Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17188D06D56711EF8D1B615D762E951A.roa
File: 17188D06D56711EF8D1B615D762E951A.roa (raw, json)
Hash identifier: dLFi4I0EyUm8Ea/HOlNvnb7orJzKSgSRJRuhLgiNc58=
Subject key identifier: FD:CD:83:72:6E:D0:7F:A9:02:EF:14:57:DD:07:52:C9:74:57:1E:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17188D06D56711EF8D1B615D762E951A.roa
Signing time: Sat 18 Jan 2025 06:40:22 +0000
ROA not before: Sat 18 Jan 2025 06:40:18 +0000
ROA not after: Sat 22 Feb 2025 06:40:18 +0000
asID: 8796
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81270 (0x13d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:40:18 2025 GMT
Not After : Feb 22 06:40:18 2025 GMT
Subject: CN=678b4cd6-1c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:83:73:11:8a:f2:e7:6f:30:b1:98:ca:24:
7b:f5:a1:00:b9:1e:23:4b:99:38:94:e7:65:4e:71:
e9:83:ca:32:c3:5a:11:81:11:25:5d:10:2a:89:1a:
93:69:c0:e3:48:dc:c6:01:d0:c7:b7:ee:1b:34:b2:
19:08:5d:a5:30:2a:68:5c:8a:48:29:8e:b2:5c:d7:
e5:71:19:63:d8:48:c0:ab:5e:55:8c:00:7e:69:cb:
d2:c7:bf:b6:3c:60:b5:d6:bb:91:fe:db:01:ca:a4:
13:96:38:82:af:78:6c:3c:b3:fa:3e:5a:64:66:3f:
6b:37:a0:eb:75:fd:75:4b:9d:ee:07:44:dc:8d:46:
db:a3:8c:ec:7d:68:46:93:50:b3:a5:44:94:3a:9e:
07:9a:a7:1c:d0:9f:2a:83:88:50:92:b9:34:88:44:
c0:e6:7b:f1:c8:b6:ef:03:05:95:d7:21:ed:13:d1:
58:98:c0:71:91:41:4f:24:3d:1b:10:2a:c0:69:8c:
c6:4b:d1:9a:b6:5d:f9:ee:04:59:2b:17:ec:78:55:
9e:b9:35:f9:d6:d7:dd:56:d5:be:6d:2a:54:9d:48:
f9:2a:77:7d:10:40:6d:5c:94:67:3d:02:2f:21:5e:
5a:30:f3:b6:b8:43:f8:d6:ea:7f:57:52:62:28:15:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:83:72:6E:D0:7F:A9:02:EF:14:57:DD:07:52:C9:74:57:1E:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17188D06D56711EF8D1B615D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
98:1c:32:14:a8:0c:3a:bd:b4:d1:5c:a9:5e:cd:5a:d7:87:e2:
5f:28:c3:75:58:6c:7c:ef:c4:d0:22:0f:c8:94:a8:7c:46:66:
02:17:d1:89:a5:39:ba:7a:2f:bb:6b:84:08:dc:f8:5f:e5:c4:
43:fb:0a:5b:70:a3:ca:e8:f5:ad:05:96:8e:3f:cb:45:69:29:
b5:cd:83:0c:49:82:3f:b9:26:f5:14:d9:04:3e:d7:25:3d:a1:
9d:47:9f:0c:00:5b:06:50:ea:e1:f8:d6:6f:6f:68:c9:b8:3d:
e5:c9:1d:f0:48:99:01:4d:d6:14:3a:c3:33:0b:55:f9:d8:a3:
1d:86:81:11:81:1c:8a:77:ed:1a:8f:b6:7c:e9:a2:f0:a9:39:
12:78:38:2c:9e:e8:85:85:0d:bb:68:60:11:52:2b:09:2c:11:
d3:35:c9:ef:8e:0e:34:fa:b4:95:b4:e0:68:4d:74:40:1c:95:
06:22:f3:99:fb:c7:80:90:be:5d:73:a8:ab:eb:ab:64:aa:a1:
b5:48:38:da:ba:bd:a5:cf:93:8a:93:e0:fa:99:98:16:93:13:
b0:eb:fc:bb:ca:3b:fa:9a:22:1b:e6:b1:e5:71:a0:4f:1c:24:
4e:9c:e4:c2:04:46:1b:86:2b:86:9a:2b:d2:d2:1c:40:23:48:
7d:bf:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:09 2025 by rpki-client