Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1632F2F2DF11EFB091145B762E951A.roa
File: CE1632F2F2DF11EFB091145B762E951A.roa (raw, json)
Hash identifier: DfMEHJaDVS4zcHqcgTiT4iBEn2E180R9ON9db2OP7v0=
Subject key identifier: 4B:7F:46:84:24:8B:F0:E1:2D:86:26:18:4F:01:1B:E2:2B:FC:10:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1632F2F2DF11EFB091145B762E951A.roa
Signing time: Mon 24 Feb 2025 18:47:32 +0000
ROA not before: Mon 24 Feb 2025 18:47:28 +0000
ROA not after: Mon 07 Apr 2025 18:47:28 +0000
asID: 138915
IP address blocks: 154.223.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89268 (0x15cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:47:28 2025 GMT
Not After : Apr 7 18:47:28 2025 GMT
Subject: CN=67bcbec4-0178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:bb:b2:49:bd:3c:db:bc:12:7d:5f:d6:3d:
8a:b6:66:f6:b7:06:d7:81:f8:64:e2:78:2e:f5:55:
8d:42:b4:db:f6:86:81:9b:0f:f3:fc:d8:20:47:5b:
89:ba:89:cf:20:7f:5e:ea:b8:84:82:00:e1:08:c7:
56:eb:50:58:4c:7a:08:32:7d:44:f2:a2:23:d7:2b:
92:07:79:a7:cc:79:9d:77:d2:14:56:9a:63:41:2b:
d5:bb:e6:41:e4:c1:7f:5e:5e:bc:56:35:a1:ef:24:
59:71:75:06:4c:35:88:5c:30:1e:78:ea:ed:0e:90:
ae:94:22:14:7f:13:b3:90:c7:14:3e:5c:ba:be:01:
b0:37:43:a1:3d:ec:15:19:c1:ed:7f:ca:a6:ec:aa:
16:05:17:c0:cf:fc:2a:2e:ff:75:02:d1:cb:4e:88:
7f:90:07:01:e9:29:02:23:5f:98:80:ea:40:03:e3:
cb:bc:8a:72:8c:69:ed:d2:91:15:7b:88:4b:5c:3a:
74:27:0f:12:ae:2c:ea:37:f1:2e:0b:e0:21:c0:30:
e5:d7:b0:e4:3d:45:a6:2a:4d:f4:94:e1:15:dc:19:
83:67:4b:5e:eb:d2:83:d9:e9:7c:ee:90:73:5a:f0:
95:52:c4:5a:2f:17:9a:d9:d2:cd:7d:a2:60:bb:63:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:46:84:24:8B:F0:E1:2D:86:26:18:4F:01:1B:E2:2B:FC:10:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1632F2F2DF11EFB091145B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:8b:b8:c8:f6:c5:47:ba:58:32:55:01:60:af:db:0f:ad:47:
94:31:3e:de:03:6d:9d:ab:85:3a:e6:3e:fe:7e:7d:ef:7b:49:
99:c1:2a:e5:2f:55:f2:b3:14:3f:d2:8b:22:59:bd:fe:d6:ad:
8a:00:82:e6:9d:30:0a:b4:1a:df:01:86:10:3f:b0:1b:09:3d:
01:37:7c:b5:2d:6b:82:f9:64:9b:bb:76:46:be:ac:00:d3:15:
6c:43:36:49:02:a8:0c:a1:80:42:c2:9f:75:dc:19:89:0f:02:
47:81:70:6d:a5:cb:bc:6e:16:24:fd:57:eb:e0:04:34:ae:23:
4e:85:9c:b5:28:13:5d:fd:7a:68:8d:ff:ce:7e:72:b9:d9:12:
8e:c4:5d:8f:84:8c:46:b1:3c:46:12:da:24:79:cf:47:6c:6f:
41:a7:c9:aa:8d:4a:76:86:c8:4c:4c:17:83:e5:5c:e0:a3:fe:
63:04:88:f3:77:bf:13:ca:5c:be:ec:10:18:63:29:88:cd:ec:
1e:78:19:55:23:f0:9b:d9:7b:d6:aa:c2:cc:30:a3:c7:9f:48:
23:80:e4:b1:3e:58:44:2d:3c:58:31:84:f0:59:ab:4c:a6:ad:
f7:20:d9:dd:49:e5:63:75:69:3f:77:dc:ee:6e:40:4f:27:35:
da:15:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:18:40 2025 by rpki-client