Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CED8D4ECABA11EFBB4B1AB6762E951A.roa
File: 4CED8D4ECABA11EFBB4B1AB6762E951A.roa (raw, json)
Hash identifier: KvoM9Bf1PF7c2Eq1qQKtQhMrgzo/XFl+8/wOt0Mzb5U=
Subject key identifier: D7:C4:C8:B4:C6:8A:8E:9E:0D:04:EF:BB:35:3E:0B:DC:C9:89:F4:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CED8D4ECABA11EFBB4B1AB6762E951A.roa
Signing time: Sat 04 Jan 2025 16:38:17 +0000
ROA not before: Sun 05 Jan 2025 16:38:13 +0000
ROA not after: Tue 04 Feb 2025 16:38:13 +0000
asID: 5065
IP address blocks: 154.84.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79065 (0x134d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 16:38:13 2025 GMT
Not After : Feb 4 16:38:13 2025 GMT
Subject: CN=677963f9-90b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:b5:dc:ea:1c:d5:01:f3:29:e7:18:5c:56:
d8:3b:79:47:b2:f5:1f:30:51:d5:8e:ab:63:e0:e8:
84:ec:bd:92:83:21:01:c0:e7:0a:10:18:bb:3c:e0:
dd:fd:2f:a1:00:be:25:e8:9a:11:f0:5a:7a:ed:05:
0a:21:2f:e1:c4:e8:3c:7a:cf:7a:f4:eb:58:c3:c7:
38:7b:5d:b8:91:f5:d7:02:f2:5a:70:17:1c:07:2b:
c5:49:d3:3b:d7:53:cd:5c:e2:27:eb:0a:49:78:c3:
cf:97:22:64:e3:d5:6a:e8:6e:14:f8:d1:7b:dc:a8:
ad:b1:47:7c:21:d2:d8:aa:20:4b:55:8a:28:f0:c3:
ae:3a:27:3a:13:54:86:7c:15:65:75:c5:b1:63:51:
92:64:72:06:2e:3c:54:0a:51:44:e8:67:ac:cb:0b:
2e:a6:eb:6d:99:82:a8:87:8d:ae:46:83:44:81:70:
ae:3b:5a:19:07:26:6b:eb:83:d9:44:3b:b5:f6:58:
a1:02:14:e1:f8:6d:88:64:66:f7:72:c4:1a:04:99:
f2:e8:92:8e:28:33:ab:10:e1:42:52:ba:3a:38:1a:
ca:06:e5:2e:de:d2:df:1c:e6:3a:74:a1:d1:59:30:
84:5a:6d:98:33:61:d1:2f:b5:24:e7:85:97:2e:5d:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:C8:B4:C6:8A:8E:9E:0D:04:EF:BB:35:3E:0B:DC:C9:89:F4:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CED8D4ECABA11EFBB4B1AB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b8:c8:89:5b:24:04:0e:71:78:ac:2a:3d:4d:f9:fe:56:5e:
9b:ac:a8:3f:2b:a7:a8:eb:82:8c:a7:bd:b2:0d:4a:1c:d7:3a:
c6:5f:c4:31:0d:73:a0:c9:6c:8e:21:75:41:1c:49:1f:59:d6:
6c:89:1e:2f:ff:4a:e6:41:a6:4e:b8:5c:d1:74:d0:59:d0:b2:
60:f9:2f:33:9e:ed:9f:bb:24:90:b6:93:74:91:5e:e8:50:64:
71:67:ed:76:a9:63:6d:48:d6:aa:53:1e:8d:3c:16:f5:3b:4e:
53:7b:3f:2d:e9:92:da:8b:81:95:d0:8a:17:5c:81:93:6f:1f:
aa:6b:30:9d:b6:24:0e:67:15:9e:08:f4:03:bd:b5:82:ec:12:
a1:a4:d3:d4:a2:50:c1:24:3e:70:aa:0d:43:49:f6:9b:c9:89:
59:1d:ad:6f:9d:0f:a7:0f:7a:fa:7a:87:57:73:fe:ff:e4:15:
73:f8:ed:e6:b7:21:99:ac:6c:b4:1e:a8:fa:0b:e6:22:14:9e:
3c:40:e5:34:dc:e3:3d:94:00:cc:d9:e2:18:3b:7e:b4:c9:b1:
90:eb:a1:55:f4:0e:6c:21:27:fb:bc:10:d0:65:a1:ea:25:c4:
49:c1:4a:b1:66:8f:d6:72:ed:99:7c:d5:ac:89:25:bf:28:e3:
80:ea:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:42 2025 by rpki-client