Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4830A64ACC1511EF89E76F54762E951A.roa
File: 4830A64ACC1511EF89E76F54762E951A.roa (raw, json)
Hash identifier: 5FVujDNVdvcO5uN1/m3uw3IViNBtHnLF4HcXiLcJlZY=
Subject key identifier: AC:64:1F:AB:EC:84:CA:5E:AF:8F:7C:34:E0:69:B4:FC:85:65:36:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4830A64ACC1511EF89E76F54762E951A.roa
Signing time: Mon 06 Jan 2025 10:02:05 +0000
ROA not before: Mon 06 Jan 2025 10:02:01 +0000
ROA not after: Thu 06 Feb 2025 10:02:01 +0000
asID: 200373
IP address blocks: 154.213.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79298 (0x135c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 10:02:01 2025 GMT
Not After : Feb 6 10:02:01 2025 GMT
Subject: CN=677baa1d-7315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:e7:78:4e:e3:8d:5d:11:92:92:de:56:95:
29:39:93:93:5d:a3:92:1b:c5:69:d9:0a:09:03:0d:
6a:13:59:f9:89:74:80:0c:ca:6c:51:c7:a5:2d:4f:
0f:e2:8f:06:fa:e7:f1:f3:a7:50:95:1f:71:7e:65:
42:15:0c:71:4c:34:d5:e4:c9:77:de:e0:bc:eb:b0:
13:98:90:5c:c4:59:a5:96:54:c3:b0:ab:4e:7b:e1:
af:1a:66:33:25:c8:dc:87:2d:51:b8:b1:c1:65:de:
bd:23:9b:0a:9a:c0:2f:f8:06:00:c5:c4:03:3d:ff:
a1:a3:8d:58:06:7c:72:f5:5b:f1:cd:41:c3:51:9e:
91:d7:85:08:c6:24:b3:6f:b0:ca:22:fa:72:00:4e:
b5:e6:38:f9:04:b7:07:76:f0:55:53:f0:83:d0:32:
71:6d:b6:c6:a3:11:a6:b6:07:23:d6:85:8a:a6:bd:
39:7f:73:44:d1:fc:b7:0b:04:26:71:e3:f6:9f:bd:
08:38:11:4f:73:b0:55:c8:47:75:3e:34:a8:b6:66:
fc:15:f8:84:b3:33:01:51:a9:45:1d:69:0f:ee:1f:
bc:f0:25:5a:ea:2b:84:8e:a1:2f:68:13:7a:ce:21:
b9:5d:a8:81:81:fe:43:f4:8b:eb:06:23:30:9d:99:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:1F:AB:EC:84:CA:5E:AF:8F:7C:34:E0:69:B4:FC:85:65:36:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4830A64ACC1511EF89E76F54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.202.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:f8:b5:05:e9:36:2c:2d:08:1e:fb:49:dd:de:42:8a:10:7d:
18:e5:e4:54:dd:2e:e7:d6:6e:23:df:63:e0:8b:81:7a:ce:48:
0e:56:7b:20:b2:57:91:24:ff:1b:97:e0:8b:e8:a9:26:76:4f:
99:29:49:87:ba:e1:7a:34:6f:ba:60:19:e6:78:73:9a:c1:41:
45:e3:64:0d:fd:ad:d1:17:51:75:d8:09:43:68:d1:8c:60:39:
5f:a5:73:87:8a:40:dd:c2:02:98:e3:7f:f5:15:67:44:db:f4:
bd:03:50:ce:22:d4:c8:61:33:9c:c7:04:ff:dc:5d:18:2f:9f:
6f:6e:42:be:68:99:36:8f:69:bf:10:4d:15:53:7f:a1:5e:0f:
31:7a:3d:c3:0b:2b:dc:b9:5f:3b:8b:9e:91:f5:9d:39:56:1e:
a3:ec:cd:62:4d:83:b0:f1:06:ca:fe:f8:86:55:48:09:8d:a6:
da:5a:5d:75:d6:b9:ff:fa:86:80:18:06:52:97:c1:5d:d4:03:
f2:db:ee:f3:77:f8:aa:3b:b0:96:60:eb:bd:21:0c:90:46:d0:
90:c2:c5:77:c9:b7:4c:df:31:60:e2:44:2d:3e:ea:f8:d7:8e:
59:da:b7:03:1a:18:cc:10:35:f4:33:d5:df:3d:78:d8:b5:fb:
34:94:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:05 2025 by rpki-client