Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF98F3EDCCC11EF8C7EBC98762E951A.roa
File: 4DF98F3EDCCC11EF8C7EBC98762E951A.roa (raw, json)
Hash identifier: 7dFOOzJlOejszzh3C/LvDtiD/wQX1POYEq+Cszg4Gjw=
Subject key identifier: 17:EE:0E:F0:6D:CD:AD:8D:3A:79:7F:38:FE:6F:73:6C:D1:78:02:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF98F3EDCCC11EF8C7EBC98762E951A.roa
Signing time: Mon 27 Jan 2025 16:32:31 +0000
ROA not before: Mon 27 Jan 2025 16:32:27 +0000
ROA not after: Wed 12 Feb 2025 16:32:27 +0000
asID: 135097
IP address blocks: 154.212.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85115 (0x14c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:32:27 2025 GMT
Not After : Feb 12 16:32:27 2025 GMT
Subject: CN=6797b51f-a665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:17:09:63:10:26:0d:01:c0:43:86:3b:02:
6d:89:a1:58:dd:14:f9:97:41:ad:a3:42:d1:fd:fb:
36:f1:ff:50:d7:08:94:02:0e:49:45:a3:75:69:f4:
da:dd:79:36:48:01:42:53:20:e0:88:e8:04:70:3a:
a3:3f:f1:fa:e8:83:bf:85:90:e2:bc:0f:46:dc:d9:
cd:25:59:26:89:58:24:38:d6:ed:19:36:d4:b1:e9:
db:b7:fc:c7:f2:86:12:c5:8a:fd:df:d7:60:98:a8:
b9:c7:b9:25:a0:21:5b:d0:51:80:a4:a6:3a:11:95:
5b:ec:49:c1:94:9d:ef:54:61:ec:a0:45:54:fb:83:
78:6e:53:15:e1:42:d6:a7:6c:9d:36:06:b6:df:45:
6e:76:c5:04:58:ca:ac:7a:41:7e:41:06:80:78:5a:
89:37:a1:ff:06:aa:52:9b:66:eb:f5:de:8a:b2:bd:
16:0a:02:dd:6f:a5:ae:ad:c5:15:50:fb:7d:8f:57:
94:a3:89:4f:c8:fd:3a:fe:6d:9b:1e:4e:9e:79:df:
9d:53:4b:52:d0:b0:9d:3c:bd:76:1f:da:37:48:dd:
58:cb:cf:98:7b:76:4d:db:44:21:14:9b:9d:ed:80:
3b:77:4c:dc:ce:9f:45:25:47:c8:2c:0e:45:bc:f4:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:0E:F0:6D:CD:AD:8D:3A:79:7F:38:FE:6F:73:6C:D1:78:02:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF98F3EDCCC11EF8C7EBC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:de:74:93:c5:25:61:c6:6d:6a:ef:4f:97:51:76:83:4e:08:
3d:5d:6d:f6:49:4b:d8:11:78:5c:21:29:90:34:44:e5:a0:47:
77:0c:f6:1f:49:b2:fe:ca:00:78:32:d5:30:60:52:21:ca:5a:
14:8d:75:49:a1:c7:5c:9a:e0:d2:e3:da:3f:46:01:9f:ac:4c:
db:24:5d:a3:7d:ca:8f:bf:d0:48:83:2d:25:ad:85:0f:1e:ca:
70:99:03:4f:7f:16:0b:b2:fa:4e:49:62:12:37:ed:e9:fa:22:
d9:0f:6e:51:e9:e5:5b:83:bf:e4:b0:08:45:14:6d:9d:77:1d:
38:27:dc:79:85:5c:c1:45:43:99:ab:17:15:67:48:d8:93:6a:
09:01:ca:53:5e:3e:a4:e5:8f:72:3d:61:c6:0f:23:c9:aa:34:
e1:27:c7:87:e6:d2:63:68:3e:c9:f2:26:9a:e0:e3:55:af:fa:
21:8c:1c:bb:d9:32:ca:5b:18:b7:87:83:78:f3:34:7b:39:7c:
7b:08:1a:c9:c4:f3:0f:e0:cd:86:d9:e5:a1:1a:cf:3b:72:61:
67:58:aa:7c:51:b0:2b:ff:43:7e:f2:2d:f0:ad:8f:8a:83:64:
6f:a4:24:c0:77:3d:9e:e1:a3:92:1d:12:b0:01:0a:a7:11:5d:
37:5b:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:22 2025 by rpki-client