Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F3D32DCBC11EFA4D770AB762E951A.roa
File: 268F3D32DCBC11EFA4D770AB762E951A.roa (raw, json)
Hash identifier: 0h4rbSTKSb6xKbhgDR2Y89/Yz+Tq54jWKUPje+489xc=
Subject key identifier: 6E:6A:22:2A:28:B8:6B:C3:6C:AF:61:51:CA:09:75:F6:E8:7E:91:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F3D32DCBC11EFA4D770AB762E951A.roa
Signing time: Mon 27 Jan 2025 14:36:53 +0000
ROA not before: Mon 27 Jan 2025 14:36:49 +0000
ROA not after: Sat 08 Feb 2025 14:36:49 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85017 (0x14c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:36:49 2025 GMT
Not After : Feb 8 14:36:49 2025 GMT
Subject: CN=67979a05-40b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:6c:0a:07:25:c8:54:fb:16:3d:c2:4d:30:
4e:80:da:76:2d:eb:e9:b5:7c:19:6b:f3:15:d5:ab:
08:8e:a3:65:bf:b9:23:74:ba:7d:0a:9b:73:e9:ca:
85:c8:5b:4e:d9:01:1a:49:82:a8:67:c2:a9:b6:b2:
d8:6f:6f:02:ee:fb:b2:f2:90:b8:a3:83:82:df:ff:
0d:d1:49:15:16:8f:4d:95:d2:ba:94:25:be:3b:a9:
35:07:4b:23:49:2e:40:1b:bb:ac:1b:99:8b:1e:21:
01:78:39:5c:e7:41:a3:be:6e:fd:d8:89:87:fb:6f:
00:d2:5f:bc:c9:78:27:7a:de:d4:fe:5d:70:8f:6a:
09:aa:30:91:3c:b1:75:35:90:2d:85:3f:0d:01:49:
9a:e2:55:45:4e:da:2d:e7:d3:cc:f5:49:2e:49:28:
b0:7b:13:42:c5:1e:e3:1b:b5:73:b2:da:ba:19:b7:
be:1a:e1:6b:34:e0:75:ff:ec:a1:6a:ae:11:aa:d0:
36:b1:57:9a:e3:a1:53:99:0b:d2:5a:42:7e:11:47:
55:d3:0c:dd:6d:19:e2:b7:e6:6d:6c:44:be:e5:85:
c7:ca:10:af:2b:16:5c:0b:ef:dd:41:4b:c7:d4:9f:
b5:66:30:f3:a4:a7:98:35:9f:fb:62:9a:cb:53:3f:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6A:22:2A:28:B8:6B:C3:6C:AF:61:51:CA:09:75:F6:E8:7E:91:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F3D32DCBC11EFA4D770AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
22:4f:06:a7:20:27:fa:ad:79:30:76:ea:6e:c8:84:3c:24:bd:
10:a7:51:3e:a6:50:6f:94:71:f1:e6:da:da:de:82:11:58:94:
92:5a:91:d8:51:a3:98:8c:71:a7:89:c3:97:dc:28:82:fb:47:
90:b7:a7:a0:43:57:bc:8f:8b:27:a8:c3:4d:dd:7e:78:68:63:
02:a2:a8:f2:c6:2b:2e:dc:08:8d:63:e8:9f:1f:28:bf:d8:a8:
ef:c7:3a:15:d3:9f:88:76:aa:87:b4:5a:da:e7:c4:a1:f3:0b:
4e:61:f9:ad:95:f8:88:5e:7c:ec:51:c9:9b:af:f0:bd:4a:66:
87:58:6c:7f:0d:4d:07:5a:e5:ba:0f:80:c1:5c:ea:dd:03:4e:
35:06:eb:2f:f0:ed:4b:73:aa:aa:7b:0f:d8:a4:d9:5f:21:07:
2a:96:c4:6e:a6:f4:3d:1b:65:fd:97:11:7c:ac:7e:9a:86:1d:
43:72:d8:a8:d5:59:85:69:72:fa:a6:ad:85:ba:90:c0:9d:0b:
fa:98:8b:6d:5b:71:53:33:cf:17:3a:37:ef:a4:e0:bb:c7:3d:
ee:f5:50:4d:8c:49:f0:6a:59:2d:4e:cf:97:9f:55:7d:bb:88:
2c:3b:d0:3d:f3:49:52:3e:b7:6d:40:3e:a3:4c:84:1c:b7:d6:
8b:e5:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:28 2025 by rpki-client