Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28AC715CC9CA11EF964E2A4D762E951A.roa
File: 28AC715CC9CA11EF964E2A4D762E951A.roa (raw, json)
Hash identifier: 4P8ijgEZiA7NnbdHi7/oe9xbr42P51GsAi+x+j0zc2s=
Subject key identifier: 10:04:C9:98:8B:3A:09:EE:47:1E:CD:CA:E7:C0:E1:67:44:52:C8:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28AC715CC9CA11EF964E2A4D762E951A.roa
Signing time: Fri 03 Jan 2025 11:59:17 +0000
ROA not before: Fri 03 Jan 2025 11:59:14 +0000
ROA not after: Tue 04 Feb 2025 11:59:14 +0000
asID: 203020
IP address blocks: 154.207.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79044 (0x134c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:59:14 2025 GMT
Not After : Feb 4 11:59:14 2025 GMT
Subject: CN=6777d115-f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:e7:30:c1:02:be:2d:0a:ca:fb:1c:a0:df:
81:4c:05:99:09:3f:73:71:e8:73:bd:3e:af:e3:26:
f2:90:98:c2:a0:c7:46:07:e1:a3:3d:61:66:45:c8:
87:c0:7c:fc:9f:52:b4:78:8d:91:3a:d6:d7:c6:f6:
d1:f5:cd:1e:4f:2f:a6:0b:9e:83:8e:33:e9:75:a5:
2c:5d:ef:96:ed:a4:79:09:d0:e2:0c:61:c0:b8:a8:
96:26:06:3c:f1:e0:f5:89:3d:e2:58:a1:40:56:1c:
eb:e6:d8:f8:01:66:95:eb:1a:0a:ae:a4:af:a7:95:
55:53:3f:ed:37:44:30:fa:f8:2a:d9:c1:10:ab:ef:
da:93:23:64:95:a5:73:cb:70:dc:63:c1:d2:8b:47:
d1:de:13:60:b3:97:a7:9f:37:c1:27:b5:f3:8e:82:
fa:e9:a8:97:05:f1:a5:42:25:29:ba:9b:2b:11:57:
e5:3a:44:40:bc:c7:50:60:e7:38:b8:d0:e1:45:59:
e1:d2:4a:5b:63:d8:a9:07:f6:c4:73:c5:e9:df:3d:
25:4e:88:31:20:f0:d6:ee:c9:c6:9e:00:88:13:28:
c1:88:58:93:f3:cd:47:7a:50:b1:59:f1:b7:31:79:
d8:eb:35:9b:d6:aa:ef:1e:8e:3f:c8:5b:65:b0:67:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:C9:98:8B:3A:09:EE:47:1E:CD:CA:E7:C0:E1:67:44:52:C8:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28AC715CC9CA11EF964E2A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:10:43:bd:ab:72:c9:a4:ef:35:4f:d3:9c:82:5f:2b:d3:51:
43:67:28:44:ea:b3:0e:d8:77:3c:ab:c6:fd:b4:ad:d9:bd:5a:
79:96:df:97:e7:ea:b8:61:81:2f:38:51:69:c3:35:17:35:7b:
ae:cb:ab:58:5d:44:c4:8f:89:aa:15:38:1a:22:20:d1:4f:2d:
c0:48:71:6a:c1:d6:e1:8d:c7:ae:ea:6a:8b:2f:c6:85:7b:a6:
03:9e:09:f7:38:fb:71:5a:86:30:88:96:fa:8d:c1:49:2e:7e:
ac:d6:65:51:0d:a8:b4:aa:7e:48:01:79:1a:02:76:fe:ec:73:
67:23:3a:3d:99:33:30:52:74:d7:8b:f8:66:67:4b:7b:df:cb:
f0:c0:65:e5:11:a6:45:18:d7:a5:eb:bc:6f:3a:ad:ec:f6:cd:
06:37:ea:b6:a1:57:37:9a:4d:cd:f3:b9:81:5d:51:c5:c1:cb:
12:91:61:cc:b7:eb:59:7f:06:18:c7:90:a2:cb:24:62:16:c8:
69:db:cd:c8:70:5b:a7:e8:7c:ae:19:59:e7:f3:a4:bd:c3:d5:
13:7c:a4:1c:47:cb:66:ce:0f:cb:f8:26:54:f2:89:05:12:a6:
98:05:6a:1f:2c:88:ad:29:e0:bd:93:a7:60:20:b8:75:57:da:
ae:45:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:48 2025 by rpki-client