Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA2A31CEF2CC11EFB0C82D57762E951A.roa
File: CA2A31CEF2CC11EFB0C82D57762E951A.roa (raw, json)
Hash identifier: /lCp7uwcZ2t+TR5lYZ//BWwfyXm8uXdHM6hiRG8FhIo=
Subject key identifier: 16:0B:A3:FF:7D:D0:48:86:68:D0:DD:79:01:83:A3:BF:D0:2A:29:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA2A31CEF2CC11EFB0C82D57762E951A.roa
Signing time: Mon 24 Feb 2025 16:31:25 +0000
ROA not before: Mon 24 Feb 2025 16:31:21 +0000
ROA not after: Sat 29 Mar 2025 16:31:21 +0000
asID: 203020
IP address blocks: 154.223.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89195 (0x15c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:31:21 2025 GMT
Not After : Mar 29 16:31:21 2025 GMT
Subject: CN=67bc9edd-f18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:30:60:cb:7d:1c:18:c5:88:18:e9:44:7f:
6f:3e:91:ab:27:e1:a4:04:fa:40:af:c8:60:e4:cc:
fa:79:ae:d7:63:3a:4f:95:eb:ea:09:86:91:db:8d:
19:49:9a:ce:18:73:57:90:0f:3d:89:82:f8:39:9a:
34:d0:59:04:21:f8:d8:a7:85:8b:14:c4:01:57:dd:
1f:70:7b:fe:df:1c:67:42:21:dd:32:bf:f0:e8:ea:
a0:c3:d2:87:dd:a0:c3:a0:47:96:d2:ab:ef:39:5a:
79:d8:9e:ea:b2:ef:13:fb:5f:85:16:1b:6f:c4:56:
74:77:bb:e0:e4:70:ac:b6:fb:58:d6:81:69:63:1a:
14:19:21:90:e2:c7:19:cf:be:a4:9a:a2:bd:3c:a3:
2a:52:1a:c7:d8:c3:75:40:63:50:40:d0:83:91:d9:
05:ba:9e:db:dd:53:e8:ac:44:03:4e:d7:82:97:6f:
49:ae:df:fb:f3:09:de:c8:34:e3:b1:f4:ab:ee:3e:
e6:f8:e4:a8:1c:42:7d:ae:66:7b:7e:d9:5d:a1:84:
3f:ba:82:d1:36:5a:b9:6c:15:06:48:7c:d2:fb:b2:
89:5b:c3:ca:fe:d8:dd:ac:79:34:a1:f0:a0:96:66:
c9:94:0e:fb:ba:39:f1:a3:ef:a3:76:e1:fd:72:d5:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0B:A3:FF:7D:D0:48:86:68:D0:DD:79:01:83:A3:BF:D0:2A:29:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA2A31CEF2CC11EFB0C82D57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.141.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e8:85:47:b1:1c:2b:37:ab:ba:28:bf:0f:2d:fd:9b:fb:a0:
4b:ce:d4:7b:3c:c5:e3:e2:66:9d:38:e0:82:2a:05:b7:25:80:
b3:1b:51:dc:cc:73:93:b3:01:1c:22:c6:ac:8e:73:98:05:a0:
41:da:2c:f1:ff:d0:76:b2:df:f9:62:9b:da:36:4a:1b:10:64:
ab:4d:6e:61:8f:dd:9a:61:ea:db:dd:bd:06:94:66:70:b3:81:
b1:2b:bc:78:dd:ce:d3:f9:04:3e:33:fa:ae:46:ba:cf:7c:93:
aa:e5:e5:46:bd:4d:0e:32:84:f1:e7:ff:20:69:33:1d:c4:d6:
a5:4a:26:da:2f:a6:14:fc:8a:3e:3f:e3:2a:5c:41:19:a0:96:
76:3e:ff:87:08:5b:91:80:34:17:67:a9:e6:a0:e1:d3:13:f9:
9b:0f:29:3b:e6:a1:94:ad:49:eb:14:32:f6:79:5a:df:f5:ac:
b0:bc:a1:ff:8b:81:db:4c:0e:97:ea:29:41:7c:23:12:e0:2a:
d1:d6:a3:18:9e:f2:b8:60:91:c6:32:80:13:f7:94:4a:e9:e7:
6f:e8:96:2f:70:8e:05:62:2e:db:ed:2d:87:7a:78:23:eb:b8:
20:23:0f:c8:55:9b:0b:7c:a3:33:10:0d:cd:11:9b:23:ba:d7:
ca:d5:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:45 2025 by rpki-client