Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EEEF38EDC0911EFB2781D75762E951A.roa
File: 4EEEF38EDC0911EFB2781D75762E951A.roa (raw, json)
Hash identifier: s8QixnkgwCLeb683cwNybKePoGToRzekD/5cSCzUnkU=
Subject key identifier: 73:50:DF:1D:91:C2:80:3B:58:BE:25:F8:F8:36:BE:FB:A1:7B:03:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EEEF38EDC0911EFB2781D75762E951A.roa
Signing time: Sun 26 Jan 2025 17:16:41 +0000
ROA not before: Sun 26 Jan 2025 17:16:37 +0000
ROA not after: Thu 20 Feb 2025 17:16:37 +0000
asID: 142062
IP address blocks: 154.86.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84758 (0x14b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 17:16:37 2025 GMT
Not After : Feb 20 17:16:37 2025 GMT
Subject: CN=67966df9-8135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:93:52:e8:02:85:15:b9:dc:79:00:85:03:
cb:4c:be:85:b5:8b:8b:86:c2:53:36:79:a7:9c:4f:
9a:6f:f9:91:47:cc:61:38:83:e2:59:a9:f7:c2:1c:
72:87:6a:30:7a:76:15:df:61:b3:e0:35:91:a4:c3:
bb:96:c8:76:c5:99:ba:e5:64:c8:76:10:40:52:c5:
33:7a:68:f4:ab:1e:8a:83:b8:75:16:cc:95:17:b6:
ed:eb:6c:56:34:ab:bc:e3:66:c1:9b:c9:fc:12:1f:
da:83:ab:25:8c:28:6d:27:96:d2:a8:ec:2a:9b:67:
19:a0:0a:13:55:2c:17:e3:b1:09:30:20:4b:79:78:
ac:79:df:fb:9d:85:90:54:be:47:32:3e:03:2b:f1:
56:74:d1:f9:29:87:8c:4a:25:b7:ca:91:dd:3e:ee:
e5:47:0f:d2:73:ca:37:3d:3f:3a:a8:08:c8:a4:0b:
e8:91:63:88:0e:85:3a:bb:24:63:82:13:ab:b0:19:
6a:8d:18:51:e5:92:27:ce:1d:aa:9c:b6:b0:10:51:
6b:75:6a:60:69:f4:37:8b:17:a3:f2:c7:01:35:c2:
7a:23:53:11:08:35:86:b1:aa:ad:23:aa:34:86:01:
87:92:70:79:67:ab:58:e3:f2:26:e5:99:74:84:a7:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:DF:1D:91:C2:80:3B:58:BE:25:F8:F8:36:BE:FB:A1:7B:03:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EEEF38EDC0911EFB2781D75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:00:97:cd:3e:6c:84:ce:21:48:a4:86:5b:9f:a8:f0:52:20:
c0:d1:24:5f:c3:24:b2:53:0e:6b:4a:bf:31:d3:67:b8:12:39:
5c:3a:d2:4c:93:95:bd:40:d4:94:e2:2e:81:e7:1d:cd:ea:f6:
71:76:9c:69:8c:a0:9d:72:c4:2c:c9:19:77:dc:fa:0d:1e:bf:
c5:b6:ab:f5:b0:eb:76:4b:dd:01:d8:c1:6a:d5:5c:5b:11:35:
b2:db:90:e3:00:1c:cc:36:92:4b:ec:a1:90:65:97:6a:03:50:
43:2e:0e:6e:2e:30:b3:09:34:41:76:20:33:63:8b:a2:ff:1a:
94:d0:3d:49:f0:92:e1:e8:1a:b0:b2:03:09:51:f6:9d:ff:12:
10:31:a2:8b:ef:64:5a:a1:12:e3:0b:ee:50:2a:eb:5c:9c:97:
cb:85:99:76:1a:1f:aa:52:04:57:7b:01:3b:ee:99:ea:13:4d:
6f:b9:17:78:17:ab:4a:b5:f3:6e:8a:4c:9e:3f:ae:9d:b4:f4:
3b:d2:4e:ca:cc:b7:37:32:c6:41:2f:24:85:93:d2:82:8c:7b:
d6:38:87:63:85:b9:30:42:4c:8b:2d:e2:4c:44:76:30:29:1d:
2a:59:1a:ab:f0:4c:cc:2c:60:70:50:61:23:42:45:04:98:56:
1b:b7:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:56 2025 by rpki-client