Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C3D3B64CBE711EFAD4E65B5762E951A.roa
File: 4C3D3B64CBE711EFAD4E65B5762E951A.roa (raw, json)
Hash identifier: S2tvccuV/Wn2FZNS63Kz8SrS88JSBvUnNnBu+PQbr9A=
Subject key identifier: 11:D0:18:51:F2:EB:C7:5F:DD:5D:CB:36:85:24:8E:AE:53:0A:1B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C3D3B64CBE711EFAD4E65B5762E951A.roa
Signing time: Mon 06 Jan 2025 04:32:55 +0000
ROA not before: Mon 06 Jan 2025 04:32:51 +0000
ROA not after: Sat 08 Feb 2025 04:32:51 +0000
asID: 203020
IP address blocks: 154.217.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79241 (0x13589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:32:51 2025 GMT
Not After : Feb 8 04:32:51 2025 GMT
Subject: CN=677b5cf7-724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:3e:c4:0c:f1:0f:8a:29:f6:72:13:a8:d0:
39:64:f7:d9:fd:4f:1b:77:6f:24:0e:d2:11:0b:a8:
3f:df:31:c6:c5:8e:80:7e:88:e6:95:de:cd:64:04:
a7:2b:01:d6:60:a5:b5:cf:9e:cc:6a:dc:c1:50:c8:
3f:9e:0c:88:05:bf:1e:89:5c:26:0f:48:17:f3:46:
54:ee:fe:fa:3a:87:66:c8:f8:2e:62:22:39:6c:e9:
9d:73:48:43:17:0c:4b:ca:e7:77:7f:3e:3c:a8:cc:
d2:3e:86:ba:22:24:ea:ca:33:d7:ec:ec:34:49:cf:
65:af:2d:56:b7:57:8f:cc:74:d1:c6:43:dd:ba:ef:
03:ea:f5:29:37:94:c2:82:7c:b9:4b:c1:2d:1e:d4:
f7:49:b8:f2:4e:d8:f2:81:b7:ed:c5:a9:10:84:11:
1f:28:cd:23:86:d0:6b:8c:80:5a:e7:2a:ca:b9:4f:
0f:d0:b4:7e:da:32:c4:c6:49:7b:b1:48:04:fb:8f:
ed:4b:f0:4a:47:94:73:db:cb:66:f8:a1:1c:a1:eb:
a2:ec:f8:3c:d9:3f:ab:eb:45:11:cc:c5:0d:3f:78:
84:2f:a7:10:e6:dc:f0:87:45:4f:d7:90:32:d9:cd:
8e:de:c6:76:03:0a:d5:2c:22:34:96:0c:01:79:0e:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:18:51:F2:EB:C7:5F:DD:5D:CB:36:85:24:8E:AE:53:0A:1B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C3D3B64CBE711EFAD4E65B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.140.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:63:a6:30:f4:4d:ed:20:4d:bd:e0:cd:05:f8:ab:44:92:e0:
70:f5:43:fd:1c:6a:eb:19:1a:14:e8:4b:a5:08:df:06:9c:26:
e9:93:52:b6:e7:d8:81:49:60:06:11:af:41:f8:13:92:11:7e:
32:04:ee:c4:a7:cf:42:09:55:cf:59:43:f5:10:a8:0e:3f:df:
55:bf:c5:6b:47:8c:dc:59:9e:a7:31:a8:db:64:43:cd:ef:44:
d5:8a:1d:e6:56:66:13:24:17:22:f4:81:3e:9c:15:66:da:f5:
23:27:31:e6:eb:f9:9b:32:30:9c:f1:d7:86:76:4c:ea:c8:8a:
02:6d:6e:5a:f3:e2:67:1e:24:a9:b3:ee:b7:4e:7b:99:1a:90:
58:8b:de:28:fe:70:a7:1c:60:d1:68:3f:42:2b:86:d9:0e:15:
ce:4b:7e:ba:23:90:43:f7:a7:84:60:0f:e2:4f:68:14:fc:a7:
66:0c:03:e6:e4:e0:7a:56:2a:ad:91:cc:82:2b:6e:3e:07:22:
69:a8:1c:5c:61:e5:07:16:09:3b:33:cc:cc:5c:50:79:92:cb:
1f:7e:b3:10:a0:c5:63:06:99:9c:67:1f:7c:e2:07:73:81:6f:
cb:da:6e:fc:89:bc:4e:db:56:ca:49:a2:e9:5a:15:3d:99:47:
2f:be:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:53 2025 by rpki-client