Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00584052CE5011EFAB48B295762E951A.roa
File: 00584052CE5011EFAB48B295762E951A.roa (raw, json)
Hash identifier: 8GY6FG5af65/gg849Xeojy4dteuqakF0629JDuGziN4=
Subject key identifier: 9F:47:C5:78:DA:15:66:AE:0B:60:03:DE:47:83:AF:D2:1A:F3:F0:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01383E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00584052CE5011EFAB48B295762E951A.roa
Signing time: Thu 09 Jan 2025 06:07:27 +0000
ROA not before: Thu 09 Jan 2025 06:07:23 +0000
ROA not after: Fri 09 Jan 2026 06:07:23 +0000
asID: 17561
IP address blocks: 154.220.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79934 (0x1383e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 9 06:07:23 2025 GMT
Not After : Jan 9 06:07:23 2026 GMT
Subject: CN=677f679f-5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:cd:63:bd:8b:da:98:ea:4f:9b:d6:b6:6d:
59:81:75:40:20:bf:f6:6f:3f:62:e8:ce:d3:26:16:
8d:c7:a8:19:b2:8d:ad:2b:ab:67:a5:77:5e:a7:18:
62:51:19:7c:94:57:aa:28:43:e4:cf:04:5c:58:33:
3d:67:84:39:22:f2:ef:08:86:a6:55:dd:86:3f:a9:
bc:49:8d:f2:70:6a:ec:6f:3e:8a:94:6f:e0:de:ff:
ac:5c:53:ca:e1:25:59:3d:01:47:93:cf:9f:4a:9b:
2d:12:cd:28:b9:a7:7c:97:e5:dc:70:7e:72:3d:75:
ea:8b:0b:dc:e1:05:a7:b9:eb:65:d8:7d:5e:08:32:
7b:a0:70:c5:9f:e7:f4:6d:bc:aa:dd:10:55:84:ed:
1e:a1:9a:1a:8c:ac:f3:0a:07:5e:bc:78:87:20:79:
c9:dc:ef:a5:10:38:3b:07:93:e2:b8:98:86:0d:3a:
15:6d:87:38:84:eb:7d:1d:19:0d:47:3e:5d:59:eb:
e2:2c:09:32:47:31:a1:5a:aa:af:2d:61:c3:23:7b:
4a:7c:2a:47:02:45:2e:45:37:be:31:d7:ae:a3:12:
10:14:46:d3:9e:d8:b5:75:bd:96:79:6a:b9:ee:33:
e9:23:8c:a5:8c:af:06:80:46:b1:7d:c1:87:37:e3:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:C5:78:DA:15:66:AE:0B:60:03:DE:47:83:AF:D2:1A:F3:F0:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00584052CE5011EFAB48B295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.227.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:57:93:83:09:2c:a9:81:fc:19:f3:f0:8c:4a:ec:ff:1d:04:
3f:7b:4f:92:b0:93:b4:e3:d4:44:54:ef:35:df:5c:6f:aa:34:
10:15:ed:55:cd:10:43:d2:68:ab:de:1d:50:b1:21:10:fd:66:
91:c1:2a:6e:50:8d:86:f2:28:ff:96:b4:29:b8:cd:90:c1:9d:
32:43:0a:e1:bb:9c:69:75:4b:8c:df:5e:bf:16:46:11:43:b5:
72:8d:fc:92:53:c1:d1:64:df:ba:5a:a8:9f:16:f4:0f:60:b5:
d1:d0:ee:bd:df:68:82:e1:1a:2e:2e:7f:2d:fa:52:c6:e9:99:
4a:6a:f9:20:b9:8e:d3:80:10:47:38:d6:b0:f3:9e:ba:27:39:
40:a9:44:7e:cd:d1:40:ea:47:43:df:16:db:9c:4d:85:58:d0:
5a:32:86:0b:4d:6a:30:ef:79:18:69:3a:ed:56:53:54:05:88:
ca:89:61:1c:18:db:d6:3e:73:0f:76:ef:39:dd:9f:cd:1c:f1:
db:bf:9a:0f:b0:78:79:e6:1c:61:db:c4:dd:ad:11:18:10:ac:
cf:a3:c1:57:79:ce:5a:b0:0d:52:35:ed:9c:0b:de:5d:96:a6:
9c:23:f9:41:f1:28:46:56:0c:e2:f5:65:dd:5c:8b:83:a0:01:
de:d8:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:52 2025 by rpki-client