Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A066370DCCA11EF93204C89762E951A.roa
File: 1A066370DCCA11EF93204C89762E951A.roa (raw, json)
Hash identifier: nnYc5bVVvk1+pOctqL02r5r2Xb4xMrHLCPDBZOe4ML8=
Subject key identifier: 49:A6:C6:B6:47:14:B8:00:CC:F1:29:C8:06:73:DC:03:98:01:81:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A066370DCCA11EF93204C89762E951A.roa
Signing time: Mon 27 Jan 2025 16:16:45 +0000
ROA not before: Mon 27 Jan 2025 16:16:41 +0000
ROA not after: Wed 12 Feb 2025 16:16:41 +0000
asID: 135097
IP address blocks: 154.213.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85101 (0x14c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:16:41 2025 GMT
Not After : Feb 12 16:16:41 2025 GMT
Subject: CN=6797b16d-2c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:d0:d1:f7:d2:33:eb:91:83:a8:59:bc:9e:
c5:0f:16:8a:6c:64:9f:d9:b8:b3:08:18:1c:36:33:
77:ec:e3:47:4e:b6:58:05:0d:db:52:d9:43:b0:aa:
fa:82:57:70:27:9f:3b:d4:eb:37:da:df:01:f6:8b:
5f:d7:89:a5:50:4e:4e:58:e1:a5:56:e5:29:0c:d2:
77:0c:ec:89:1a:c2:d0:3c:8d:bc:1d:4a:ed:1f:35:
96:27:b8:4e:93:f3:48:0a:4a:01:58:20:ae:38:dc:
d1:7d:d5:67:a4:76:df:45:f9:66:2c:ab:39:33:4a:
5a:75:e8:64:50:5d:83:29:75:cd:03:cf:f4:fa:c1:
2c:a1:4c:a1:c8:c6:58:62:48:6e:52:30:6b:2a:98:
b3:8b:a9:b5:0b:af:ab:d4:0a:1b:77:5f:49:34:a9:
ce:37:88:38:42:c2:d9:83:9a:0b:f8:4c:d6:36:67:
23:83:19:76:90:5d:e6:8d:f2:80:2f:68:ac:ec:7f:
2d:5c:6a:df:fb:a3:55:d8:e5:8a:46:f9:30:dc:d7:
ee:07:2b:a5:eb:1c:e1:53:27:f0:39:cc:3b:87:67:
b4:8a:19:e4:0e:ae:b0:41:89:eb:fc:cf:e2:84:ae:
6e:b2:2b:7a:57:3d:71:8f:ca:9a:02:68:75:c2:b5:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A6:C6:B6:47:14:B8:00:CC:F1:29:C8:06:73:DC:03:98:01:81:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A066370DCCA11EF93204C89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.80.0/20
Signature Algorithm: sha256WithRSAEncryption
67:0d:67:e3:96:09:01:35:a3:51:b5:a5:06:77:cb:5d:d8:16:
ed:b1:93:77:56:df:d8:af:87:7b:a4:e7:eb:fa:46:6e:7c:b8:
6e:28:fc:9f:e9:94:dd:83:a4:64:85:ea:c2:1e:43:66:ac:d1:
0d:7b:d3:1e:ad:80:13:f6:b4:d4:2c:43:aa:47:99:58:d4:d8:
ac:29:65:6a:90:8d:80:8a:25:bd:d8:b9:43:c4:bf:3b:52:96:
77:4f:5a:30:a2:8f:3a:4a:d2:c1:1a:05:12:1b:65:c2:99:bb:
ef:06:c5:95:ad:31:1c:9e:6b:a0:3b:ee:91:5f:a5:7b:c3:d8:
63:a7:46:6e:76:d4:9e:f9:bc:ff:2f:8c:bf:79:76:84:ba:2f:
ca:39:0f:37:ad:5e:04:99:b7:13:3a:79:19:52:41:a1:86:f2:
7e:a9:ca:0c:2b:c0:1d:ee:ba:f6:08:d2:b9:9b:5d:32:be:5e:
fe:b8:22:31:60:3b:a3:09:ab:cf:25:2d:cb:5e:6f:64:c3:60:
62:e2:26:d0:7e:1a:92:22:28:59:f6:bd:8d:e0:7e:cd:2f:47:
76:21:93:a6:1e:ae:ae:6e:b1:42:c0:20:d9:51:41:c3:5f:d1:
bb:cf:35:52:ad:bd:ca:83:a0:de:e7:04:71:24:ce:42:b1:13:
26:06:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:07 2025 by rpki-client