Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C9636CCC911EFB8A16150762E951A.roa
File: 342C9636CCC911EFB8A16150762E951A.roa (raw, json)
Hash identifier: h28mxd9ApTSASsmvVveQdZjyZHsGDMSM3s8sr06SKd4=
Subject key identifier: 70:F2:14:54:47:AB:C1:99:C5:A4:FB:39:D9:48:F3:20:20:B3:9B:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01364F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C9636CCC911EFB8A16150762E951A.roa
Signing time: Tue 07 Jan 2025 07:30:01 +0000
ROA not before: Tue 07 Jan 2025 07:29:57 +0000
ROA not after: Thu 13 Feb 2025 07:29:57 +0000
asID: 203020
IP address blocks: 154.207.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79439 (0x1364f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:29:57 2025 GMT
Not After : Feb 13 07:29:57 2025 GMT
Subject: CN=677cd7f9-8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:c5:bb:17:29:c8:a2:7a:0d:95:25:50:ed:
cc:3a:d7:77:12:02:84:d9:35:fc:a2:1e:55:c6:4b:
99:a9:8e:b6:4f:a1:ee:17:02:22:8a:1c:3b:78:28:
e9:25:e0:9a:1f:ca:41:70:c4:73:be:57:40:eb:3a:
62:ef:34:d9:0d:5a:56:93:6a:d1:fa:3e:5f:93:cb:
36:26:58:6b:27:ec:4e:6f:4b:47:5a:8f:75:5a:93:
39:57:2c:a7:d1:a8:a0:f5:98:40:25:5c:7c:c8:a8:
90:c0:4e:5d:57:78:b5:d5:3c:c0:9e:8e:5a:c0:aa:
8d:f9:7b:33:f9:67:1d:00:35:1a:f5:68:75:31:a5:
75:4e:84:09:8e:85:92:b8:93:eb:87:b9:c0:58:36:
51:cc:29:f8:30:45:e6:b4:6f:47:7f:e2:09:8c:f9:
77:4f:d1:06:13:b1:81:f3:ad:56:c5:31:b1:a6:0e:
8e:c5:80:a0:48:36:d5:f0:ba:ba:b4:93:ae:06:f2:
a6:6e:38:da:c3:ff:ef:22:9a:7d:ac:95:77:72:03:
97:bc:88:5a:dc:c7:f5:b3:f3:8c:c1:b9:57:ba:b4:
e7:94:0f:d1:67:bb:b0:01:b8:25:80:42:df:29:f2:
92:0e:59:a0:49:70:3f:37:d0:b4:30:0d:bd:d0:99:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:14:54:47:AB:C1:99:C5:A4:FB:39:D9:48:F3:20:20:B3:9B:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342C9636CCC911EFB8A16150762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:5b:3c:31:3b:de:8f:39:29:1e:55:72:d2:34:f9:ac:8c:71:
6a:05:6c:0f:68:d7:70:9c:ce:ee:55:ab:03:f1:4a:25:85:5f:
50:da:21:17:98:2f:97:f6:29:ea:4f:f7:df:64:8c:2c:0b:91:
55:d4:30:88:4c:f8:f1:5b:3c:6f:89:93:96:43:dd:19:47:49:
60:2f:3a:78:f9:31:8f:f2:23:d4:d5:a2:58:9c:11:57:20:da:
15:60:c7:77:62:ee:44:4d:c5:10:70:e7:c1:38:42:1d:cd:53:
88:d3:e1:38:ab:b2:55:82:81:2f:8f:50:f7:6b:e9:c8:08:5b:
84:a5:ba:e3:a0:9e:99:c0:6f:e2:e1:44:8c:f6:fa:fe:f7:59:
1e:8d:27:c3:72:25:55:cc:ba:a8:39:a7:1b:b5:ba:ea:cf:c5:
88:06:15:e8:c7:b0:ea:65:99:08:fe:cb:79:6c:8c:fe:20:84:
de:3a:86:53:dc:5a:4f:4e:fb:2e:c5:29:85:75:6f:7e:49:08:
23:2a:cb:96:16:99:dc:bc:74:b4:c2:d3:c8:06:64:53:d6:0b:
06:b4:d9:37:ab:03:fe:73:50:92:e9:8b:ab:ec:7a:e1:d3:6d:
f6:7c:dc:63:47:69:d4:d6:5e:b3:54:da:8f:58:81:b0:f8:e1:
b0:21:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:47 2025 by rpki-client