Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC65922DB2411EFB104286F762E951A.roa
File: 1DC65922DB2411EFB104286F762E951A.roa (raw, json)
Hash identifier: oVqeVSF9n17PgzVCMi7wz3MG/nU0Sj5EwPuZzgcpvmQ=
Subject key identifier: B6:FA:49:94:9E:61:68:B3:44:60:4D:AA:A1:DE:82:1F:44:C2:BF:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC65922DB2411EFB104286F762E951A.roa
Signing time: Sat 25 Jan 2025 13:56:04 +0000
ROA not before: Sat 25 Jan 2025 13:56:00 +0000
ROA not after: Tue 04 Feb 2025 13:56:00 +0000
asID: 212238
IP address blocks: 154.207.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84400 (0x149b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:56:00 2025 GMT
Not After : Feb 4 13:56:00 2025 GMT
Subject: CN=6794ed74-bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:55:ee:49:d6:7e:ea:59:00:77:da:eb:a8:
eb:ed:ba:83:db:f6:c6:f5:b5:ad:a4:a5:7c:63:85:
d7:b0:00:fc:61:ce:26:e0:d9:f0:5a:4f:67:b3:86:
92:6c:fa:ed:6f:aa:2d:14:6f:e4:97:f1:8f:e3:b8:
4b:04:d8:b1:fe:cc:d2:39:ac:af:52:4b:54:16:40:
6c:21:3b:23:c6:d5:08:d6:db:89:25:7f:66:8e:24:
2e:2e:be:35:c0:81:4c:3a:a6:74:04:9b:10:22:a1:
82:31:9e:50:cc:09:cd:2c:b9:a7:68:c3:c0:8f:ef:
34:af:13:b3:8e:dd:e0:e9:6b:e6:43:74:0f:d4:fb:
f0:e2:61:d9:7d:4a:3a:9e:5c:6b:7c:1c:d2:32:85:
3d:d5:aa:62:4c:ac:ad:b9:cd:2c:18:07:f9:00:19:
bc:f4:98:95:46:c6:0b:99:e7:03:04:54:cf:cd:cf:
32:6b:1b:cb:8f:0b:b5:d7:cd:4f:a1:33:1f:52:a6:
21:2a:e5:3c:62:8e:25:85:00:0e:e4:52:2b:7e:50:
24:f3:73:99:15:40:3b:39:8f:38:bd:fd:5f:a1:87:
b1:43:4d:99:3b:0f:5b:d6:db:96:33:7a:e7:89:44:
83:63:8d:94:bd:c0:fc:c6:7b:eb:14:a2:c8:e7:22:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:49:94:9E:61:68:B3:44:60:4D:AA:A1:DE:82:1F:44:C2:BF:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC65922DB2411EFB104286F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
02:6d:5c:03:95:18:35:0b:bb:0e:5d:f3:0f:2e:ef:58:6f:ef:
33:2a:75:55:e2:8b:c4:d6:f7:89:a8:7e:51:6b:c6:94:37:61:
cf:75:df:e6:fe:64:a8:9e:be:f4:b4:2f:3d:25:fa:94:60:70:
0e:0c:53:9a:32:5f:26:74:fb:96:34:da:0a:60:22:5f:1d:66:
3e:7f:d8:da:fc:7f:05:b0:4d:65:43:6e:2d:63:11:a0:7c:5e:
9d:78:d3:6d:f6:6f:69:d8:b8:80:40:58:45:3b:7d:2b:3e:9b:
cd:18:66:06:a9:a3:5f:df:95:dd:f5:1f:63:e4:5c:16:2e:8a:
e5:96:56:dc:45:9d:23:dc:f0:14:bc:bc:5d:e9:40:8e:a8:ba:
f8:90:61:26:cf:3e:9d:0c:10:72:77:1d:da:92:02:e3:08:66:
37:31:6f:76:94:0c:b0:e2:26:5e:4b:38:69:94:86:d9:7b:2c:
4c:ae:c6:67:b1:23:fe:ac:87:60:b2:d6:79:30:04:95:98:d2:
84:67:26:c5:fe:da:b6:2d:03:37:c6:71:c1:9f:29:70:09:a3:
bc:e0:ac:48:88:18:45:03:3d:65:61:ef:e1:b3:89:44:2d:19:
fa:01:8e:51:b0:2e:e5:0b:6d:ce:f8:29:d7:8c:f6:9b:b2:16:
59:50:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:08:22 2025 by rpki-client