Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FE9820CBE711EF8FFD72B3762E951A.roa
File: 21FE9820CBE711EF8FFD72B3762E951A.roa (raw, json)
Hash identifier: xJ/YsSHpLLBnLVZYHfmilTwaLcROXNVEdEtsj0+u4MA=
Subject key identifier: 3A:4D:F3:6A:F5:63:18:CD:6E:E3:16:CF:90:79:B7:54:5D:3C:A4:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013587
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FE9820CBE711EF8FFD72B3762E951A.roa
Signing time: Mon 06 Jan 2025 04:31:44 +0000
ROA not before: Mon 06 Jan 2025 04:31:40 +0000
ROA not after: Sat 08 Feb 2025 04:31:40 +0000
asID: 203020
IP address blocks: 154.217.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79239 (0x13587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:31:40 2025 GMT
Not After : Feb 8 04:31:40 2025 GMT
Subject: CN=677b5cb0-7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:5b:0e:03:67:4c:ad:51:7d:4d:f9:30:0c:
92:f7:a4:da:58:a8:02:80:7c:7d:4e:c6:18:7b:5d:
6f:ba:72:38:9d:40:d1:5e:1f:f8:2d:97:6f:0e:93:
f7:22:3e:ab:a5:97:ef:84:1b:bc:d5:fa:d2:a0:77:
3b:f3:f5:89:61:42:31:ec:20:e2:21:2a:f1:d0:5f:
04:f7:4a:fd:be:64:0c:b5:9a:83:37:e7:b2:87:94:
db:79:a7:35:08:47:0c:33:e1:83:7d:a3:96:25:40:
79:d4:de:61:7d:66:86:70:f2:f0:88:56:21:6a:4b:
44:5a:35:46:12:3b:ec:6b:f0:7d:b4:65:42:72:4d:
d9:8b:23:33:d2:9f:3b:44:53:4e:52:9b:00:db:fd:
2c:76:22:a0:33:5b:d3:71:c9:6b:c2:01:3b:7b:05:
5f:9c:81:cf:5b:55:a5:53:e3:9e:64:24:9c:60:8b:
1e:9e:5c:5e:55:7b:16:04:24:d4:b6:2d:de:2d:85:
ad:42:dc:4b:9e:4b:67:f8:33:b9:c9:25:30:13:b0:
88:ae:80:53:6c:38:2a:09:b9:a3:c6:c0:28:ee:12:
8e:17:cd:9f:45:2c:97:2e:a2:0a:73:aa:93:8b:62:
57:d2:f6:17:9d:45:5e:b3:2c:18:4c:48:43:9c:d3:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4D:F3:6A:F5:63:18:CD:6E:E3:16:CF:90:79:B7:54:5D:3C:A4:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FE9820CBE711EF8FFD72B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.144.0/22
Signature Algorithm: sha256WithRSAEncryption
86:96:5a:ec:e0:fc:80:89:d9:18:6a:b4:3b:00:9f:a5:31:7a:
5d:e6:aa:87:13:60:8a:53:dd:3d:da:0c:08:a7:cf:ca:22:27:
db:ba:23:78:0b:3b:3b:a5:a8:e7:b8:42:1c:32:5f:6b:17:44:
c0:7d:ed:1f:6d:30:b0:93:f3:bb:ae:c5:a9:28:fb:b6:f3:8d:
8a:a6:36:3d:91:52:5f:4b:04:0e:8d:f4:32:df:f9:66:b7:dd:
91:c2:85:15:fa:6d:f1:54:0c:fa:bc:5d:ff:c5:52:7c:5e:8b:
e3:36:8c:54:00:59:16:c2:22:e4:54:2e:be:37:a7:fe:7e:28:
3d:03:71:c6:a6:3f:ce:b9:07:e3:46:1b:15:79:ec:e6:64:dc:
ac:5c:21:bd:8a:47:3d:5d:b9:d4:05:db:e9:99:41:87:dc:c3:
80:85:3e:de:e1:07:ae:65:b7:98:dc:a4:04:3e:f8:e0:e3:ee:
8a:b9:04:4d:15:f0:37:61:8f:fe:1d:81:45:71:f0:82:9d:d8:
b0:d0:f4:59:fe:aa:53:60:ee:03:3a:ed:32:37:93:86:72:46:
bb:0b:19:a9:ce:78:0a:53:ea:ba:71:2c:bf:06:9e:3b:f9:c0:
09:43:22:9b:e7:74:26:c3:01:42:b5:cf:7b:e6:ae:61:31:e6:
05:63:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:26 2025 by rpki-client