Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B70834EBEB911EFA880918C762E951A.roa
File: 3B70834EBEB911EFA880918C762E951A.roa (raw, json)
Hash identifier: ZG/YwF843Le7cE+6SCybitGFXO81AF27dMGD+ZO7mbQ=
Subject key identifier: 27:6C:4D:B0:16:0A:CF:6C:F1:12:23:9C:9A:AB:F1:05:00:E3:3E:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B70834EBEB911EFA880918C762E951A.roa
Signing time: Fri 20 Dec 2024 10:00:25 +0000
ROA not before: Fri 20 Dec 2024 10:00:21 +0000
ROA not after: Sun 02 Feb 2025 10:00:21 +0000
asID: 202656
IP address blocks: 154.222.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72930 (0x11ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 10:00:21 2024 GMT
Not After : Feb 2 10:00:21 2025 GMT
Subject: CN=67654039-1fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:89:a0:35:9d:d3:10:4d:91:fc:8c:d7:24:
ff:18:db:10:ce:02:70:23:2c:d2:3e:d9:8a:bc:75:
6a:eb:87:70:a9:d9:18:22:8d:f4:e0:47:fc:33:e6:
5b:75:f4:25:0c:58:fb:fe:f7:d9:70:6b:49:cf:96:
2b:8c:c1:be:a5:86:e2:30:f2:4e:cf:2d:ee:6e:9b:
71:b5:29:1b:34:53:7e:f8:ad:2d:18:87:17:c1:cc:
84:f9:16:93:05:d6:ec:ea:cb:6c:40:49:41:14:e6:
91:0c:f2:02:85:29:18:b5:f6:5a:c9:bd:2f:02:1b:
40:ed:b1:de:46:e9:d1:42:75:3d:4c:8e:09:df:d1:
71:c3:0c:71:1a:f7:c4:82:a7:5b:46:ff:7a:62:6d:
15:af:82:68:2d:aa:e7:43:2d:05:7a:d9:3c:95:2f:
27:6e:0a:de:5b:64:2c:f0:c9:48:33:ab:61:de:09:
c2:ae:6e:94:43:d8:f4:be:25:e7:12:15:b1:65:83:
48:44:0a:40:78:7c:bc:4c:5e:bb:24:8d:13:62:d3:
7b:b6:57:93:0b:1d:56:68:77:94:aa:fa:dd:01:fa:
83:46:ef:0a:3f:0a:09:31:9b:2e:7e:c0:38:a5:63:
ca:cb:3a:8e:25:bb:c1:3e:37:df:cf:93:f6:62:e3:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:4D:B0:16:0A:CF:6C:F1:12:23:9C:9A:AB:F1:05:00:E3:3E:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B70834EBEB911EFA880918C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.202.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ba:fb:ba:fb:7d:58:f8:89:ba:3b:2e:70:20:49:1c:cc:12:
93:47:2a:c2:f2:5f:4b:3e:8e:11:ce:5f:15:b3:ae:19:5c:10:
f9:73:14:5b:71:20:5f:94:8a:54:ee:ff:a6:e8:44:f7:59:e1:
8b:cd:e4:dd:24:6d:1a:14:5b:35:ed:02:97:58:d7:e9:41:54:
3c:29:9f:21:de:1f:2a:a6:0e:44:e9:3b:49:79:98:af:72:b9:
e8:f5:c0:65:ac:37:b9:55:83:9f:7a:4d:e3:7f:dd:77:90:e9:
e9:2a:40:61:64:32:eb:ea:46:f0:05:64:0a:8d:4f:8f:bb:cd:
46:e6:cc:62:5d:df:54:1f:d2:1c:6c:cf:41:ea:cd:10:46:e6:
10:19:4f:12:ba:62:e2:51:5d:2f:64:fd:b8:6a:88:50:8e:34:
ee:fc:75:e9:4e:51:9e:aa:0e:4e:7c:17:97:85:98:50:62:25:
23:f0:78:b3:8a:c9:6b:92:e3:64:82:dc:65:d8:c2:7b:6f:32:
48:fe:8b:de:31:7c:69:b6:42:83:32:e2:cd:9d:d1:a4:a7:52:
b2:48:e9:b7:1a:38:06:91:4d:b7:07:3c:70:69:26:49:e8:10:
1b:30:d4:1e:b3:50:82:70:1c:75:d5:a0:b2:1d:4a:a6:df:35:
d2:1f:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:14 2025 by rpki-client