Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D0F1642C9C211EFB273EA9A762E951A.roa
File: 4D0F1642C9C211EFB273EA9A762E951A.roa (raw, json)
Hash identifier: q1BrTtAjze4C4BrbP/EXE/ic47DI5KUJiqbxLeN2n1w=
Subject key identifier: 7A:D1:4A:F6:51:98:E3:A1:1C:D5:5F:80:8B:E7:34:50:AB:D6:8E:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01348E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D0F1642C9C211EFB273EA9A762E951A.roa
Signing time: Fri 03 Jan 2025 11:03:03 +0000
ROA not before: Fri 03 Jan 2025 11:02:59 +0000
ROA not after: Sat 08 Feb 2025 11:02:59 +0000
asID: 395793
IP address blocks: 154.196.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78990 (0x1348e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:02:59 2025 GMT
Not After : Feb 8 11:02:59 2025 GMT
Subject: CN=6777c3e6-8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:91:9b:6e:04:06:5f:76:68:82:92:5c:23:
7b:97:30:9b:95:35:3d:72:72:ae:49:c8:c9:98:38:
bb:85:18:a4:8e:c3:35:9c:75:c4:ef:3c:6e:aa:11:
3f:ca:64:b2:76:de:f4:ed:17:bb:cb:da:42:00:ba:
db:d2:35:a6:38:17:15:e2:d1:db:fa:98:60:c7:a0:
f9:a6:5b:4e:1d:52:74:9b:63:e8:9c:5e:72:bc:42:
82:96:60:d9:9b:3c:97:b5:06:c1:4d:81:ba:38:b9:
6e:2b:8c:44:bd:f1:1d:4a:4e:f0:e9:96:2b:a2:ca:
be:9a:9a:50:11:d0:22:30:0b:56:37:ee:d1:9c:dc:
83:77:b6:b8:90:0d:94:77:b6:f2:5a:0e:b4:ea:c8:
d8:ba:11:ee:db:eb:e3:b0:b7:cc:c8:00:a5:4c:bf:
fc:9d:95:32:33:e1:aa:c4:00:87:59:4f:1b:8d:9c:
6b:d6:4b:ac:88:00:f5:fd:46:26:e4:09:df:ae:30:
f4:1a:4a:53:26:d7:3b:3f:60:89:05:df:b4:62:77:
ab:33:4e:91:60:0d:be:f8:8a:d2:e8:1f:d4:42:35:
a2:0e:b9:75:85:8c:40:35:e7:16:4f:17:c6:ba:cf:
a7:23:b2:f1:98:42:34:30:a9:87:87:bd:59:01:46:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:4A:F6:51:98:E3:A1:1C:D5:5F:80:8B:E7:34:50:AB:D6:8E:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D0F1642C9C211EFB273EA9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0/22
Signature Algorithm: sha256WithRSAEncryption
36:94:e8:59:a2:ab:6d:24:a3:bf:9a:f4:06:1f:e1:4c:c7:a5:
13:26:b4:81:1e:8d:ff:21:d4:31:a7:4a:88:56:f1:e5:32:b3:
45:f0:89:1f:2a:58:3f:7e:1e:87:fe:df:7f:86:3f:75:73:3e:
fd:68:65:be:fd:00:ef:dd:8a:e6:be:8e:4c:8b:fb:65:b7:80:
a2:50:e5:ed:52:2c:e6:7a:c0:25:01:73:f8:77:f9:b9:cc:c6:
1d:e3:f2:f6:b8:f3:07:c0:82:71:22:bb:06:16:cc:a9:e8:69:
f9:56:f8:e5:d8:a5:94:f5:f1:2e:f5:da:7e:2d:d9:76:7e:60:
5a:0a:84:cc:61:fe:71:fe:91:be:88:2c:b5:5d:ca:5c:f5:cc:
36:33:1c:77:b7:bc:9f:e3:7d:3c:ff:a4:71:b2:98:f4:22:38:
bb:b4:e5:e8:b9:b9:a0:18:d4:92:d3:1b:4c:79:ce:1e:42:89:
9c:e3:96:41:6d:d8:dc:a3:fc:c1:00:7f:9e:1a:3c:4a:37:19:
7d:70:5e:68:d5:33:3b:f4:9d:93:e2:aa:c2:b2:0d:e1:52:85:
26:29:9d:65:f9:7c:e0:60:43:31:93:fd:65:55:ec:2c:b9:41:
02:96:09:23:42:6e:fc:bf:72:ac:65:0c:fd:cf:b6:bd:e3:88:
2e:54:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:40 2025 by rpki-client