Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FEAD5A8DB2B11EFBB74D29E762E951A.roa
File: 3FEAD5A8DB2B11EFBB74D29E762E951A.roa (raw, json)
Hash identifier: /oI72W4fxZSHLYXBDr0qvc4wFWZ7tAUtm36rbGsXnY4=
Subject key identifier: B5:52:33:8D:C1:C6:8D:7D:FB:9A:CA:04:DB:86:44:09:7D:26:7B:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FEAD5A8DB2B11EFBB74D29E762E951A.roa
Signing time: Sat 25 Jan 2025 14:47:07 +0000
ROA not before: Sat 25 Jan 2025 14:47:04 +0000
ROA not after: Thu 27 Feb 2025 14:47:04 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84456 (0x149e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:47:04 2025 GMT
Not After : Feb 27 14:47:04 2025 GMT
Subject: CN=6794f96b-917d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:b2:c4:43:55:24:eb:34:0c:5f:4a:97:8a:
42:53:de:60:44:73:70:38:db:00:58:19:74:36:3c:
b0:68:e5:21:93:5f:b7:1d:28:3e:08:40:82:e1:98:
f1:f6:cf:e5:22:6f:12:77:a4:28:a7:fd:28:29:2c:
2d:bf:cf:04:fb:4e:90:f9:eb:47:ed:b9:57:5f:a0:
96:5b:b5:02:50:42:7d:c7:7a:fa:b2:5e:13:16:30:
6b:d5:86:06:d0:4e:a5:aa:82:26:f7:06:ef:55:f8:
a8:fd:9c:e2:6e:84:8a:4e:39:38:c7:4c:2c:15:d5:
bf:c3:aa:e1:e4:ee:0e:8f:98:8e:f8:22:d0:d1:54:
b7:ab:67:6b:86:e1:e0:7f:a3:8a:12:34:b8:aa:ed:
6b:c1:3d:85:6d:b1:a8:58:da:22:7f:29:d2:a9:fa:
4c:22:68:94:e3:69:48:fe:8a:a7:b4:2d:0c:ca:3f:
42:b4:33:56:18:12:99:72:57:3c:1a:95:a8:fd:f1:
03:0d:89:c8:df:2c:d4:65:fb:2a:3c:98:84:17:6c:
c5:16:cd:93:0c:95:ba:95:bf:a4:cf:09:0a:c7:d7:
0f:c3:47:92:04:45:8d:e2:15:a5:f6:3c:37:5a:85:
ba:31:e8:21:6c:47:c4:65:ec:e1:b6:1f:52:60:82:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:33:8D:C1:C6:8D:7D:FB:9A:CA:04:DB:86:44:09:7D:26:7B:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FEAD5A8DB2B11EFBB74D29E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0/23
Signature Algorithm: sha256WithRSAEncryption
75:0e:43:ca:21:8a:00:3e:54:e9:53:4c:4f:70:66:28:ea:40:
a6:c7:21:28:0f:7c:77:0c:2c:e5:5c:16:b9:88:4d:b6:83:0e:
a9:e5:61:bb:3b:13:bd:ed:ea:b3:70:78:f7:b6:cf:5d:8c:8a:
72:e8:30:fb:d1:eb:0f:41:b0:1e:6f:3d:fb:0b:da:85:75:a0:
91:af:00:7a:00:47:fd:a0:b1:6a:f7:8e:c1:b5:63:ca:e1:2e:
da:7f:4f:24:42:5a:01:48:9d:f3:5c:ff:35:38:78:09:d0:54:
5c:76:aa:77:38:68:18:17:ff:b9:f1:bd:d3:ba:e9:fd:5f:78:
d9:fa:8d:25:6a:ef:3d:ff:23:28:95:5c:dd:6f:2e:9e:45:ab:
af:c5:1d:82:9e:43:c1:5c:f9:0e:69:44:b6:67:01:c7:13:7f:
eb:1e:5e:c0:56:b3:fe:7e:8e:7b:e7:11:5d:4b:b3:91:2b:83:
af:65:75:69:6f:2d:61:a8:bb:95:56:c7:11:b2:fc:dc:87:dc:
13:77:4f:a5:c1:6b:2d:8e:03:08:b4:bb:75:54:c0:ca:c6:1f:
6b:70:e5:4b:42:2b:19:a2:8b:fd:df:5e:8d:42:5e:24:b4:82:
f0:51:f6:52:5c:55:0d:20:88:86:5d:68:67:00:44:8c:88:e6:
53:d2:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:43 2025 by rpki-client