Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB16EC2CBEA11EF88997B48762E951A.roa
File: 1BB16EC2CBEA11EF88997B48762E951A.roa (raw, json)
Hash identifier: j6pAbIaAmaMfp57CM5+FLyXtJsv6Y8/8Coug9YKud1U=
Subject key identifier: 1D:78:A4:7C:D9:34:D6:E1:A9:C2:87:A5:12:B9:71:8A:26:4C:87:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB16EC2CBEA11EF88997B48762E951A.roa
Signing time: Mon 06 Jan 2025 04:53:02 +0000
ROA not before: Mon 06 Jan 2025 04:52:58 +0000
ROA not after: Tue 04 Feb 2025 04:52:58 +0000
asID: 5065
IP address blocks: 154.81.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79267 (0x135a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:52:58 2025 GMT
Not After : Feb 4 04:52:58 2025 GMT
Subject: CN=677b61ae-67a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:32:4e:c3:28:e2:15:ec:0f:c8:ae:a3:ef:
f9:9f:75:07:c7:84:bd:1e:24:f4:a3:e6:71:67:c3:
0a:9c:e2:1d:c3:fa:67:f6:31:16:e8:07:69:1b:a1:
10:21:a3:ad:c5:d7:56:97:c6:53:01:25:5b:2b:2d:
0d:b5:96:54:82:37:a0:54:af:06:0a:21:0e:4e:f0:
de:85:9f:a1:d5:59:33:69:bd:51:ea:51:70:cf:8c:
47:b8:92:a0:5e:c8:db:47:5a:c3:4b:18:10:4d:84:
46:54:23:d0:fe:75:2c:80:92:80:28:81:a5:07:a0:
45:e0:06:2c:7c:b2:63:27:2e:1d:07:06:e1:33:4e:
cb:48:d5:0a:72:eb:81:4c:81:23:5f:22:a9:e0:1e:
69:43:ec:0c:27:c7:56:f4:da:13:03:aa:85:80:f8:
fb:7a:4c:da:39:b7:12:4c:36:7f:9a:54:50:8f:60:
bf:d9:0d:51:c2:72:22:5a:27:2f:52:8e:e3:88:8c:
49:6a:85:66:ca:2b:ab:e5:48:08:db:7c:f9:57:45:
8f:d0:5a:79:5b:9a:c1:06:a2:12:c2:22:a5:5c:18:
ef:99:5e:c6:15:aa:bf:2d:c0:4f:13:1d:dd:71:0e:
86:6e:cd:bb:58:3f:af:cf:0d:96:b6:56:00:b8:41:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:A4:7C:D9:34:D6:E1:A9:C2:87:A5:12:B9:71:8A:26:4C:87:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB16EC2CBEA11EF88997B48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fb:db:6a:03:29:c0:58:86:d1:24:15:68:c7:81:d5:de:c2:
0d:a3:13:53:0d:45:26:fc:2d:4f:21:a4:25:9e:eb:7a:d9:3b:
b5:43:f4:3b:56:65:cf:2a:d3:43:fc:27:c6:c2:de:fa:ea:b0:
cd:86:01:bc:61:a1:ff:b9:b8:38:6f:01:78:0a:6a:2b:23:50:
3c:2e:b5:4b:a2:64:97:8a:7a:36:04:61:7b:89:e6:e4:ac:7f:
a8:cc:7e:83:24:8f:20:15:ed:a2:81:4e:43:31:be:16:cb:38:
a4:e8:64:1d:c7:ec:cd:6e:6e:04:4d:b6:c5:1a:9c:2d:c0:a4:
af:b9:c2:66:7f:f2:a8:2a:43:c0:a0:3b:88:7c:c0:f0:cb:b6:
97:f1:29:31:8c:9d:ee:37:c4:4d:7a:89:45:3f:54:82:7f:4f:
5d:e1:cd:00:b3:2f:ce:bc:94:28:e3:56:7f:5f:e1:55:ac:db:
43:54:2d:e3:16:8b:ce:8c:7b:7b:7c:5e:a3:b5:81:e7:f9:f0:
32:34:7d:d7:c3:94:a6:7b:68:43:3a:d5:27:ea:d8:43:fe:99:
f8:77:6a:db:07:2e:8c:22:d1:73:97:d5:b1:e4:5f:10:ca:c8:
72:3e:73:f0:71:51:76:46:06:8b:b2:f8:4e:01:11:cc:fa:2d:
5e:23:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:07:04 2025 by rpki-client