Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2A5D6DEDB11EFA3085C8B762E951A.roa
File: 08A2A5D6DEDB11EFA3085C8B762E951A.roa (raw, json)
Hash identifier: 3kpr2dqU7M9T/P8bXEaSuZChJh589BH3KC5nKNWHNaI=
Subject key identifier: DA:F1:AD:EC:DA:E0:9F:3C:5F:CB:58:C6:93:77:50:90:1D:59:C4:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2A5D6DEDB11EFA3085C8B762E951A.roa
Signing time: Thu 30 Jan 2025 07:23:00 +0000
ROA not before: Thu 30 Jan 2025 07:22:55 +0000
ROA not after: Sat 01 Mar 2025 07:22:55 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85412 (0x14da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 07:22:55 2025 GMT
Not After : Mar 1 07:22:55 2025 GMT
Subject: CN=679b28d3-3049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:34:a3:92:f8:4b:eb:31:e6:da:fa:de:10:5f:
79:e8:48:73:24:9c:9b:ee:0d:7a:51:11:24:f0:43:
cd:d2:20:9b:1f:d1:1a:35:bb:72:7c:02:2f:cf:dd:
ea:b9:b5:fc:b9:b5:8a:ea:7e:5d:2f:2d:9a:05:47:
1d:85:94:69:bf:59:3a:55:f1:dd:44:82:02:a4:67:
ea:35:30:0c:88:22:45:67:8e:24:bf:b1:36:1c:ac:
81:0b:2b:df:44:98:6d:47:03:f4:6e:a0:50:e6:c0:
08:ea:e9:aa:d9:a0:d9:85:52:36:50:50:88:96:73:
19:67:bb:4a:9c:d7:cc:2c:8c:27:e5:f1:7a:b0:3e:
ba:64:64:fb:7a:59:93:07:c6:46:29:4d:1f:6a:7d:
fb:9b:91:9b:57:14:a2:39:8d:50:2a:bd:51:8d:af:
ba:7a:02:62:76:ce:99:36:c7:9a:df:b9:6a:f4:6a:
6e:84:02:f0:fd:86:20:d7:18:cc:24:21:bf:cb:d5:
59:f4:be:e1:b3:1f:ec:61:0b:11:70:82:5e:81:37:
72:1e:ea:b1:2b:a7:d1:44:a8:7d:e9:69:3e:cb:72:
a5:a0:36:d1:5d:25:79:4c:94:5f:ca:2d:28:b1:0b:
97:28:35:29:17:e3:d5:43:c4:2f:2a:06:76:44:96:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:AD:EC:DA:E0:9F:3C:5F:CB:58:C6:93:77:50:90:1D:59:C4:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A2A5D6DEDB11EFA3085C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
Signature Algorithm: sha256WithRSAEncryption
27:72:b3:b2:0f:7b:b3:1d:4a:45:5c:a8:36:65:5a:ab:a1:00:
a7:b1:fc:ce:8b:a2:6d:2c:94:14:95:92:e3:f0:17:c9:3c:ce:
56:0c:fc:e4:e8:2a:1f:ed:1c:9a:3b:4e:fc:42:56:5d:0d:90:
ee:ab:4e:d4:9c:fa:86:c9:d6:04:f0:65:d3:c9:a3:0a:2d:a9:
aa:b4:b6:ba:f6:a4:cf:a8:81:ff:fb:8e:f0:de:74:fb:82:ff:
ee:52:4e:96:15:95:13:f6:29:87:c5:e7:a9:80:fa:3f:c9:40:
07:b5:1a:4b:ab:0c:88:bb:14:c2:5d:35:49:68:3d:29:17:9a:
0d:1d:54:90:3d:b0:c2:c1:20:0c:85:ad:9c:f2:b3:47:3b:a3:
b7:cd:d6:96:7d:bc:b3:da:2d:74:3d:7b:d4:0e:c4:bc:88:c5:
c2:4b:e5:a7:9a:2b:f3:e6:6a:e0:9c:77:4d:7e:7e:3d:77:4c:
c6:9a:2f:b7:1e:fb:06:cd:38:03:03:8c:42:f0:b8:b3:72:0f:
9a:ab:35:8b:22:46:e0:61:0b:6b:08:81:ea:29:65:91:30:54:
64:e6:41:3b:7f:1a:26:31:db:d4:2b:a5:d0:f7:22:c1:e0:cf:
a3:33:f6:90:e7:fb:0e:13:82:f7:2d:14:74:fa:02:4b:b3:b3:
75:85:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:32 2025 by rpki-client