Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36371DCACAD511EFA312EA5F762E951A.roa
File: 36371DCACAD511EFA312EA5F762E951A.roa (raw, json)
Hash identifier: +pGRZFEVDl46Z8OOL3cvG2xvylxQMpHyYo0ME/qj3MU=
Subject key identifier: D4:D1:14:2B:A3:70:49:1E:8F:2F:8C:62:C8:4A:3F:9D:F3:08:95:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01352F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36371DCACAD511EFA312EA5F762E951A.roa
Signing time: Sat 04 Jan 2025 19:50:56 +0000
ROA not before: Sun 05 Jan 2025 19:50:52 +0000
ROA not after: Sat 08 Feb 2025 19:50:52 +0000
asID: 203020
IP address blocks: 154.217.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79151 (0x1352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:50:52 2025 GMT
Not After : Feb 8 19:50:52 2025 GMT
Subject: CN=67799120-b7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:9b:96:e6:c9:a0:b4:84:d9:50:22:47:b4:
70:f0:76:be:aa:5f:44:8d:9b:5b:b2:8f:09:86:3c:
27:4e:e7:78:28:52:86:76:5d:e5:d4:99:6f:fc:af:
55:62:5f:fe:fa:67:11:b1:da:76:a7:56:c0:df:c8:
64:88:7c:b1:28:bc:44:96:3b:a7:56:21:34:e2:5e:
33:ae:f8:32:13:34:5f:6f:e0:06:ed:c2:11:eb:33:
c2:69:b3:29:dd:5a:e7:80:75:e2:d8:22:df:72:5e:
4e:8b:aa:f8:15:a9:df:ca:97:20:cc:f6:65:68:57:
a6:a9:8c:6d:44:91:0c:9c:b2:32:a8:56:7a:d6:4d:
2e:c1:06:97:87:f2:cf:28:60:1e:bf:6f:df:76:5f:
6f:5d:59:35:7f:49:0d:22:90:4a:10:30:06:53:8f:
dd:1a:1e:67:62:d1:98:d0:2f:8d:6a:2d:a9:15:da:
e6:37:c5:99:7e:5d:86:12:96:ad:eb:24:2b:00:57:
31:78:37:cd:99:bc:d6:72:13:6c:96:43:e0:27:21:
9c:7f:0d:14:01:bf:6a:54:e0:11:43:68:fb:f3:70:
d4:a0:3d:91:b1:d8:26:d6:01:a4:db:e2:94:4f:48:
1c:72:5e:ab:81:2d:9d:7f:af:37:d1:15:62:6a:d2:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:14:2B:A3:70:49:1E:8F:2F:8C:62:C8:4A:3F:9D:F3:08:95:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36371DCACAD511EFA312EA5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.64.0/20
Signature Algorithm: sha256WithRSAEncryption
26:c5:cd:cf:81:95:6a:97:0e:f1:13:1d:f7:14:b3:3f:a1:99:
ea:23:24:b6:df:3a:31:8b:60:d0:cf:3a:b0:ee:d5:ce:8e:ae:
21:24:fa:77:6a:a4:8c:93:6a:42:7e:f0:c7:08:69:c3:cb:ed:
f8:6a:d2:72:18:5b:af:a8:6f:0e:e5:a6:50:92:30:82:09:40:
a8:4f:25:87:4b:09:fb:17:88:c7:6e:dc:91:8c:a3:77:8f:38:
47:ec:0a:72:0a:f3:bb:a8:94:b4:ab:21:ba:82:ad:97:fc:7f:
28:c9:44:c5:45:29:52:0a:c4:83:80:9f:5e:5e:74:d5:cf:f4:
af:5a:06:cf:00:e3:24:0e:56:79:ea:49:3f:1b:99:aa:9d:e0:
8d:36:26:d9:ad:13:da:35:56:97:d3:e9:f7:e5:c8:a4:2d:f4:
27:51:91:b1:b8:9a:9f:d9:bd:e3:f7:34:aa:cb:fb:b4:4b:bf:
b0:85:a2:78:35:ac:5c:59:21:b8:07:93:8b:31:6b:af:dd:1d:
2f:c0:e1:6f:ec:66:c7:09:99:8f:7d:ee:85:1a:ef:cf:1b:64:
1e:3f:17:90:c5:c8:11:c6:1e:c5:90:ad:28:d4:87:89:10:2b:
92:ad:5e:46:04:1e:f8:15:22:52:04:91:e7:07:e3:3f:3a:4e:
3f:76:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:59 2025 by rpki-client