Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4294F1D6DB2A11EFBF2FEA97762E951A.roa
File: 4294F1D6DB2A11EFBF2FEA97762E951A.roa (raw, json)
Hash identifier: T/pdR0jNjG/aeUDm1GtJjH00lshM7aFanwOCUoHKq6s=
Subject key identifier: 6B:7D:A8:20:BB:F6:1F:CE:49:5E:6F:F8:55:74:4A:A5:66:DB:67:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4294F1D6DB2A11EFBF2FEA97762E951A.roa
Signing time: Sat 25 Jan 2025 14:40:03 +0000
ROA not before: Sat 25 Jan 2025 14:39:59 +0000
ROA not after: Thu 27 Feb 2025 14:39:59 +0000
asID: 395793
IP address blocks: 154.194.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84450 (0x149e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:39:59 2025 GMT
Not After : Feb 27 14:39:59 2025 GMT
Subject: CN=6794f7c2-9ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:2d:a0:4c:27:43:e3:e4:8a:04:b7:a9:ff:
80:9d:cd:92:e2:e1:8d:c3:7c:d5:23:2f:9e:a6:c0:
47:e4:ec:b7:0a:d1:61:26:37:f4:96:99:46:40:b1:
b6:45:21:c3:94:99:55:1b:79:e3:b6:c5:1c:2b:22:
0e:7e:35:3e:86:23:04:10:d9:91:0b:1f:86:aa:22:
0e:67:c4:e7:8a:e4:55:62:f7:cd:cb:ff:69:77:4b:
04:e8:6e:72:10:12:ca:6b:a1:a3:3c:bf:d7:8e:3f:
ef:df:d0:49:11:ed:67:61:ac:f7:b5:3d:f2:50:ce:
ad:25:df:d4:39:06:2e:b4:55:fe:f5:5c:7a:e2:22:
81:58:0d:b6:40:c8:dc:6e:e9:03:e3:ee:0e:c3:af:
b2:5a:71:87:6d:56:1b:1a:cd:47:6b:dd:8d:96:1c:
cf:18:0d:30:72:69:ac:25:30:26:a3:f6:af:86:ef:
e2:8b:8e:94:8a:dc:e2:f7:10:9c:09:49:52:68:51:
8b:75:75:14:07:93:cb:5b:2a:0f:e8:68:ee:a9:8e:
f5:b9:cb:2b:3e:49:8b:68:f3:a2:f8:6f:94:7d:24:
99:46:cc:6f:86:ca:83:a6:08:07:dc:3a:d6:04:10:
f9:60:b3:8e:03:58:23:19:80:7e:aa:3e:6f:9e:7e:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7D:A8:20:BB:F6:1F:CE:49:5E:6F:F8:55:74:4A:A5:66:DB:67:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4294F1D6DB2A11EFBF2FEA97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.212.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:08:48:df:bc:4f:dc:8f:8f:f0:22:08:77:7a:64:a7:46:80:
23:ae:7d:b0:56:3f:00:66:59:26:5b:18:26:26:80:8b:06:32:
21:64:09:4c:da:38:4f:ee:da:72:0a:94:09:c2:c3:ce:4b:ee:
13:ec:3f:cd:90:f8:d5:9c:5b:e0:d0:9f:d4:49:04:f1:6b:f8:
9c:a7:fe:46:d3:88:dc:0c:b8:2b:25:76:2d:00:44:50:5e:7e:
03:0f:78:de:10:00:41:ce:c9:ee:96:75:4b:b3:e5:60:57:e7:
c9:36:95:e3:c9:8b:1b:e7:2f:22:b3:14:94:03:c6:d0:d1:46:
7f:09:17:94:db:74:0e:88:e8:d5:15:17:bb:60:b6:c7:ee:b3:
df:8c:c3:69:5b:c9:4b:ee:11:5e:fa:24:9e:aa:3a:aa:b6:c3:
f0:96:af:c7:54:8a:18:f3:b3:04:fe:7e:fc:a3:3f:82:69:05:
1c:c6:d8:97:e6:7c:81:e8:a9:97:51:bc:6f:a8:4e:eb:3d:f7:
c8:11:da:df:5d:15:ab:4a:cb:48:ac:0e:bc:4a:4b:2b:5f:04:
e6:f8:ad:9a:ad:0c:14:35:89:27:d9:d3:1e:44:c7:aa:b7:af:
18:12:0e:21:65:7c:eb:e7:28:c0:2a:3d:a6:7f:17:72:b0:37:
de:ae:d1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:45 2025 by rpki-client