Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A44A19CCF2411EF99C2765C762E951A.roa
File: 2A44A19CCF2411EF99C2765C762E951A.roa (raw, json)
Hash identifier: 7PgZXQJFRdX0owGfowkp2kU0cm9xo+Y/0xI1C/GOu6c=
Subject key identifier: EF:44:05:8C:F2:A0:7E:F1:25:E9:68:3F:F2:C8:71:F8:E7:71:68:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A44A19CCF2411EF99C2765C762E951A.roa
Signing time: Fri 10 Jan 2025 07:26:11 +0000
ROA not before: Fri 10 Jan 2025 07:26:07 +0000
ROA not after: Fri 14 Feb 2025 07:26:07 +0000
asID: 398823
IP address blocks: 154.212.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80293 (0x139a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:26:07 2025 GMT
Not After : Feb 14 07:26:07 2025 GMT
Subject: CN=6780cb93-172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:b7:e3:de:56:98:65:67:5a:3d:59:c2:14:
d9:9d:de:6a:da:55:87:0a:64:82:4f:6a:e0:83:c3:
7e:59:3b:fc:e0:82:c4:21:d3:6f:a6:4e:cc:2c:cb:
f8:56:55:98:d0:aa:0b:39:e7:ea:b0:a8:46:b6:4f:
55:67:8f:89:51:ef:93:78:2a:65:ad:c0:8f:5b:ec:
ea:80:da:43:01:65:de:2f:5c:29:6a:bc:ec:87:6e:
c7:29:9b:a8:de:f4:14:b1:dc:c5:d6:a3:4a:0b:1c:
76:03:c3:ca:20:af:e4:62:df:31:2d:56:f9:b3:1d:
60:a2:af:8c:e4:80:1a:6e:f2:4a:74:80:36:de:07:
02:ad:6f:1b:cf:0b:1a:c4:54:2a:0b:6c:81:10:e9:
32:7f:94:08:e3:cf:b6:58:4b:8b:62:52:1e:be:23:
1e:2f:19:4f:55:1e:0b:da:e1:72:e3:b6:e8:fd:4c:
ba:4a:b4:1d:d8:a1:95:4e:dc:e3:01:8a:76:dd:2c:
f0:8e:ba:7a:eb:50:0d:da:d9:a4:6d:fc:33:9c:c5:
9e:ed:d3:e3:a5:8d:ff:a0:4b:a3:23:19:65:86:e1:
f8:28:60:00:37:6f:20:fe:5a:46:5c:f1:d4:93:5e:
59:9f:2a:67:66:56:91:f9:01:ac:47:9d:d4:f1:e8:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:44:05:8C:F2:A0:7E:F1:25:E9:68:3F:F2:C8:71:F8:E7:71:68:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A44A19CCF2411EF99C2765C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
25:1e:2d:0f:de:61:85:d8:7e:8b:0e:79:a3:4c:7e:40:60:3f:
e2:e6:50:e3:a7:0d:f6:e2:47:e9:35:b2:21:ef:a8:21:6c:fa:
1c:44:c0:a6:3b:81:4a:c1:75:f6:f4:5c:d3:00:54:12:32:55:
e1:09:92:9e:73:57:2f:ce:17:e0:96:d6:80:30:a5:03:3b:97:
a2:9c:26:51:af:0d:84:18:85:51:da:88:16:8b:38:2e:49:9b:
1a:c8:c8:0f:85:e8:ff:47:20:49:a0:d7:91:16:88:26:15:f2:
0e:be:97:83:54:76:e3:2f:df:f8:37:7a:e4:3c:85:1d:3e:44:
9d:35:64:ff:7a:dc:6f:56:2d:c4:90:8f:34:cd:c7:95:db:f8:
7f:47:26:05:23:4d:d3:ae:25:5d:dc:bf:a6:10:d5:63:b5:7a:
11:66:51:b4:76:52:ad:db:e4:32:66:e0:49:f0:e1:ac:41:81:
80:6e:be:ee:6c:85:3e:1d:c2:d8:66:de:be:60:11:13:e3:b8:
31:ba:80:23:31:5a:21:e8:26:bf:33:74:2c:ff:a0:6e:3c:3d:
3f:55:92:2d:f2:de:65:3f:2b:54:9d:cc:00:93:8d:60:ac:27:
f6:bd:bb:c0:a2:f9:12:b9:dd:74:dc:3d:8e:8f:d1:cb:39:ec:
9e:b8:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:20 2025 by rpki-client