Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6DBC0ADBEE11EFA98919BF762E951A.roa
File: 1F6DBC0ADBEE11EFA98919BF762E951A.roa (raw, json)
Hash identifier: sgssvV/JvW4UXEYjvs/44J280g9bJY3I4AleS9LOof8=
Subject key identifier: 05:AF:D4:2B:E0:04:D2:5F:D2:81:B0:8B:6B:8E:47:38:BA:5E:EE:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6DBC0ADBEE11EFA98919BF762E951A.roa
Signing time: Sun 26 Jan 2025 14:02:05 +0000
ROA not before: Sun 26 Jan 2025 14:02:01 +0000
ROA not after: Fri 21 Mar 2025 14:02:01 +0000
asID: 138915
IP address blocks: 154.90.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84658 (0x14ab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:02:01 2025 GMT
Not After : Mar 21 14:02:01 2025 GMT
Subject: CN=6796405d-2821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:97:40:90:fe:4b:c4:8e:62:92:10:7f:21:
70:42:6c:d8:ab:11:b8:4c:f4:fd:7b:84:2f:95:3a:
fa:cb:b5:da:b0:90:e7:a4:63:c9:96:48:46:7f:dc:
06:48:4e:de:85:95:e9:af:4d:1b:68:46:45:34:d4:
7a:1d:28:2b:d0:9e:b7:f5:8d:19:4c:c9:48:bc:ab:
bc:92:6b:c0:a6:93:8f:a9:28:67:e5:c3:80:c5:72:
74:d5:af:a4:86:21:f8:e4:40:cd:47:89:f7:4a:d7:
00:17:fc:3e:3b:5b:c3:c0:d2:79:eb:85:f5:0a:be:
a8:68:b1:af:82:74:e4:07:11:69:c2:dd:bc:c7:80:
a7:ba:e2:94:1a:83:2c:13:9e:7c:64:30:c9:4a:5a:
89:73:55:c0:ed:65:7c:04:c7:dc:bd:aa:3f:3a:0f:
5c:f0:20:c1:a4:cd:eb:f6:1e:89:e4:0f:b5:fd:34:
b6:9c:f5:66:35:9c:90:81:6a:ce:5e:e8:2e:13:ab:
67:ac:8b:4f:68:f5:05:65:a2:d6:86:2f:d1:83:17:
91:5b:cd:8f:a6:28:61:b6:55:55:43:e6:ed:f4:4e:
c4:8a:13:f1:e9:0d:9a:ab:1a:83:b6:22:9a:63:68:
53:4d:a5:5b:5a:f6:fd:f9:5c:b6:b5:4b:ff:7f:d4:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:D4:2B:E0:04:D2:5F:D2:81:B0:8B:6B:8E:47:38:BA:5E:EE:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6DBC0ADBEE11EFA98919BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:42:33:7a:4a:8e:61:53:d7:9f:97:4a:b5:3d:42:a5:05:39:
97:4b:ab:86:85:db:e4:2b:cc:da:08:f5:fe:72:ec:e6:e6:3a:
29:4e:6d:33:dd:3f:1b:49:db:1b:1a:e7:30:91:40:c2:60:b3:
81:54:77:7e:96:4d:d4:31:27:c7:94:c7:02:b9:9f:49:f5:7f:
56:4e:f7:f2:09:50:f0:19:40:b6:6e:08:a4:6f:cf:b1:3d:6e:
3c:c1:af:33:a5:d4:30:74:6f:2f:ad:a5:63:75:de:44:df:41:
17:f5:79:62:50:28:1e:bc:54:d6:cd:8f:6f:7b:cc:3d:7a:f0:
58:00:15:2f:f8:59:98:ec:c7:d7:f9:23:8a:72:a2:7e:2c:ee:
4f:a2:02:31:f1:df:7f:f2:7f:75:22:b4:17:3e:a4:ef:9f:ad:
2a:e7:e5:13:61:a6:be:0e:f1:19:95:57:5a:43:04:c3:fb:c6:
fe:88:91:89:ee:09:4b:14:63:07:4d:e9:9d:4c:84:a6:65:f5:
34:e0:84:ee:e8:da:5a:4c:22:b8:6a:e4:2f:e8:c2:47:36:e7:
eb:18:3e:27:b0:12:95:2d:d7:7b:1f:eb:fe:9b:a5:a6:54:3a:
4a:54:87:00:92:f6:b5:1a:5b:80:dc:5c:db:54:87:ea:26:33:
f2:33:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:31 2025 by rpki-client