Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C792AAD57011EFA2B5E597762E951A.roa
File: 28C792AAD57011EFA2B5E597762E951A.roa (raw, json)
Hash identifier: aZHyuLWhY4DSMWaeyqpgsN4pJ7PRmF3N4D08MVRhZNU=
Subject key identifier: 0F:D1:5E:68:45:77:66:C8:80:F2:F7:E7:E9:41:7C:D7:1F:78:BF:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C792AAD57011EFA2B5E597762E951A.roa
Signing time: Sat 18 Jan 2025 07:45:17 +0000
ROA not before: Sat 18 Jan 2025 07:45:13 +0000
ROA not after: Sat 22 Feb 2025 07:45:13 +0000
asID: 55020
IP address blocks: 154.217.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81316 (0x13da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:45:13 2025 GMT
Not After : Feb 22 07:45:13 2025 GMT
Subject: CN=678b5c0d-22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:dd:ee:21:e9:cf:bb:d8:8a:54:f4:b4:5f:
8f:a5:4b:ef:89:fb:ea:25:d1:9f:4a:63:23:a6:f9:
a0:c3:50:26:f5:69:f4:3b:e0:e4:76:b2:82:6d:da:
6c:80:43:c0:50:2d:ac:eb:07:36:8f:e4:fa:30:03:
c2:b0:b9:0c:0b:a0:1f:7a:ee:7b:ad:7d:71:02:8a:
3e:4a:4d:ea:97:f9:c5:e3:09:76:b0:3b:e7:20:b0:
76:66:44:3a:23:7e:03:0b:08:fa:ef:44:28:4a:b8:
de:16:9c:8a:1d:d3:72:a3:f3:d7:9d:c2:eb:96:82:
05:06:b1:5f:d3:87:c3:02:45:83:ed:4e:f1:75:46:
d0:31:dc:49:3e:a6:34:e8:31:95:5c:53:f8:e6:db:
56:4e:9f:66:7f:b8:bd:29:f6:32:75:ed:c7:65:2c:
6b:00:df:27:07:3f:04:3f:89:46:4f:66:64:cb:34:
76:a0:a5:1b:e4:72:15:e0:0f:4b:e6:e5:e9:dc:cf:
a7:b8:de:89:60:cd:f9:92:29:74:9a:40:cc:90:4f:
89:ec:20:6f:5f:8f:e5:4a:04:a1:52:08:55:10:ee:
07:7f:99:24:22:c1:87:e5:7f:78:86:70:5d:2c:4e:
05:4c:4d:2a:8f:f1:4e:f7:85:c6:b7:d3:f8:6d:73:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:5E:68:45:77:66:C8:80:F2:F7:E7:E9:41:7C:D7:1F:78:BF:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28C792AAD57011EFA2B5E597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
84:13:bf:1f:b8:2a:05:2a:68:8e:a5:f7:89:a6:71:78:a4:81:
90:e0:78:49:79:91:6f:d2:66:75:30:67:83:51:73:3a:48:69:
71:59:fa:01:33:80:6a:f2:d1:8d:b7:42:52:04:6a:2c:47:07:
99:39:76:ef:07:06:31:6f:2a:0c:4e:e2:98:e4:f9:35:13:08:
fe:f3:3f:80:87:61:cb:59:12:19:db:cb:c6:cf:e9:98:87:dc:
9a:51:4a:92:eb:89:d0:eb:a4:9f:11:cd:33:04:33:8c:ab:81:
54:c4:c2:82:5e:8b:b9:83:03:71:c0:88:d5:5a:97:a8:74:ff:
fa:62:be:df:7c:2e:22:42:26:11:a3:83:bc:f1:9e:d3:94:3b:
7d:c1:8f:32:1b:ad:ef:70:d2:3a:f5:c8:dd:e7:3a:61:aa:65:
3e:43:92:75:91:9c:f7:6d:27:bf:05:f4:35:6f:ed:86:bb:fd:
5e:3c:3c:bc:ad:5d:7b:da:fd:77:44:8d:49:5f:5e:d2:9a:b4:
e4:71:4d:9d:f2:34:95:2f:a0:97:03:08:f3:6b:13:03:b5:81:
35:2e:15:dc:00:64:2f:94:f2:b3:5a:e5:d6:25:65:32:1c:83:
98:26:ce:4a:c1:90:69:5c:14:f8:02:ad:80:78:7a:b1:d8:28:
68:a8:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:31 2025 by rpki-client