Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A56956AF2DE11EF92AF694D762E951A.roa
File: 0A56956AF2DE11EF92AF694D762E951A.roa (raw, json)
Hash identifier: Kv6OM72rspppriTKUzyep//sniGzqo6tHJs9QLlqsNg=
Subject key identifier: AE:46:5C:05:4F:8E:32:54:69:61:93:8F:5E:FB:88:39:C4:5F:82:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A56956AF2DE11EF92AF694D762E951A.roa
Signing time: Mon 24 Feb 2025 18:34:54 +0000
ROA not before: Mon 24 Feb 2025 18:34:50 +0000
ROA not after: Mon 07 Apr 2025 18:34:50 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89252 (0x15ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:34:50 2025 GMT
Not After : Apr 7 18:34:50 2025 GMT
Subject: CN=67bcbbce-a60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:54:36:91:29:3e:21:00:89:7b:43:b7:9c:
f8:23:d9:fd:22:67:f5:04:63:7d:db:d3:72:82:3b:
27:04:ff:1c:61:21:fb:ba:35:e6:74:03:15:f4:82:
37:7c:0f:56:bd:79:c0:aa:ab:1e:34:9d:ef:76:7b:
ee:57:8d:ea:b6:42:67:a3:05:18:5a:ce:ec:0a:c8:
5e:9f:f6:52:65:93:cc:90:d6:04:16:a2:13:c0:95:
09:c8:c5:6b:7d:ed:ad:8a:44:0a:63:74:a3:6b:8e:
b1:6b:6c:54:57:5b:48:3c:4d:c9:6b:d4:5c:e2:0a:
5d:5e:07:5d:08:8f:b9:ac:99:7a:88:db:2e:d3:4f:
1f:18:12:82:12:e5:d3:0d:25:13:95:81:53:49:d6:
94:30:f7:37:c2:39:7d:59:ad:b2:0f:18:6c:aa:8e:
59:b2:5f:50:1c:7d:b6:92:4d:bc:0d:a1:19:12:36:
b8:52:b7:1f:1e:2f:35:dd:e5:d7:a9:df:a2:47:93:
13:63:eb:c7:d1:a2:fb:21:0f:5a:ed:2f:1d:f9:b8:
b8:6e:83:cc:00:f6:30:a1:3e:38:9c:af:49:f5:9c:
13:ce:4a:e0:a8:85:fe:1f:88:05:9a:23:08:43:2b:
67:f1:60:c3:1b:3a:bc:eb:aa:66:c7:49:b7:1c:81:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:5C:05:4F:8E:32:54:69:61:93:8F:5E:FB:88:39:C4:5F:82:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A56956AF2DE11EF92AF694D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0/23
Signature Algorithm: sha256WithRSAEncryption
22:f6:c7:81:78:d3:3f:ab:a1:4e:fc:23:12:46:0a:a5:89:af:
66:f1:2c:a6:0a:ab:cf:b0:b3:7b:44:0f:1c:69:65:f2:f1:a3:
69:c8:f7:18:51:11:70:6c:03:e1:75:cf:8c:20:99:13:7a:01:
5b:d3:6d:f7:f7:92:14:70:70:8f:54:43:a2:b4:0c:45:74:0e:
d9:b4:07:5d:65:04:1b:75:8c:08:2f:be:87:9a:41:dd:b2:0b:
66:d8:d4:90:89:d3:9f:87:29:da:48:ee:7f:18:6e:82:41:09:
8e:cd:b2:e6:b2:b8:66:62:95:98:bd:c9:1a:83:6f:a1:02:04:
c3:86:de:14:c4:0f:e0:f6:55:bc:5d:9e:37:7c:74:1d:43:a9:
24:41:cd:57:57:be:ab:3f:09:56:52:73:46:27:64:68:fa:3d:
d8:27:c5:5e:60:80:29:0a:77:9f:08:6a:23:2c:f8:51:60:7b:
14:c2:64:ab:89:2b:8d:e2:b0:75:a5:aa:a4:93:ac:52:9f:49:
1c:a8:d3:2b:7e:30:ed:ef:d5:3a:bd:c1:2b:29:27:ec:ca:ae:
3b:c9:c2:59:39:67:0b:6d:52:ff:14:74:14:c1:8b:a0:7f:b0:
c0:a2:ee:49:f3:df:a9:27:f2:17:44:2e:94:26:24:2d:ed:4c:
83:5d:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:28 2025 by rpki-client