Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B56020ED8A511EF849FD196762E951A.roa
File: 1B56020ED8A511EF849FD196762E951A.roa (raw, json)
Hash identifier: i8/wS7U5+6hAgmpFLNSId1+QYTmyQiDxiDNsqLmkLGo=
Subject key identifier: C4:C4:3B:C6:7D:8F:D9:08:11:3A:71:41:50:37:1C:80:04:AC:4D:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B56020ED8A511EF849FD196762E951A.roa
Signing time: Wed 22 Jan 2025 09:41:51 +0000
ROA not before: Wed 22 Jan 2025 09:41:47 +0000
ROA not after: Tue 04 Feb 2025 09:41:47 +0000
asID: 8796
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81554 (0x13e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:41:47 2025 GMT
Not After : Feb 4 09:41:47 2025 GMT
Subject: CN=6790bd5f-f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:f3:41:e4:a4:21:75:9f:22:c5:bd:99:38:
cb:54:f2:bf:0b:a8:77:c5:c8:58:7a:83:11:b7:34:
64:77:b1:bc:66:e4:95:1b:12:b3:bc:96:7a:5e:86:
f9:40:d7:5c:18:c9:32:27:dd:2d:1e:1f:83:d6:45:
70:3f:21:06:b7:1d:42:43:97:a1:27:48:3d:12:47:
cd:3a:e7:e7:eb:97:bc:0c:64:d7:54:c5:cf:bc:af:
8e:69:03:53:25:d6:fe:d1:5d:da:a3:46:c7:9a:61:
a3:33:6d:b6:0c:6a:68:67:06:1b:9e:96:ef:09:a9:
d1:e4:28:a2:e6:46:ec:93:62:2f:fe:d7:73:87:eb:
55:e7:5a:46:12:de:71:b8:27:1d:95:d3:56:20:f0:
31:9a:60:0c:84:35:d2:14:a1:eb:9a:c8:6b:1c:82:
e3:0e:32:5a:6c:b9:da:b8:87:bb:6f:b1:8e:3f:5d:
46:df:e0:c1:25:f7:19:b4:73:3e:1d:2a:cf:49:b4:
98:2b:95:07:f2:bd:06:87:be:97:64:48:dc:8e:8b:
d6:fd:ec:1e:63:02:1e:16:cb:27:84:38:92:eb:cb:
0a:bc:02:db:f9:b6:bf:0f:2b:bb:8d:67:ff:bd:f4:
da:90:00:5d:46:9e:3e:ab:b7:2c:d6:14:69:fc:6b:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:3B:C6:7D:8F:D9:08:11:3A:71:41:50:37:1C:80:04:AC:4D:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B56020ED8A511EF849FD196762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
50:28:83:f3:c4:6e:03:cb:76:57:4a:e5:60:c2:9c:44:e7:9f:
38:68:de:a0:99:37:4d:d9:41:d9:5a:7e:47:76:51:be:65:2f:
ea:da:cf:f5:75:f1:82:3d:5a:a4:44:76:dd:d7:90:68:4f:1d:
6c:6b:a0:a7:b6:86:27:86:66:e8:3e:2c:42:7a:42:75:aa:e3:
b5:ff:7c:87:2d:0b:54:22:72:01:a6:0d:c8:5f:e0:bc:e8:63:
0e:a3:6b:15:c2:80:32:42:6d:a3:ce:c1:56:b0:3a:81:6c:31:
04:74:90:db:05:f8:cb:5a:c5:f5:e5:a9:b1:7a:3a:66:1c:f9:
ca:61:45:90:4c:82:7a:f6:48:d0:cc:b7:64:a6:b8:f0:fb:9c:
62:e2:75:3d:36:52:71:81:d1:22:e4:b6:3c:96:9f:7d:0a:13:
9a:41:18:ac:a0:32:56:97:30:5e:83:78:02:fc:71:14:36:9a:
b6:69:4e:d6:8c:1a:78:30:7c:c2:33:7b:7b:27:66:b9:f0:e6:
6e:43:4c:5a:9b:a7:a0:7f:91:af:46:99:4c:b4:87:7d:40:77:
7c:8a:28:67:e7:56:45:f4:29:d5:c7:e5:51:61:a3:bd:4b:27:
ee:5b:50:ac:9b:58:56:dd:8f:c5:e2:5b:c1:e8:ad:d9:07:e8:
b2:94:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:45 2025 by rpki-client