Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5406C9C2DC9B11EF95803052762E951A.roa
File: 5406C9C2DC9B11EF95803052762E951A.roa (raw, json)
Hash identifier: RC/S5L3WOr3GLTMH8nprhUT12GsXwfZrD4WC5VMyB3o=
Subject key identifier: D2:36:06:46:14:86:83:9A:6B:18:70:8C:98:DF:5A:C5:68:DA:0B:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5406C9C2DC9B11EF95803052762E951A.roa
Signing time: Mon 27 Jan 2025 10:41:56 +0000
ROA not before: Mon 27 Jan 2025 10:41:52 +0000
ROA not after: Sat 08 Feb 2025 10:41:52 +0000
asID: 22773
IP address blocks: 154.84.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84913 (0x14bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:41:52 2025 GMT
Not After : Feb 8 10:41:52 2025 GMT
Subject: CN=679762f4-54c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:41:b7:27:3f:d0:06:50:fb:e8:fd:bc:d4:
93:ba:a3:b2:70:0f:f3:e9:46:a6:c7:fa:1f:d9:d0:
f8:f8:ef:b3:35:b8:e0:dc:8c:b9:f9:4c:04:a3:6d:
e8:36:f6:a2:36:87:5f:90:f1:cb:d7:ef:29:93:2b:
8c:0a:5a:1e:a4:cb:f0:22:77:08:f1:7f:6b:bb:9c:
d8:29:7b:5f:ae:93:e6:4e:c2:51:e0:8b:0c:24:95:
f7:52:e8:02:7b:7d:4d:86:d5:01:af:1b:90:43:81:
0b:f3:4d:78:96:ff:c5:e9:c7:70:a4:87:04:1f:60:
b5:e1:01:7c:1b:13:69:c6:53:aa:45:cc:ec:dd:cb:
42:80:ac:40:97:11:24:78:f4:6c:02:fb:8b:3e:a6:
db:a0:4e:c1:5a:92:35:57:c8:78:a4:70:9b:7e:c7:
a3:c6:29:46:4d:68:ac:dd:f7:27:ee:82:7f:58:20:
01:91:24:a3:e1:f3:ec:d3:06:fb:44:c1:fb:66:88:
df:24:c3:8b:bd:02:b6:2b:a2:87:32:b1:11:18:a7:
fc:11:da:73:0b:99:65:46:60:a8:90:4b:e1:c9:f0:
60:1f:05:e2:b5:74:cb:f0:e2:d8:8b:f0:83:4f:eb:
71:0b:d0:0b:13:57:a4:1a:7d:32:8a:96:70:c2:5d:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:06:46:14:86:83:9A:6B:18:70:8C:98:DF:5A:C5:68:DA:0B:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5406C9C2DC9B11EF95803052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.172.0/23
Signature Algorithm: sha256WithRSAEncryption
98:7d:a1:70:d8:5e:5e:ea:ac:db:76:8b:fd:6a:95:8c:58:fb:
7a:3e:97:b7:8e:5e:3c:73:d4:e3:08:3f:90:12:94:6f:54:43:
78:7a:e8:b4:0c:53:f3:a8:1e:cf:0f:e0:1c:e7:40:f0:93:03:
c9:b7:ab:3a:b2:e7:aa:66:b6:00:aa:10:c2:9c:5b:e0:a1:49:
99:75:35:1e:86:4c:9d:7e:4a:2f:ae:fc:42:35:7f:08:f8:8a:
e6:b1:07:1b:d4:8c:fd:bb:12:15:e0:fa:7d:4e:1e:ac:5c:3d:
66:7a:d1:b2:c5:b3:ec:9d:1c:71:c7:e8:57:6b:0f:d0:4b:b6:
43:66:6e:c3:1c:eb:1a:d0:0e:b1:19:97:d6:f4:73:a5:9d:3d:
0a:32:a4:33:66:5a:1e:d6:e7:09:7d:86:9d:2c:64:01:88:c9:
2d:37:f4:ad:6e:d2:b0:43:c4:46:4b:62:1e:ae:0c:db:36:db:
89:d9:43:a0:2a:56:8f:b2:e9:0e:97:c4:af:0e:eb:30:0c:58:
b7:2f:12:0c:14:36:fd:13:45:4a:b9:58:c5:76:f8:1b:c5:07:
4a:af:5b:cc:70:8b:0c:87:7a:4f:e8:aa:5f:19:a0:50:53:13:
40:40:22:71:36:0a:5d:38:12:0f:66:f1:35:29:b6:f2:00:73:
2a:7f:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:49 2025 by rpki-client