Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF66B70ADA1611EFB863F253762E951A.roa
File: FF66B70ADA1611EFB863F253762E951A.roa (raw, json)
Hash identifier: zAEJrh2YOh+ypESnLUi9B7lTkh973D53tiIvkVcyG8Q=
Subject key identifier: D6:63:61:14:5D:90:48:15:5D:A9:EF:AA:59:93:92:44:E1:E8:83:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF66B70ADA1611EFB863F253762E951A.roa
Signing time: Fri 24 Jan 2025 05:49:38 +0000
ROA not before: Fri 24 Jan 2025 05:49:35 +0000
ROA not after: Sat 01 Mar 2025 05:49:35 +0000
asID: 62240
IP address blocks: 154.223.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82918 (0x143e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:49:35 2025 GMT
Not After : Mar 1 05:49:35 2025 GMT
Subject: CN=679329f2-c077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:5c:a9:08:a0:48:ec:eb:d4:d4:52:5c:aa:
f5:3f:84:69:cd:be:b5:bf:d4:3e:4f:8e:a3:f2:cd:
d5:50:61:40:66:8c:3b:f3:c7:73:5a:f0:ec:5d:7e:
28:91:7b:92:7b:f5:21:3c:8b:2c:a0:10:d3:a4:fd:
4b:2f:63:07:83:48:83:4c:f2:ae:15:08:3a:6f:4c:
52:b9:d3:f0:d7:56:0f:0b:18:95:b1:2f:d7:64:5d:
ee:18:50:55:56:5d:68:86:ce:9d:6e:e3:55:0b:47:
36:24:ff:0e:e4:9e:ec:94:58:81:08:d9:70:af:11:
32:9b:8c:21:f3:8b:cf:77:8f:79:67:07:86:e3:99:
3e:bf:20:d3:f4:92:62:e2:9b:8b:4c:f8:56:1a:58:
c5:7b:66:23:90:31:c6:ac:3d:ed:71:e8:da:58:69:
32:78:7d:9c:62:d6:85:25:3f:05:67:f4:6e:2f:cf:
e9:32:f1:a5:76:a1:dd:6c:09:4b:2e:a8:b8:51:da:
4a:2b:ae:b4:b3:73:aa:8c:61:d3:ce:56:20:7a:f5:
bc:86:0e:dd:e1:57:d8:e1:d6:00:62:02:da:e1:74:
10:d2:85:ee:41:c8:71:87:d2:bb:17:eb:78:57:71:
f0:e6:d0:5c:5a:5c:fe:49:00:7e:9f:89:17:4a:da:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:61:14:5D:90:48:15:5D:A9:EF:AA:59:93:92:44:E1:E8:83:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF66B70ADA1611EFB863F253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d1:51:82:0b:99:43:35:02:9f:99:ac:e1:9e:d8:29:1e:c6:
0e:b1:1e:29:e5:1c:e0:71:fb:98:e8:e2:45:fc:ba:75:cf:3a:
27:2d:c5:3d:14:70:f9:29:08:8d:0d:22:39:d7:3d:79:11:8d:
7b:df:27:a1:cf:a4:83:aa:31:c8:38:23:62:3a:0b:63:54:66:
64:74:42:73:a6:c2:50:43:63:cb:46:0a:58:8e:39:c4:ae:82:
e0:9f:cf:e3:3b:88:66:a8:d4:7f:46:53:e1:e0:78:a0:49:4e:
9d:6a:a1:fc:34:41:73:0b:8d:b4:e4:46:1e:ca:8b:47:f2:4c:
18:f6:a5:eb:1e:6e:92:f6:99:e6:98:24:d1:39:3b:e6:3f:db:
23:df:9d:2d:97:23:35:3f:60:77:6b:6b:89:a5:1d:37:66:bf:
79:48:a4:c2:de:1b:ee:b0:9a:f6:e4:49:f4:83:53:a2:1f:42:
e7:6c:06:38:97:1c:1a:98:b5:aa:00:87:36:df:72:89:77:42:
94:8b:27:c9:f3:72:ba:b6:a1:db:2a:fc:0a:bb:9b:d7:a4:55:
a7:e3:8d:43:54:08:94:62:bf:6e:98:23:ac:71:6b:0c:83:ac:
6a:18:8e:9c:1a:6e:73:76:18:24:57:a2:b0:03:c2:2c:8b:66:
ca:d9:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:04 2025 by rpki-client