Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B18FFDAD3D511EF9F212E94762E951A.roa
File: 3B18FFDAD3D511EF9F212E94762E951A.roa (raw, json)
Hash identifier: D3DkoRETRU7+ljMnWhkA3JyA/tKmUvJ1TtdSMaBZ9A0=
Subject key identifier: 09:B0:F1:B7:9A:8F:5D:EB:7C:1E:D5:F1:3B:D2:B1:02:4E:41:AD:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B18FFDAD3D511EF9F212E94762E951A.roa
Signing time: Thu 16 Jan 2025 06:43:44 +0000
ROA not before: Thu 16 Jan 2025 06:43:41 +0000
ROA not after: Wed 19 Feb 2025 06:43:41 +0000
asID: 7018
IP address blocks: 154.200.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80828 (0x13bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:43:41 2025 GMT
Not After : Feb 19 06:43:41 2025 GMT
Subject: CN=6788aaa0-0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:93:83:57:b9:e6:90:42:ac:f4:5a:9f:de:
81:86:bb:e0:2b:24:1c:50:d2:a1:4b:71:71:ae:c3:
64:b1:f7:0d:fd:71:1b:5d:54:4e:ed:53:e3:62:9f:
0a:35:39:62:37:a2:02:3d:95:2e:c8:3f:eb:05:0d:
1b:55:14:dc:e0:71:56:5c:e0:e0:04:d0:ec:d7:87:
e9:0f:7f:46:ec:e6:0d:c4:0f:b6:3f:c9:4e:1f:29:
22:a8:39:64:2b:0c:e2:b0:f0:3e:58:76:37:8c:6e:
c2:1f:c4:ef:df:d2:2b:0e:3c:2f:85:09:4c:d7:0c:
63:4a:00:c2:65:70:1c:fa:36:1d:c9:8d:5a:4e:22:
ce:66:4e:cd:02:ab:cd:d9:d2:7d:e8:f7:b6:5f:ed:
9f:23:15:a8:49:f8:f8:01:3c:0e:2c:50:76:9d:4e:
66:e2:f3:98:f6:4e:c8:e4:f2:c8:31:90:f4:3a:de:
58:44:3c:ba:34:f1:2f:da:ce:f5:b9:f6:48:f2:6c:
ee:8b:2a:74:97:45:d4:cb:71:0a:ee:18:7c:59:1b:
02:6f:d7:e0:fb:0d:12:60:0a:f6:f4:07:0c:27:94:
d4:10:56:a1:29:b5:db:9b:a9:08:3c:b6:ea:51:a3:
e9:f3:c7:41:e3:00:67:b4:33:89:61:3d:60:ae:f2:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:F1:B7:9A:8F:5D:EB:7C:1E:D5:F1:3B:D2:B1:02:4E:41:AD:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B18FFDAD3D511EF9F212E94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.164.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:33:b4:25:53:68:aa:87:47:06:e2:44:49:cb:48:0f:b1:65:
3e:a5:52:15:b2:00:b0:95:7c:34:f8:c4:6d:29:09:ca:dc:a9:
2e:a5:cc:e2:cf:e0:ee:02:ef:6c:f7:5c:6a:93:36:1d:5e:cf:
ab:43:28:68:41:2d:6b:22:ee:fd:20:a7:aa:30:b7:8b:dd:ae:
f8:71:63:4b:0d:c6:d8:fe:08:d6:78:0b:a6:ae:03:79:d9:2f:
9e:cc:fa:1f:b9:bc:b4:7e:e3:4e:13:d3:88:77:8f:39:f0:4a:
ec:b7:d1:78:fb:dd:c7:12:10:2e:dd:45:d8:79:26:16:59:35:
d3:e8:15:8d:7f:d8:b1:f7:b4:fc:b5:11:72:1a:e5:93:4e:60:
3d:34:7b:12:39:81:fd:21:5d:35:0b:b6:63:3e:14:f7:34:b9:
4f:0c:b6:df:00:82:29:a3:4d:1d:4b:17:2d:fb:12:9f:6c:d7:
06:fa:8b:c7:07:ca:42:6e:06:56:a8:71:73:08:22:98:a8:2b:
f4:21:07:ca:30:06:8d:35:fc:7e:c1:00:9b:5b:47:80:6e:15:
ba:14:54:f3:06:1e:e4:44:23:fb:33:38:f3:ac:d4:74:97:f7:
9e:bc:f5:7d:d0:69:68:b9:a9:58:92:49:43:5d:d7:c3:28:00:
dc:bc:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:33:53 2025 by rpki-client