Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/437AB69AD98F11EF8BC76ABD762E951A.roa
File: 437AB69AD98F11EF8BC76ABD762E951A.roa (raw, json)
Hash identifier: 9KIWJGfJvPlq4w4caKzerxhexWvfpJvuxjnvDUhOu9Y=
Subject key identifier: 3C:6B:A6:B8:7F:0E:7E:E8:5B:BE:78:33:D0:15:DA:6C:BF:48:DB:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014280
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/437AB69AD98F11EF8BC76ABD762E951A.roa
Signing time: Thu 23 Jan 2025 13:38:01 +0000
ROA not before: Thu 23 Jan 2025 13:37:57 +0000
ROA not after: Tue 13 May 2025 13:37:57 +0000
asID: 138915
IP address blocks: 154.205.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82560 (0x14280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:37:57 2025 GMT
Not After : May 13 13:37:57 2025 GMT
Subject: CN=67924639-2ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:1f:9d:14:c0:7e:6a:85:17:02:bb:5e:8c:
67:24:71:22:3b:ea:53:96:89:2f:3a:17:aa:b6:c1:
28:f0:e0:43:07:70:e7:02:bc:2c:89:25:93:95:03:
30:aa:c9:f6:a9:b3:bd:d4:cc:8e:30:0e:a0:16:ae:
59:f0:49:9f:0b:6e:93:c5:0e:34:14:e9:b6:24:d3:
7a:31:56:b4:0b:26:0d:6b:75:31:a4:50:7e:f1:14:
b6:a1:0a:e0:fd:2a:d7:19:97:fb:b2:6c:0c:2d:0a:
9b:b1:96:ce:30:57:a4:05:38:1d:fc:e2:70:3a:d0:
e4:c3:3a:c4:45:ff:d2:a0:35:a9:dd:90:2b:ec:ea:
34:c9:45:6e:d8:be:96:86:f3:88:9d:c6:3b:e2:8e:
ab:fc:2d:7b:85:47:46:26:dc:8c:b5:f2:3b:57:ee:
f5:cb:62:8f:26:e0:08:b8:8f:23:7e:e2:0d:69:8e:
b4:39:58:d7:79:cf:19:f2:49:ac:9a:dc:41:2e:54:
a1:f3:00:cc:53:44:77:85:45:9f:3b:ce:9d:72:d4:
cc:08:7a:28:1f:64:9f:90:20:f6:88:e7:3a:f3:95:
f8:47:4c:df:e3:1d:05:67:ad:20:8d:cf:31:f9:d8:
83:3f:d2:19:39:50:40:68:84:f0:72:fe:15:10:cb:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:A6:B8:7F:0E:7E:E8:5B:BE:78:33:D0:15:DA:6C:BF:48:DB:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/437AB69AD98F11EF8BC76ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d1:7b:6b:d3:26:24:57:b5:a6:0e:02:e7:4f:a6:38:7f:3a:
31:16:30:79:e6:d9:e0:6f:e3:8e:ea:99:79:67:ca:46:7e:3d:
7f:e3:1c:bb:d1:27:34:1e:4b:62:36:d7:cb:48:b3:d3:4d:c6:
52:42:3e:af:22:8e:de:5c:7f:94:e1:5d:fc:db:b8:62:fb:8a:
ac:e9:28:9c:83:9f:50:98:45:ee:0d:12:df:bc:6f:4a:85:6a:
e7:c9:53:30:1b:43:4a:88:0b:db:ef:85:a3:1b:8b:ac:8b:50:
ef:3d:b1:bd:41:29:c6:9f:92:76:a6:82:b8:2b:ee:b2:0f:4d:
a0:da:fe:c6:f6:2b:db:4a:02:6b:85:d1:da:81:c2:c4:3e:b5:
ba:e4:c5:4d:49:c4:e9:38:66:6c:3e:ed:3d:f9:ef:fe:75:a9:
43:e9:dc:65:fc:c6:a0:16:d7:3c:3a:13:b2:3c:92:da:59:fa:
4d:60:c3:de:6b:cd:98:82:59:2e:ea:32:47:d7:32:1e:67:17:
14:3f:08:e1:6b:61:9e:14:5f:1a:a6:ee:7c:73:a5:ce:ba:21:
7b:f1:85:47:83:38:23:d4:31:fa:0f:40:36:f0:c4:3b:f4:2f:
bb:62:32:14:1b:b8:6d:ef:ff:7c:63:38:89:16:58:49:8f:6f:
25:57:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:36 2025 by rpki-client