Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077A5214CEEE11EFB1105C72762E951A.roa
File: 077A5214CEEE11EFB1105C72762E951A.roa (raw, json)
Hash identifier: Lhzt4Pe2OHs1ulT9DC/wiJLcYTP2xWMnho2MCe1ZDCI=
Subject key identifier: 60:85:1C:C3:91:4D:7E:B3:B8:A1:C6:E9:E7:28:97:4D:0D:4D:AA:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077A5214CEEE11EFB1105C72762E951A.roa
Signing time: Fri 10 Jan 2025 00:58:39 +0000
ROA not before: Fri 10 Jan 2025 00:00:36 +0000
ROA not after: Thu 13 Feb 2025 00:00:36 +0000
asID: 54801
IP address blocks: 154.82.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80240 (0x13970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:36 2025 GMT
Not After : Feb 13 00:00:36 2025 GMT
Subject: CN=678070bf-801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:81:2a:85:a5:9a:0d:0f:6b:1f:31:84:2d:
2b:16:a9:c1:49:d7:f1:55:d7:e9:91:3d:91:23:b8:
4d:a6:c1:7f:1e:b7:6c:5b:05:d7:67:a6:48:08:b0:
54:26:26:1c:b2:85:63:df:87:ad:96:3f:42:73:5f:
78:c9:93:66:2d:40:fb:f1:b9:61:0a:98:06:f5:55:
7e:3b:69:2d:a9:ad:64:23:f0:c8:1e:40:6c:d3:5f:
00:66:d0:f8:02:55:66:f1:43:d7:22:53:0f:74:0e:
e1:76:c2:a9:4f:04:13:75:90:4b:f4:6d:7b:0d:96:
9a:af:d4:d6:5d:07:db:62:b5:24:a2:f3:1f:a4:78:
1d:72:66:5a:93:44:66:31:6d:ab:0b:d1:0d:80:c7:
27:15:8c:2c:96:92:af:df:28:eb:47:39:bf:55:31:
f1:8f:c3:f8:f2:3a:ff:67:7a:b3:00:38:c1:80:c1:
34:be:d9:ba:94:10:5d:73:12:09:17:42:5e:9f:69:
bb:86:ce:bd:5d:d3:2b:3c:dd:f7:58:17:b6:44:2f:
f7:ab:98:38:74:3f:01:31:7b:72:a5:11:3f:52:5d:
09:8f:5b:e4:47:cc:37:c9:bf:de:0f:e5:cd:f0:b9:
67:38:08:9e:29:e5:5c:7c:67:fe:c4:e7:9b:b7:00:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:1C:C3:91:4D:7E:B3:B8:A1:C6:E9:E7:28:97:4D:0D:4D:AA:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/077A5214CEEE11EFB1105C72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6e:cc:32:9e:95:93:ee:19:6e:4d:66:25:67:dd:a4:fa:b7:
22:34:60:e6:0f:dd:ab:c2:2b:54:63:46:71:5c:28:78:4a:df:
03:36:ef:02:c0:0f:d4:11:79:aa:20:d7:8d:08:49:cb:48:90:
be:76:49:27:61:d7:4d:a5:bb:8b:3c:99:24:81:d3:06:be:5c:
56:43:68:d3:85:a1:3e:2c:14:7c:ef:a5:20:f6:2e:f7:51:85:
c4:a6:c9:49:e0:c4:71:0b:37:e7:ed:25:ab:59:32:61:79:a0:
77:a9:2d:58:f7:ae:03:2e:2a:4b:c4:16:65:91:92:01:49:5d:
ef:92:ec:7b:f6:a3:34:73:34:26:7e:f0:f7:ca:6f:12:df:a5:
ec:9d:14:db:ce:b9:e0:34:65:20:d5:9f:17:3e:77:35:b2:83:
3f:16:b5:e0:20:bc:70:8f:77:84:8d:e9:11:51:8b:1c:2f:4f:
a6:ea:f4:71:e3:b1:24:a5:1f:02:36:2d:f3:01:57:4e:d3:be:
0c:e8:68:60:0d:cc:b4:b0:b7:09:e7:2e:8b:2f:04:26:af:17:
be:75:28:46:13:49:5f:77:3e:71:76:09:9a:c8:a2:91:f4:8d:
0b:e4:55:18:3a:89:9f:d0:bd:29:a7:36:73:38:21:2a:49:f7:
bb:b3:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:29 2025 by rpki-client