Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43865818F35911EF8F76E698762E951A.roa
File: 43865818F35911EF8F76E698762E951A.roa (raw, json)
Hash identifier: X3TOzeo3HwQc/74QaRiJvwJ8lCoDeMVeXPPHIiriilA=
Subject key identifier: BE:DF:0D:75:F3:CB:FE:62:09:B9:14:B3:CF:9B:57:73:21:2D:A5:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43865818F35911EF8F76E698762E951A.roa
Signing time: Tue 25 Feb 2025 09:16:58 +0000
ROA not before: Tue 25 Feb 2025 09:16:55 +0000
ROA not after: Mon 07 Apr 2025 09:16:55 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89582 (0x15dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:16:55 2025 GMT
Not After : Apr 7 09:16:55 2025 GMT
Subject: CN=67bd8a8a-7c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:34:2e:24:d4:9b:41:29:1b:c2:fe:1d:07:
e0:3a:0f:d3:90:3c:44:f8:cd:af:cf:e0:2e:e6:e4:
b6:b0:e2:21:5a:b4:7b:dd:f0:62:fd:db:7b:75:46:
a9:52:fa:ec:26:c9:0e:cb:30:ac:7b:72:3e:d7:bf:
84:f0:f7:51:4a:99:0f:ea:f9:ee:5e:b8:55:bd:b0:
98:34:0d:cf:c3:fb:4f:52:22:57:52:ab:87:f7:92:
02:c9:67:fa:2b:b8:45:02:1e:08:b7:e1:d6:c6:3d:
8e:a2:59:2b:4b:64:a4:89:a7:12:2d:31:d2:11:e4:
8c:b0:04:0b:44:8f:0e:f7:23:7f:70:e7:31:0a:55:
e4:2a:ad:5b:2c:0f:f8:3c:2e:a5:9d:f2:2c:b3:d7:
89:1b:4a:f1:cf:7f:d7:e7:f8:33:d3:a8:7d:3c:67:
02:20:26:29:54:b3:64:24:1f:6c:bd:27:8c:15:ca:
41:ba:8b:ff:74:92:f9:42:3e:9c:08:ea:0d:a7:42:
35:f2:dc:e8:68:20:26:85:94:9a:2c:87:54:da:6c:
0f:6e:3e:fe:e3:dc:55:37:76:73:4b:42:ef:e1:a9:
8c:da:95:8f:8a:9c:a2:0d:51:86:2d:5f:26:49:6a:
06:c7:e8:47:ff:9b:32:c0:c0:7f:9b:37:82:47:79:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:0D:75:F3:CB:FE:62:09:B9:14:B3:CF:9B:57:73:21:2D:A5:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43865818F35911EF8F76E698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:76:31:35:5a:36:c4:1e:8c:c9:72:9b:25:8e:00:a2:23:04:
97:7a:17:26:be:e2:43:c7:9c:ec:fb:2c:ea:df:00:d9:b7:8a:
b0:a2:c2:c3:55:5e:8e:49:37:8a:ac:0b:47:07:dc:09:33:d4:
ff:4b:23:9e:4d:9d:f6:a8:45:4d:57:78:43:c1:d2:a6:2d:ee:
41:c7:b3:ce:43:0c:33:64:e2:58:93:3c:42:30:39:4b:58:c1:
21:57:6e:69:7b:09:b9:56:f4:46:bf:36:92:18:f7:46:cd:93:
72:ff:61:47:79:b2:10:f1:1d:3d:a6:02:a3:93:10:b0:29:e0:
d0:be:63:f9:7b:17:d8:4b:75:34:0d:26:db:3d:d7:5a:90:05:
2e:fb:db:88:0f:98:d7:bf:2f:d2:09:32:0a:d1:a1:6d:c9:64:
70:29:72:15:dc:43:ff:2e:e0:49:c3:1b:87:43:10:d1:df:4d:
07:01:a3:65:6a:ec:f7:79:ea:28:bc:52:18:23:e5:ea:be:8e:
54:a4:af:01:c2:58:16:90:bf:cc:ab:ef:fc:97:30:78:2b:e5:
0a:86:9a:e5:22:1a:76:f8:15:72:6c:ef:5f:71:c5:5a:c3:fc:
5d:3d:f2:fb:b0:51:d7:23:60:ff:04:96:6f:10:3b:f0:8b:7f:
ad:a8:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:34 2025 by rpki-client