Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29424A36D72D11EFAC7BD471762E951A.roa
File: 29424A36D72D11EFAC7BD471762E951A.roa (raw, json)
Hash identifier: /NrBIaN2UO5m65VwLCJYkxAlPO0xQ8dZYsbRIWwlfIg=
Subject key identifier: 8A:3D:57:64:13:58:74:48:9E:1C:FA:8C:C2:26:92:A5:CB:D3:11:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29424A36D72D11EFAC7BD471762E951A.roa
Signing time: Mon 20 Jan 2025 12:50:44 +0000
ROA not before: Mon 20 Jan 2025 12:50:40 +0000
ROA not after: Sat 01 Feb 2025 12:50:40 +0000
asID: 6079
IP address blocks: 154.202.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81458 (0x13e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 12:50:40 2025 GMT
Not After : Feb 1 12:50:40 2025 GMT
Subject: CN=678e46a4-e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:da:f0:44:79:ca:6d:62:9d:aa:48:7a:47:
bd:0a:44:f9:7b:c6:e8:b2:1e:3d:f5:7c:ca:38:e4:
3f:34:be:0a:ac:60:21:a0:5a:cc:e1:d7:da:8a:87:
21:84:ad:f3:9c:aa:d6:10:14:d7:9c:5d:ad:6b:ac:
ef:03:e7:f4:eb:2b:c7:ef:38:21:82:22:c6:35:5f:
7f:e4:47:03:a1:ae:ac:9b:fd:e7:df:0f:9c:03:bb:
f8:32:72:27:b0:ce:b6:47:ba:b9:d8:7e:df:fe:35:
1a:6e:89:c0:a9:bf:cb:86:08:ba:f2:96:57:73:57:
3e:5e:1d:bd:04:8b:f9:37:2a:35:f3:50:1e:c7:53:
53:dd:43:76:99:e8:24:d1:e7:0e:f1:41:2b:8d:6a:
2f:57:88:94:13:df:a1:5b:5e:6c:87:59:18:97:17:
1c:08:c0:02:31:1c:6c:aa:91:fc:a9:45:28:79:d3:
71:ef:bd:b6:89:80:0f:b5:70:2e:39:28:fb:c9:5a:
fa:3d:b1:66:54:3b:29:3f:61:70:d2:a8:48:dc:1c:
a5:59:48:c7:cd:f4:90:6e:07:00:e4:33:27:4d:10:
9a:1b:8d:d3:46:29:6d:9b:b1:4f:d2:41:22:03:4e:
40:fb:8b:a5:5c:22:32:a0:ec:ef:ef:bb:3b:20:1f:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3D:57:64:13:58:74:48:9E:1C:FA:8C:C2:26:92:A5:CB:D3:11:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29424A36D72D11EFAC7BD471762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:11:46:09:bf:bc:f4:a4:36:f3:fe:1e:72:82:15:51:28:66:
43:87:f5:cf:0b:f2:d6:d4:15:76:fc:5f:19:a3:2e:8c:c7:45:
01:25:8a:41:47:ca:f3:0e:d4:43:2a:24:6f:86:91:cd:24:fe:
e8:65:dc:70:54:44:4f:1b:fd:31:8b:77:cf:db:56:93:0f:87:
e7:ba:23:30:b4:e0:36:e9:fb:e9:4a:6b:ff:a9:08:d1:09:ae:
7e:54:c9:dc:d4:25:34:c8:2b:44:eb:fd:5f:3c:58:60:36:91:
29:e5:93:e0:f3:91:cc:28:95:ab:6b:d4:f6:59:06:58:59:87:
42:28:28:27:bc:eb:ff:08:5f:d3:79:09:2e:a8:34:68:04:fb:
1e:ea:87:7f:70:cc:89:70:6d:16:10:9b:76:60:7e:32:e9:8f:
5e:9b:5e:8c:a5:64:d1:1f:bf:d4:a7:42:88:99:58:ad:7a:14:
5c:43:a2:24:e7:84:57:c4:f2:c8:d8:45:4b:4d:2d:d5:07:b1:
36:fd:d3:9b:d3:02:21:3f:6e:05:01:46:87:b7:52:ac:5b:57:
37:88:4b:28:d6:8e:95:37:dd:80:69:50:91:07:50:2c:ea:b6:
df:25:a9:fb:d4:57:69:61:02:c6:97:ab:52:56:92:72:6a:61:
d7:bf:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:26:42 2025 by rpki-client