Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B76E644DCCB11EFAFFDF98F762E951A.roa
File: 0B76E644DCCB11EFAFFDF98F762E951A.roa (raw, json)
Hash identifier: WZwZTAUqeqrfLjSpQVRCiDuiSAwwd/Dtj9cEOHJi5k8=
Subject key identifier: A7:E3:03:50:27:6C:6B:78:DB:17:07:89:B8:32:0E:4C:C1:99:27:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B76E644DCCB11EFAFFDF98F762E951A.roa
Signing time: Mon 27 Jan 2025 16:23:30 +0000
ROA not before: Mon 27 Jan 2025 16:23:26 +0000
ROA not after: Wed 12 Feb 2025 16:23:26 +0000
asID: 135097
IP address blocks: 154.220.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85107 (0x14c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:23:26 2025 GMT
Not After : Feb 12 16:23:26 2025 GMT
Subject: CN=6797b302-cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:a5:3a:73:b3:6b:16:d1:6f:a1:15:f3:d6:
f7:73:2c:f5:72:a9:2f:bc:9a:d2:f6:4c:7b:60:47:
f1:4f:54:4a:13:aa:26:41:78:d6:21:8f:e5:18:5a:
25:52:1b:5f:df:f0:14:c5:4b:bb:0e:d3:f0:b7:f7:
72:25:9c:ad:77:31:b1:9d:67:2e:64:31:78:87:00:
7e:6f:95:42:09:db:04:d7:7f:9d:97:d5:d1:1d:00:
fc:57:be:e4:63:fe:73:0c:42:25:0e:1b:72:93:bb:
25:14:eb:6b:16:72:c1:ff:44:48:4d:fc:20:b2:4c:
16:6a:45:07:10:3e:a0:4a:b5:a7:6a:ed:78:9c:38:
96:da:3c:5b:2e:72:de:36:34:bf:b7:aa:aa:aa:9e:
3f:b4:b5:18:cf:a5:0c:5b:f6:4a:3a:0c:00:2a:9a:
68:64:54:0c:a8:2b:93:bb:b9:c2:b2:e1:c9:1b:2d:
5c:5f:37:9e:ff:e7:64:c8:fd:27:e7:9e:3b:c1:3d:
6d:08:7f:c2:2a:6e:57:41:61:ea:ba:9f:fd:d3:1f:
b8:27:e9:eb:d8:a4:f4:54:4c:30:1f:09:f1:19:4a:
e9:69:ec:f6:56:ab:73:c5:c1:a5:0f:6c:38:b7:c8:
46:12:ba:3f:52:03:e3:c2:be:d4:88:84:ca:27:bd:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E3:03:50:27:6C:6B:78:DB:17:07:89:B8:32:0E:4C:C1:99:27:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B76E644DCCB11EFAFFDF98F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:62:3a:f6:9f:7f:37:ef:df:5d:fd:15:12:a6:b5:b9:bb:bd:
7c:3e:fc:29:83:23:c0:62:59:0b:59:f0:6b:f3:9c:ad:98:ba:
de:53:15:d7:d1:0b:01:12:d8:bf:5e:54:ce:b9:68:e1:59:f8:
65:92:8c:0c:89:db:e4:2c:48:17:8f:7e:c0:9a:af:47:75:e0:
74:9c:a3:3e:a1:f4:d6:d2:89:58:2e:1c:6f:d0:e6:cc:6a:d1:
7f:55:76:71:33:b0:fd:f0:11:fb:99:3b:75:48:6b:3c:8b:58:
b4:47:4f:a0:2e:85:45:6d:a3:e6:0d:4f:95:d8:c3:48:39:93:
38:63:b1:a9:eb:11:14:97:82:b7:3f:65:6d:48:14:49:0a:90:
11:e6:69:3f:28:f6:5a:9d:96:6d:40:ac:cc:c6:f4:b3:a4:c1:
a4:58:4a:4f:cd:f6:f9:c5:fd:bd:3e:16:b2:44:f9:f5:46:78:
09:dc:ae:6e:b7:14:a8:91:05:57:8b:6f:51:9d:ce:ca:a2:c0:
06:56:5b:4a:59:9f:78:de:5f:b8:02:7b:0c:35:4f:e8:6f:e3:
99:90:1f:7b:fc:8d:d3:3b:19:9e:a3:af:ec:e1:fb:23:bc:e1:
07:e2:27:75:99:80:67:6d:fd:f6:d4:c6:9f:b7:69:bf:d5:4a:
6b:5b:b1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:56:34 2025 by rpki-client