Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1113E7DCDB2711EF9DAC4A85762E951A.roa
File: 1113E7DCDB2711EF9DAC4A85762E951A.roa (raw, json)
Hash identifier: utUFNt3vGiG7EeCZlFv9WS4cPSfrrWrvkSA4Sz7tTIs=
Subject key identifier: E2:A3:DB:F1:8D:69:84:ED:B0:B4:FD:4D:30:75:28:AA:45:50:7A:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1113E7DCDB2711EF9DAC4A85762E951A.roa
Signing time: Sat 25 Jan 2025 14:17:11 +0000
ROA not before: Sat 25 Jan 2025 14:17:07 +0000
ROA not after: Wed 26 Feb 2025 14:17:07 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84433 (0x149d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:17:07 2025 GMT
Not After : Feb 26 14:17:07 2025 GMT
Subject: CN=6794f267-2a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:83:6f:5b:21:4c:7f:18:42:2d:48:79:9f:
28:66:6c:f6:f2:07:87:69:f3:1b:ef:38:75:38:54:
dc:2b:b7:e1:9b:c4:87:44:1a:d0:bd:e1:42:00:91:
19:64:18:f6:2e:a3:70:a0:ed:20:d9:22:9b:68:13:
bd:df:4e:59:ce:3d:18:d2:34:91:6d:80:3b:34:ed:
6f:2d:df:24:d3:bc:9e:32:76:bb:8c:a2:8e:3b:30:
d8:e9:67:5d:46:92:4a:70:86:9e:4a:78:db:9b:bc:
71:13:60:ff:4a:58:6b:9e:8f:1c:4f:0e:c4:52:c1:
9d:48:21:49:2d:a5:70:b7:e2:22:da:2c:70:ed:fe:
06:fc:52:2d:fd:86:c7:f1:68:9b:b5:be:94:91:1b:
c4:96:7d:3a:c5:b3:b1:f0:8f:22:66:72:98:1b:fe:
96:c0:15:47:4d:d4:00:b3:43:d4:cd:fb:58:32:8b:
fe:70:c6:ae:98:8c:0b:1e:75:30:90:e3:1d:e6:1f:
ec:a3:8f:60:db:da:11:7b:f0:5a:00:c7:d9:64:e9:
d3:2e:14:ec:b4:fa:f9:77:5b:3f:75:b7:9e:2c:67:
e7:99:9c:f4:68:b5:02:fe:ff:ef:8b:c6:09:8d:bd:
0b:2c:78:6b:a1:40:76:69:57:8d:d9:a5:97:3a:4a:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:DB:F1:8D:69:84:ED:B0:B4:FD:4D:30:75:28:AA:45:50:7A:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1113E7DCDB2711EF9DAC4A85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
87:5e:06:b1:6f:0d:38:7a:a2:74:e2:51:ad:41:d9:a6:f1:bf:
16:3f:ec:51:69:f7:8f:6d:b2:76:e6:56:0f:f1:4e:c1:96:68:
00:7e:3e:47:45:e2:e2:54:20:b8:f2:6e:d3:c2:01:33:df:a0:
bf:63:56:f5:1c:56:c6:fd:39:20:7d:5d:bc:56:8b:0a:31:a2:
bd:f4:69:a9:8e:d4:2a:09:53:97:b9:97:93:61:77:f3:29:3f:
02:25:b6:c7:43:69:42:9b:43:26:bb:84:52:e8:c9:3b:1a:0e:
4c:59:0d:71:7a:82:01:50:69:f7:d1:09:a4:3a:c4:fc:b1:3a:
18:45:19:53:a2:a7:9a:48:62:c9:69:ca:dc:ff:2f:13:9e:c7:
fb:28:91:49:eb:d2:08:18:23:4d:ca:94:8f:47:72:25:fb:fc:
a5:0c:df:3e:fe:c9:7d:e6:82:67:93:dc:d3:a1:48:44:fe:89:
2b:83:89:cc:5a:e3:f1:28:5e:16:c6:82:f3:1c:9d:62:b6:e3:
f1:57:ce:cd:e1:22:47:04:c3:e7:63:06:3e:9b:e9:60:f1:68:
7d:71:d3:1d:53:27:2b:d9:7c:44:42:a9:eb:fe:5d:76:d3:15:
2a:b6:5d:8c:01:6e:47:eb:83:bf:8f:ac:cd:a5:45:09:4a:bf:
cc:6c:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:25 2025 by rpki-client