Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E2F598AD8A011EFB24D5175762E951A.roa
File: 1E2F598AD8A011EFB24D5175762E951A.roa (raw, json)
Hash identifier: JiChNqM/hYus0mOY3nrdZJwUMsYLn7FDucK+1mFlYU4=
Subject key identifier: 4C:1A:99:3F:1E:5B:D7:F7:AB:A9:73:92:3C:E1:A6:84:5A:10:F7:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E2F598AD8A011EFB24D5175762E951A.roa
Signing time: Wed 22 Jan 2025 09:06:09 +0000
ROA not before: Wed 22 Jan 2025 09:06:04 +0000
ROA not after: Sun 09 Feb 2025 09:06:04 +0000
asID: 6079
IP address blocks: 154.217.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81524 (0x13e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:06:04 2025 GMT
Not After : Feb 9 09:06:04 2025 GMT
Subject: CN=6790b500-6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:54:39:6f:12:3a:3d:1c:b1:4b:b2:f2:5d:
31:f9:14:49:11:55:10:6e:0b:5e:48:2b:32:df:7b:
b5:37:3e:a6:59:e4:fd:63:a1:cc:fd:b0:1d:41:e8:
a3:d7:a3:bd:96:cf:8c:a8:b3:28:9f:5b:8d:1e:9c:
a2:da:a5:9d:6a:95:2a:3c:13:fd:4b:74:a1:5c:62:
13:e6:c1:db:c6:03:8a:9b:a5:c6:89:d0:b7:1c:f9:
81:47:6a:73:f1:e8:71:29:a6:fa:94:37:20:1f:20:
fe:0e:94:fc:76:cc:53:3f:9d:ea:2e:0b:ed:57:7d:
8d:dd:aa:2b:dd:f5:04:a7:5b:be:c4:6b:f2:5e:1a:
78:85:de:0b:b8:5e:0f:a8:f0:bf:52:d5:6e:76:53:
92:91:2d:3d:e4:78:fc:79:38:0a:d8:8c:3b:40:4c:
46:9f:7f:96:8e:fd:17:3f:82:0f:f3:46:ec:a9:4b:
d8:dd:d3:2c:d5:c0:dd:81:e6:0e:f0:49:7f:38:f6:
cf:0a:1a:23:0c:cb:4f:91:af:cf:3c:1f:12:ab:6f:
2f:19:bb:fc:d3:c1:f5:33:1a:51:08:ee:cd:8b:a1:
a7:c6:08:3a:fd:24:a2:14:bf:3c:df:aa:c3:40:22:
2f:03:ad:7b:52:b9:02:d2:4c:27:aa:29:ba:fe:a5:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1A:99:3F:1E:5B:D7:F7:AB:A9:73:92:3C:E1:A6:84:5A:10:F7:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E2F598AD8A011EFB24D5175762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
94:22:3d:f3:df:37:35:5d:a7:0d:b0:20:d8:cf:62:b8:16:2d:
e4:08:d2:87:53:89:06:55:b3:d0:01:22:10:c4:1d:14:b7:92:
71:a7:37:68:dd:08:be:2b:ad:c9:84:87:91:d4:b9:6f:2d:c7:
1c:10:5c:79:95:5a:6f:05:3a:11:8c:29:e2:ef:85:76:61:19:
3f:26:a6:39:e2:8e:3f:b2:ec:ac:0e:a5:62:dc:28:ea:30:4c:
74:de:f7:14:79:a4:1e:f1:f7:ae:a8:35:d0:79:0a:b1:be:c0:
b5:ad:ff:d0:fc:b0:b4:34:f1:65:63:31:c0:40:5d:69:82:ae:
7d:49:d6:3f:09:09:b3:3c:cf:40:6d:6c:a7:db:06:a2:0a:d5:
ac:98:f2:21:b9:1b:c7:9c:d3:fd:2e:4a:e5:1f:5a:d6:1d:5d:
e4:71:fc:e1:15:66:07:49:5e:e5:19:58:a2:76:15:86:5d:95:
4c:84:8b:17:e1:a8:31:58:f8:37:53:0b:b4:19:dc:6f:53:00:
e6:33:73:5a:ac:b2:f1:a1:9d:72:6a:ba:fa:8e:a9:38:88:44:
bf:77:b7:7c:a9:19:d8:22:f8:92:d0:c6:4e:2b:c1:db:3f:e3:
bf:1f:27:0f:4b:60:f3:f3:cc:fc:c7:ff:39:50:fd:5f:f1:86:
6f:b2:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:41 2025 by rpki-client