB7811EFB5AA899A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
68:30:18:65:b3:b1:8c:47:21:53:e4:31:5b:9a:83:d2:4f:6e:
ef:d4:a7:68:a5:7b:c3:1c:97:a6:7e:ba:66:8e:52:3e:41:6b:
72:51:ab:00:56:fe:27:8f:2e:26:45:38:c5:7e:54:0d:5a:13:
bc:d2:76:aa:5e:4c:07:bd:fe:36:0e:23:5e:80:aa:fa:44:a4:
f4:4c:c2:90:77:39:ed:b2:d4:37:1b:53:f4:6a:6c:97:49:e3:
ab:95:b0:cc:7b:ed:71:e1:96:da:a0:90:06:1a:cb:14:2e:ea:
19:9d:d1:57:c8:e4:d9:6e:97:fa:5e:d1:ce:e9:23:3c:19:26:
42:89:5d:cb:96:57:fb:37:6d:7e:2e:bb:cf:ab:ba:75:e1:d1:
d7:db:2c:57:33:a9:14:4c:0a:cb:38:76:2e:ee:11:70:08:9e:
b7:13:34:78:e6:a2:2d:22:15:f7:cc:0f:bf:5b:05:4e:ad:5d:
cc:2d:07:38:fe:f2:a4:48:26:2a:b6:9d:4f:1d:43:e7:23:de:
af:e6:dc:10:cb:a9:89:13:58:e3:d3:bd:8c:3f:8e:cf:06:9f:
b3:64:74:67:26:29:e9:11:5d:67:de:ce:f1:1c:21:64:8b:ed:
4a:03:c6:22:97:8e:76:8b:ae:ce:d4:7a:b8:d2:2e:31:91:13:
da:39:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:21 2025 by rpki-client