Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19986660D73211EF9E93F490762E951A.roa
File: 19986660D73211EF9E93F490762E951A.roa (raw, json)
Hash identifier: vHw41YzSMJS7K8nBms61SMW1CI0ps1NEFRBGXAtNkFo=
Subject key identifier: 31:78:1A:FA:77:DC:0B:AF:28:06:12:C2:94:28:FA:0B:90:F8:88:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19986660D73211EF9E93F490762E951A.roa
Signing time: Mon 20 Jan 2025 13:26:05 +0000
ROA not before: Mon 20 Jan 2025 13:26:01 +0000
ROA not after: Wed 05 Feb 2025 13:26:01 +0000
asID: 135097
IP address blocks: 154.91.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81480 (0x13e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:26:01 2025 GMT
Not After : Feb 5 13:26:01 2025 GMT
Subject: CN=678e4eed-f2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:79:44:2e:94:35:69:72:63:fa:76:ef:d6:
2d:b9:87:97:08:5f:0a:8e:9e:3b:98:7d:40:bf:19:
28:83:90:75:4e:ba:f0:d4:47:54:d5:22:56:37:0e:
fb:df:ef:5f:a9:03:ff:35:28:f7:a3:61:0d:9a:71:
5d:58:48:72:4f:d5:3e:a6:2f:83:7b:2d:1b:4d:e0:
ba:9d:8c:c1:0a:a4:c6:df:ed:8b:9d:4c:bd:18:8b:
a3:7f:72:7f:60:c0:03:88:e8:e5:52:98:ac:96:57:
d4:0c:af:dc:75:fd:b4:d0:62:a6:0f:4c:d9:03:03:
6a:72:92:4f:7f:44:7c:0b:9e:94:5d:9c:f0:f3:fc:
b9:ac:f4:9b:4e:e4:78:66:e8:0b:68:cd:e8:0e:07:
9a:6b:45:4f:fe:ea:e2:b3:59:b0:0a:c7:43:84:03:
2e:c2:3e:62:d4:fc:82:e5:4c:0d:5e:20:4d:fc:e0:
91:b2:8c:65:5e:f3:5e:dc:fc:96:66:d2:fd:9c:bf:
c8:54:15:57:ab:c7:5a:92:cf:ed:dc:7c:59:7e:69:
a8:96:42:a5:18:08:84:05:3e:82:2e:8a:bd:2c:57:
7f:c6:20:c9:e4:05:fa:45:af:ba:c5:e6:6a:b5:56:
1f:0b:4f:83:dd:5e:e5:a9:9a:52:22:f8:53:53:8d:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:1A:FA:77:DC:0B:AF:28:06:12:C2:94:28:FA:0B:90:F8:88:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19986660D73211EF9E93F490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d7:9a:92:a8:18:6e:05:bf:d9:31:e8:17:96:65:20:0f:4b:dc:
23:cb:ac:f6:b9:61:f9:b5:4d:28:52:83:78:85:38:01:ba:f3:
e7:17:cf:10:5d:22:b6:07:c1:50:48:59:83:1b:8c:37:0b:a0:
93:f3:a2:05:94:a6:19:84:3f:41:30:23:79:de:a9:c6:2b:89:
56:fa:6d:14:fe:e5:9b:a9:b7:95:b9:9e:0b:5d:57:69:57:85:
3b:d6:e9:41:74:6c:57:3a:f6:7b:e7:ac:77:a6:b8:1c:82:70:
65:aa:cb:59:83:97:b6:28:e6:14:59:eb:14:cc:bf:b8:2f:4f:
fa:4c:b8:09:f1:93:25:d4:d7:6c:53:d4:db:50:dd:26:80:9c:
5c:40:35:08:eb:25:5b:fc:92:03:18:7b:04:4f:26:62:2f:66:
f4:44:af:3b:fd:bd:20:fc:f4:83:e2:52:42:6d:2b:00:7b:a1:
2b:eb:2f:ca:f7:77:57:d4:88:7a:ec:ee:85:86:0d:9c:f1:1d:
8e:58:8a:e2:e7:b0:c8:6a:2a:8c:71:64:a9:34:8c:2c:09:2e:
6f:e3:69:cd:08:aa:20:ca:1f:41:8d:68:ba:bc:1d:e0:43:33:
5b:f1:56:11:17:86:0b:7c:5e:2e:f8:db:75:39:1a:10:ef:11:
70:85:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:30 2025 by rpki-client