Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E00CD48DCCF11EFAE09FFAA762E951A.roa
File: 2E00CD48DCCF11EFAE09FFAA762E951A.roa (raw, json)
Hash identifier: rgKr0FzKjgqzr5LnHBeJjvT6FQ2KBjvHOBfEQBik8tg=
Subject key identifier: B4:93:AA:CE:45:17:DD:72:79:08:72:0D:2A:20:BA:B3:AC:9C:D4:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E00CD48DCCF11EFAE09FFAA762E951A.roa
Signing time: Mon 27 Jan 2025 16:53:06 +0000
ROA not before: Mon 27 Jan 2025 16:53:02 +0000
ROA not after: Wed 12 Feb 2025 16:53:02 +0000
asID: 135097
IP address blocks: 154.213.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85133 (0x14c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:53:02 2025 GMT
Not After : Feb 12 16:53:02 2025 GMT
Subject: CN=6797b9f2-2d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:8d:40:68:e0:4d:1c:80:9b:aa:16:fe:ac:
c2:31:58:27:ff:8b:4c:f3:ef:35:17:e1:ad:b9:59:
02:a1:e6:4d:84:3f:1c:80:e8:3c:76:78:5a:01:fa:
81:ee:f7:94:2d:7e:2e:dd:5c:d2:54:09:c6:3d:2c:
3a:a9:ec:6a:35:b5:44:a4:fe:a0:be:46:7b:7c:29:
20:6d:7e:13:4e:76:e0:cf:b5:cc:71:dd:c6:ae:af:
9f:08:6a:2e:17:4a:82:dc:ef:3c:50:82:53:ae:ae:
78:81:f3:15:9b:d5:b9:ef:10:e4:ab:cc:31:9c:ab:
7c:b3:cd:26:52:d5:04:e0:68:ec:cd:d1:dc:5a:fc:
44:79:a7:f1:05:d2:97:8f:19:1b:cb:68:3c:39:c0:
09:53:10:fe:72:d6:1e:7e:d5:e8:2d:9b:00:c2:f2:
fc:9d:a3:82:c6:f3:e3:16:e6:e5:12:69:54:32:50:
5c:04:50:67:45:46:ce:69:57:b0:9a:f8:8a:9e:79:
13:03:c9:c3:d7:76:02:8a:db:e2:4f:d1:e1:32:e4:
29:c6:b7:51:99:01:b1:f6:94:50:0a:80:50:ca:7e:
81:bf:f0:75:41:f6:25:7f:41:7d:1b:51:3a:51:b4:
86:ae:1d:51:b0:e2:f1:31:79:29:8c:b8:4f:a9:d0:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:AA:CE:45:17:DD:72:79:08:72:0D:2A:20:BA:B3:AC:9C:D4:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E00CD48DCCF11EFAE09FFAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.8.0/23
Signature Algorithm: sha256WithRSAEncryption
36:76:c4:6a:39:27:1d:cf:d8:94:74:db:d7:9e:53:1a:5a:77:
f7:bb:28:9a:41:f0:bf:1e:78:db:11:85:ae:11:d6:15:8c:3f:
4f:bc:12:64:14:52:e5:de:be:f8:76:6c:b7:d2:9b:36:ce:f6:
93:eb:a9:5e:7b:c6:8b:b7:06:e7:3b:25:0f:7f:81:04:66:ca:
8d:4a:bf:4f:b7:79:c2:f4:f7:90:9b:71:db:2c:5f:ff:c2:81:
d2:aa:33:00:5a:c0:b0:77:95:48:39:9c:e2:9b:8e:bb:92:c3:
46:78:64:81:c0:86:85:ce:e0:bf:43:a0:0f:27:e2:62:98:af:
eb:5f:1d:3a:07:0b:95:ff:27:ee:12:d0:a3:f7:54:89:5d:ec:
25:c8:95:0d:83:be:c2:2f:e9:16:74:ad:37:7e:b4:1c:fb:cb:
84:6e:d2:63:ac:e4:13:c7:5a:9f:1d:c4:6e:d6:e9:37:e2:b1:
f8:df:ed:88:74:43:df:f4:e2:50:ad:69:c9:af:27:56:e5:7b:
d7:55:ca:1e:76:8c:5d:e0:1e:35:be:06:38:8a:a7:8f:18:dc:
3f:37:d5:51:ea:93:6f:38:57:7c:8e:51:c0:4a:a0:39:00:f8:
14:db:c6:47:ea:44:8b:c5:c5:e5:bf:62:93:bc:5e:5b:b7:7d:
6e:18:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:32 2025 by rpki-client