Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0693C14CBEDA11EFA6EC0B57762E951A.roa
File: 0693C14CBEDA11EFA6EC0B57762E951A.roa (raw, json)
Hash identifier: 3Xe97UlXDJ/77JqvsaIJv8kJvQhq23SnxUqEh7Ci1h8=
Subject key identifier: B7:A7:19:9A:EF:CC:D7:2A:4F:69:43:C6:E6:6A:46:D2:42:CC:B0:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0693C14CBEDA11EFA6EC0B57762E951A.roa
Signing time: Fri 20 Dec 2024 13:55:09 +0000
ROA not before: Fri 20 Dec 2024 13:55:06 +0000
ROA not after: Sun 02 Feb 2025 13:55:06 +0000
asID: 48031
IP address blocks: 154.223.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72986 (0x11d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:55:06 2024 GMT
Not After : Feb 2 13:55:06 2025 GMT
Subject: CN=6765773d-d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:d7:4d:3c:23:2c:16:1e:76:6d:68:9f:a2:
c1:d2:b5:f1:ee:43:8b:c1:5f:bd:76:60:fe:2a:08:
48:a3:dd:90:81:3f:e9:d3:97:9f:1e:0a:09:1d:d2:
69:bd:73:1a:ba:b3:70:1f:5b:c5:73:74:05:64:4c:
59:ab:28:b8:88:41:b8:58:72:b0:f1:c5:98:e6:67:
c3:d5:6e:6c:55:5a:83:91:93:5c:27:c9:6c:22:4b:
8b:c6:35:7f:72:86:1e:7e:a7:bf:03:c9:2a:4d:3e:
8f:45:9d:40:74:5a:bd:93:e8:03:36:11:31:7b:6d:
d2:6f:23:eb:c2:14:f7:40:84:84:df:4d:fe:f7:69:
96:b8:2a:25:30:40:c8:9a:ce:ec:1d:6a:46:d7:a2:
6b:95:b8:be:5b:41:46:1c:84:9c:1f:10:f4:c7:78:
61:2a:ad:86:fd:ae:0e:6e:5c:bf:c3:62:8b:db:86:
62:60:1b:ea:93:18:39:0f:26:d6:94:56:c4:95:80:
33:c0:62:8f:bd:d0:c5:ea:08:0d:21:e3:f2:db:89:
23:6b:a5:c2:83:3c:cd:b6:0b:7e:9c:dd:6b:5f:b1:
df:27:4f:ec:06:02:30:3d:d0:1b:26:0f:0d:37:da:
3d:59:4b:34:59:6e:a9:7d:c8:eb:4f:71:93:d9:0f:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:19:9A:EF:CC:D7:2A:4F:69:43:C6:E6:6A:46:D2:42:CC:B0:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0693C14CBEDA11EFA6EC0B57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.80.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d3:fd:bb:e9:64:5e:10:f4:b3:1a:30:a4:2d:bf:3f:6a:b0:
1e:0b:6d:f4:87:38:f8:ef:a3:e6:43:fe:b2:78:75:0c:94:c7:
44:fa:0b:59:02:63:96:1e:a8:86:fe:a1:7d:81:3e:61:0b:ce:
d2:13:ab:85:5f:a9:94:34:fa:a7:67:fb:0a:4e:50:e6:53:f5:
a1:a4:37:b0:d6:6d:89:b9:26:db:d8:48:07:00:6f:a8:f2:da:
92:12:cc:c0:02:06:4e:f5:fc:0d:df:21:fc:dd:89:25:4b:c6:
b3:de:bd:fb:62:6b:bf:d8:ee:d6:74:3e:4f:f5:d6:9a:5e:a2:
78:b6:9c:5b:cb:63:92:b5:25:ad:68:c6:37:74:05:fb:27:7b:
18:55:ed:ee:24:11:65:96:fe:c6:f7:a2:36:6c:6c:ce:70:5b:
be:c7:bd:e3:28:a7:d4:45:38:ff:d8:32:02:95:ab:84:f9:dd:
6d:43:38:6e:02:73:23:ac:1c:28:b9:db:f1:ee:55:d8:bb:07:
be:e0:da:ac:1e:db:d3:b4:17:92:ec:12:74:47:a0:d7:2a:26:
1b:0b:f4:f0:d3:99:c5:7b:30:c4:b9:d1:1f:24:55:07:a0:5c:
f8:c7:a7:85:db:8f:4f:e6:fe:59:7f:7a:4a:f2:49:2c:a6:67:
11:d6:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:10 2025 by rpki-client