Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3B7FFAD8A611EF9110A79D762E951A.roa
File: 2F3B7FFAD8A611EF9110A79D762E951A.roa (raw, json)
Hash identifier: HRyX9xit3Xr3/+1xlGhglU4KSuOy1LARAl+2j7nrAAA=
Subject key identifier: 7F:E7:17:49:4A:A7:02:C6:62:97:F7:F2:73:47:A3:CF:A7:E8:22:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3B7FFAD8A611EF9110A79D762E951A.roa
Signing time: Wed 22 Jan 2025 09:49:34 +0000
ROA not before: Wed 22 Jan 2025 09:49:30 +0000
ROA not after: Tue 04 Feb 2025 09:49:30 +0000
asID: 137899
IP address blocks: 154.201.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81562 (0x13e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:49:30 2025 GMT
Not After : Feb 4 09:49:30 2025 GMT
Subject: CN=6790bf2e-67e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:13:11:f7:64:2e:de:f8:87:04:5b:53:ac:
88:a9:a8:5c:74:55:d7:94:ed:d5:9b:c9:ed:b5:e2:
b6:65:c1:1d:57:14:be:22:16:6e:a5:f2:b4:d6:08:
51:b7:36:55:32:20:58:d0:66:da:08:d8:73:5b:9f:
f1:b0:9e:ff:02:41:e5:e9:86:7e:3c:51:41:d5:03:
3f:b7:7f:2b:da:2e:c7:e7:0f:b3:b0:72:c1:01:ec:
95:3f:9f:41:a7:b2:25:2f:ba:be:d9:09:b9:da:d8:
be:d8:7c:85:75:a4:97:f4:7d:0c:61:f1:3c:1c:cb:
38:df:6e:1e:7b:a0:ab:df:10:22:99:a8:ef:3e:f9:
02:0e:53:f1:48:db:d3:df:52:f2:a4:87:f1:7a:ad:
f7:59:f5:a3:b3:91:76:80:d3:6c:bf:48:fc:ed:eb:
72:57:62:0b:c5:bf:f1:fe:71:a2:e8:71:5a:2d:09:
98:c4:d7:bc:6c:35:96:30:2e:32:91:7d:db:e6:dd:
d1:12:b1:b4:27:a7:ed:d0:20:dc:63:f3:85:bf:fb:
60:01:79:a6:4c:c8:d2:87:35:38:fc:7c:6b:18:fb:
2a:b1:d5:ee:7e:0e:7c:8b:db:71:d1:d5:f2:df:c6:
9a:7b:b8:b6:06:6d:3d:50:57:25:bd:97:8e:6e:f4:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:17:49:4A:A7:02:C6:62:97:F7:F2:73:47:A3:CF:A7:E8:22:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3B7FFAD8A611EF9110A79D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/21
Signature Algorithm: sha256WithRSAEncryption
14:51:90:64:e6:8e:f9:65:f9:30:66:48:57:61:dc:e4:99:f2:
2e:14:63:65:00:1d:c8:5d:c7:b7:39:0d:1a:36:56:95:99:a5:
8c:a5:c7:8f:0c:f7:9f:79:8b:ee:47:63:f5:42:18:97:98:81:
a5:45:32:f1:33:62:d0:f5:97:25:a7:c1:aa:57:5b:5d:84:d8:
2d:c7:1f:05:22:fd:e5:76:65:8b:ad:41:77:37:a0:97:f3:72:
65:40:e0:15:80:a3:57:b9:a8:0f:8e:98:11:e5:e3:b5:92:89:
d5:80:d6:e2:cf:3e:3f:fa:eb:a0:6b:aa:a4:70:9d:34:b8:7a:
73:22:02:20:7a:45:09:8c:14:9c:9a:ac:e5:54:48:ac:6a:23:
e7:9f:56:4f:ef:14:43:ae:66:2b:39:6e:bb:83:14:7a:5d:44:
e0:c6:c8:fe:96:95:b3:48:65:22:47:53:73:43:95:ae:ee:db:
b4:6d:16:73:8d:bf:96:f0:44:0a:a0:e8:ca:ef:ea:ab:30:cd:
51:02:c1:5f:87:80:3c:f6:71:45:63:32:e6:68:4c:61:0a:f9:
48:f9:6a:1e:ab:ed:7b:c3:52:24:35:33:f8:68:93:09:53:35:
7e:95:ea:f3:32:02:bb:10:10:45:45:89:97:0e:75:38:56:d4:
40:c2:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:40:08 2025 by rpki-client