Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/039C18CCDCC611EF95A1BF6E762E951A.roa
File: 039C18CCDCC611EF95A1BF6E762E951A.roa (raw, json)
Hash identifier: jzZXFlpcmjomeXA2tEvlTV/89gDO0NgOoHySxkQWauo=
Subject key identifier: 00:5E:2F:6C:91:54:05:9A:50:9D:DA:E5:15:63:45:BE:3F:C3:AC:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/039C18CCDCC611EF95A1BF6E762E951A.roa
Signing time: Mon 27 Jan 2025 15:47:29 +0000
ROA not before: Mon 27 Jan 2025 15:47:26 +0000
ROA not after: Thu 13 Feb 2025 15:47:26 +0000
asID: 5065
IP address blocks: 154.207.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85075 (0x14c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:47:26 2025 GMT
Not After : Feb 13 15:47:26 2025 GMT
Subject: CN=6797aa91-37f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:fe:fb:60:b2:bd:22:3d:de:09:41:14:20:
45:97:23:12:a8:32:fe:e0:58:60:8c:73:a0:fc:a6:
60:95:65:e5:d5:c2:65:e8:3a:a5:e3:0f:4d:5d:50:
cf:f2:51:a4:f6:65:6f:6f:3b:22:b6:98:11:f9:08:
42:90:33:30:df:c1:88:3b:f4:c6:af:c0:76:87:93:
38:e7:73:4e:78:08:d0:f1:db:95:83:c2:dd:ca:78:
e6:f5:a3:78:10:52:61:e1:a6:99:be:76:e8:65:0c:
3b:c3:b7:1b:01:9d:55:b0:e3:ad:b6:b6:3e:2a:c5:
63:eb:66:aa:e6:eb:17:bb:a4:3e:44:c9:f9:d6:30:
76:77:0e:c6:a7:67:9c:7f:91:b4:28:b7:e8:a2:34:
af:e9:13:b2:32:06:56:4f:7d:55:99:12:a4:60:a0:
0e:34:b2:c7:d2:18:a4:4b:cf:88:eb:a2:f7:f8:59:
a5:78:a3:4e:9b:d2:50:06:0d:3e:aa:cc:d4:1c:9d:
a9:28:5c:69:f4:58:01:c7:13:16:86:1e:c2:0c:5e:
5b:1e:64:cc:16:20:e0:ae:e6:74:d9:a0:06:74:fc:
4c:6d:41:03:1c:50:ce:d6:d0:20:18:8a:bb:a3:92:
56:bd:43:63:58:66:94:40:76:0a:cd:9e:e0:ec:b9:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:2F:6C:91:54:05:9A:50:9D:DA:E5:15:63:45:BE:3F:C3:AC:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/039C18CCDCC611EF95A1BF6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.168.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:e5:d5:96:5b:26:76:48:9f:43:c5:6e:40:8a:bd:53:ee:e0:
97:aa:f9:bb:f5:ee:03:db:e2:44:17:80:cf:de:3d:a7:67:b4:
05:d4:9c:b7:f0:34:c4:63:61:ce:1b:0a:49:26:20:d7:d9:a8:
e0:3b:5e:0c:dc:82:d4:f5:76:2e:16:63:f0:dd:c8:ae:e3:c1:
95:df:64:a1:29:69:b8:3d:7f:26:5d:ac:d0:a6:6c:a9:03:e3:
48:7e:cb:b8:94:d5:f2:73:8a:fe:54:54:25:0d:3d:59:3b:82:
ef:06:28:3d:b3:49:bd:e8:84:57:8d:ae:08:3a:0d:29:91:dd:
db:2e:de:28:7a:12:55:2d:fb:7e:19:5f:de:29:3d:ee:10:db:
e4:0c:fc:a2:3f:c5:32:3b:8c:d1:65:9b:40:8e:61:e7:3a:0b:
7e:78:e5:cb:0e:9b:4c:6a:a8:f3:6a:86:3d:1f:96:ea:d2:99:
c9:48:d1:c9:e1:3e:37:50:03:e1:19:b9:54:c9:de:ab:1c:36:
23:0e:95:35:0e:6b:e6:80:b9:85:9a:24:c5:79:0a:28:f6:40:
b9:cd:97:9a:4e:72:5f:a1:06:bf:9d:ea:d1:7b:a0:9e:b1:07:
08:00:7c:ca:bc:57:8a:73:75:54:78:62:0d:1c:0f:38:68:a3:
ea:62:e9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:16 2025 by rpki-client