Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08079FA8D8DE11EFB0693691762E951A.roa
File: 08079FA8D8DE11EFB0693691762E951A.roa (raw, json)
Hash identifier: z5kQTgEiV5B2x6nt2aNPwQ8xOe0jJmFJkKM6Zb2xxyk=
Subject key identifier: D9:33:6E:18:87:65:59:A0:66:19:A7:38:62:EB:23:5A:BE:BE:B0:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08079FA8D8DE11EFB0693691762E951A.roa
Signing time: Wed 22 Jan 2025 16:29:20 +0000
ROA not before: Wed 22 Jan 2025 16:29:16 +0000
ROA not after: Sat 15 Mar 2025 16:29:16 +0000
asID: 138915
IP address blocks: 154.206.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81892 (0x13fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 16:29:16 2025 GMT
Not After : Mar 15 16:29:16 2025 GMT
Subject: CN=67911ce0-e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:bd:f6:04:4a:9a:b5:ec:59:30:cf:19:37:
61:4a:7b:c1:16:66:58:56:e7:6b:df:ef:2c:3a:0e:
42:99:41:9b:b8:f5:98:d2:6d:5f:12:8d:e5:6b:81:
57:f6:1a:92:47:b2:25:ed:5e:d5:9d:e6:86:3e:5b:
e8:d9:e9:8f:f8:2d:73:54:0e:6a:b6:af:f5:9d:17:
54:a0:de:eb:bc:5a:d0:49:96:e1:69:cf:73:8b:89:
4a:c9:18:ca:e5:72:48:f4:e7:53:f1:0c:3c:87:ad:
ed:43:54:00:35:c0:fa:df:75:ec:e1:f4:9c:82:02:
3a:df:c0:0f:11:21:2d:7a:5f:78:4d:4a:11:49:66:
95:38:63:ae:7e:a6:e8:b4:a8:ec:89:47:af:40:73:
54:2a:3d:14:af:6d:65:76:f5:0c:56:ed:3e:55:07:
00:16:66:9e:f9:d2:2f:9b:6a:11:f1:6d:af:03:7a:
88:cb:84:39:e6:e6:13:30:60:86:e5:f0:8b:18:ed:
ce:81:40:b7:cd:cc:c8:02:fd:ec:89:d9:23:45:99:
54:10:e9:a1:8b:8e:f4:29:1c:ba:2e:be:37:7f:33:
48:2c:71:1f:3f:0f:af:72:63:e3:1b:f5:77:37:94:
69:ff:dd:b7:7f:e3:f4:e0:98:f2:5d:bd:6c:93:94:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:6E:18:87:65:59:A0:66:19:A7:38:62:EB:23:5A:BE:BE:B0:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08079FA8D8DE11EFB0693691762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.114.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:6d:e7:af:04:8b:b4:4f:05:2d:ce:1d:66:aa:69:be:a9:77:
66:91:d4:de:d0:44:2b:5d:8c:20:b1:86:3f:06:b6:b9:86:13:
1e:3f:15:3e:ed:00:de:9d:82:0f:77:52:3a:08:9e:f5:81:07:
8e:64:b5:8c:45:1d:62:28:63:1b:2a:4f:2a:90:c3:93:fc:e1:
5f:a4:e5:9b:2d:3e:6a:e7:75:b0:15:e9:94:63:68:60:3d:64:
8c:df:a1:3a:41:aa:ff:83:15:1d:42:29:01:44:3e:d9:cf:11:
b6:c7:2f:c3:3a:9e:66:bf:41:73:fb:6a:bd:8d:13:28:96:cf:
0f:ea:aa:61:fa:34:b2:e2:31:87:e4:b7:59:d7:dc:53:ea:a1:
74:dc:cc:f8:97:2b:1b:0c:d3:63:73:f4:a8:30:63:7a:fa:35:
2b:06:9d:bb:f5:39:b7:3b:a7:ee:15:c3:49:7a:a6:0e:c0:e0:
85:6d:1f:4e:23:dc:ac:49:d4:80:ac:15:6c:ef:42:5f:8b:a4:
4f:8d:c0:62:6f:6f:78:67:6f:32:22:54:8f:e9:f6:b1:03:98:
9e:1e:45:47:fa:2a:da:5c:79:86:36:d2:9e:47:e2:20:8c:b5:
62:d4:79:bd:e8:da:2a:d4:e3:d8:9f:e7:ad:fb:9c:6a:34:7d:
65:69:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:44 2025 by rpki-client