Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC61846CAD211EF9A0FBD4E762E951A.roa
File: 4CC61846CAD211EF9A0FBD4E762E951A.roa (raw, json)
Hash identifier: lhKbOf1dTZGvDkcM3NI5wBKe49idCLvJbSFu/0+DCXY=
Subject key identifier: B4:2F:21:E6:B5:E2:41:1A:5C:D3:BE:3B:F5:F2:57:4E:80:32:F6:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01351D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC61846CAD211EF9A0FBD4E762E951A.roa
Signing time: Sat 04 Jan 2025 19:30:05 +0000
ROA not before: Sun 05 Jan 2025 19:30:01 +0000
ROA not after: Sun 09 Feb 2025 19:30:01 +0000
asID: 203020
IP address blocks: 154.217.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79133 (0x1351d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:30:01 2025 GMT
Not After : Feb 9 19:30:01 2025 GMT
Subject: CN=67798c3d-ceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:8a:a0:98:d6:19:4d:ac:28:28:a0:6a:bc:
24:7b:9f:b1:37:17:dc:33:e9:23:2b:b2:26:8b:41:
24:e1:ff:82:1b:12:0b:18:b7:ca:90:f9:fe:bd:22:
c2:ce:31:2c:f6:6c:ff:94:b5:34:30:5a:2e:a7:a6:
e2:f4:11:19:12:63:64:e9:00:37:95:d0:68:a0:70:
69:a6:2e:7f:26:f2:6d:06:a1:77:3c:ab:c9:7a:2d:
8a:21:5e:99:ca:29:82:80:07:b6:c9:83:49:d3:12:
bc:8d:ec:df:27:a9:b1:00:5d:44:bd:d9:a6:38:dd:
94:64:03:08:1e:1d:7b:e9:8c:77:2a:98:19:9f:c4:
18:69:9c:ea:14:17:af:1f:64:ca:f9:4d:0c:17:5e:
a2:6d:a4:ea:9c:06:02:c7:cd:01:7b:f5:4a:21:e1:
34:d7:b6:af:e2:f9:59:53:39:ca:50:2e:79:3c:53:
03:bb:f8:97:3d:09:69:45:b6:67:8a:f9:df:3f:9e:
98:48:c8:12:39:ae:74:a3:d1:a8:13:8d:da:54:a1:
7e:fe:39:15:54:cb:d3:8b:72:1b:ed:45:b9:7a:34:
d4:fb:ad:71:c4:bf:4a:d6:f0:27:1b:99:b8:0f:bc:
0b:69:a3:0f:e4:a3:c3:24:7f:f9:c6:00:d3:0e:23:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:21:E6:B5:E2:41:1A:5C:D3:BE:3B:F5:F2:57:4E:80:32:F6:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CC61846CAD211EF9A0FBD4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.224.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e9:aa:8a:f7:eb:a4:af:47:20:0a:45:03:58:06:90:24:5a:
38:eb:e0:f5:0d:38:dd:54:3b:a8:87:26:aa:20:43:b1:28:c9:
7d:c3:e2:ac:d6:2e:be:1e:dc:a7:23:d7:16:02:85:6a:00:00:
91:2e:aa:7e:e0:09:6b:68:92:fd:bd:d9:1e:68:37:62:32:9e:
94:9c:e3:5d:89:23:73:00:c9:5e:b2:0d:74:73:37:92:cb:79:
5f:3c:36:39:0d:59:e3:d5:f3:05:2f:7d:0c:80:77:69:f9:e2:
cc:13:9c:74:87:bd:ab:d2:94:99:73:ee:33:42:61:cb:c6:01:
37:da:a1:e3:17:07:fe:f7:a7:3b:83:6e:00:35:e6:18:8b:08:
7e:b6:05:84:24:c1:b0:a6:db:97:bc:45:b8:a1:64:6f:e6:63:
23:21:f2:1a:46:4b:59:95:0d:c4:1c:32:a3:48:4d:35:ab:d7:
a1:cc:ad:d2:8f:ec:b5:2d:41:13:29:6d:a7:fa:79:82:c1:96:
7a:b9:fd:ec:df:03:32:53:92:b8:d7:64:05:c1:ff:f5:4d:d4:
fe:f3:84:92:09:76:8e:ad:8a:33:11:33:d6:ad:9e:83:66:89:
43:de:7b:2c:52:15:7f:47:d7:e9:75:f6:02:29:49:b0:fc:42:
4f:cb:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:52:27 2025 by rpki-client