Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B86ECDCD73111EFB05B808C762E951A.roa
File: 5B86ECDCD73111EFB05B808C762E951A.roa (raw, json)
Hash identifier: Nkb0S9IptWc5N5uTr44+tH335FK93iK/UJLJPEirY5k=
Subject key identifier: 46:6E:60:C7:06:D7:BE:97:BE:B6:B5:80:8D:98:62:99:CD:E1:F9:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B86ECDCD73111EFB05B808C762E951A.roa
Signing time: Mon 20 Jan 2025 13:20:46 +0000
ROA not before: Mon 20 Jan 2025 13:20:42 +0000
ROA not after: Wed 05 Feb 2025 13:20:42 +0000
asID: 135097
IP address blocks: 154.220.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81474 (0x13e42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:20:42 2025 GMT
Not After : Feb 5 13:20:42 2025 GMT
Subject: CN=678e4dae-680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:c6:70:28:21:95:16:52:f1:4a:2e:f0:f1:
66:82:ad:87:d3:f9:73:b4:57:c2:10:0a:cf:51:d1:
fc:5a:3c:c0:40:4e:b3:69:e0:80:8c:0f:7f:0f:0e:
f8:d3:ff:fc:11:fc:35:e1:cf:eb:47:37:35:da:c8:
fa:54:45:c9:e8:c6:6f:78:94:d2:04:f4:35:02:f5:
7b:17:a5:97:57:40:fe:8e:31:8d:89:4d:71:23:83:
ce:eb:49:34:f3:73:47:ac:5a:53:a1:d6:6a:aa:3c:
47:f7:88:0c:ab:ab:55:f4:11:70:a7:9c:3b:06:80:
07:4d:d8:a8:26:83:3b:f8:6e:a3:75:a4:f3:b9:2c:
4b:dd:a2:c5:43:7e:d2:b3:ab:6d:36:14:c5:f2:82:
ec:8c:73:11:f0:0f:8b:07:ca:a4:5e:1b:12:fa:cc:
34:15:8e:82:58:1c:dd:86:d4:e5:03:d3:69:8a:62:
e8:68:7c:13:bb:71:41:95:9f:37:bb:de:b0:f2:ca:
e5:20:fe:1e:fe:ae:e7:c9:f8:30:3e:71:17:04:50:
80:68:8f:e4:e7:7e:05:39:1b:86:9a:ac:7c:7d:a7:
13:a6:61:de:6f:cf:46:d6:6c:e6:ef:aa:46:9e:37:
3e:3b:2a:ff:e6:71:7f:0b:5c:f6:75:f3:dc:18:c3:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:60:C7:06:D7:BE:97:BE:B6:B5:80:8D:98:62:99:CD:E1:F9:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B86ECDCD73111EFB05B808C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.8.0/21
Signature Algorithm: sha256WithRSAEncryption
00:8a:ac:5d:8a:da:b3:62:ea:0a:72:2d:b0:d5:fc:f1:82:6c:
97:60:c0:85:ea:44:d8:9a:17:86:a1:9b:c4:aa:24:f1:dc:40:
fd:a2:0a:af:e0:41:3c:55:03:a7:e9:d0:1c:f2:20:88:bb:c7:
57:98:1d:7b:cd:50:8e:58:42:a1:96:d3:b5:dd:24:49:b6:ba:
63:5f:7f:0d:93:89:4f:ff:02:c4:be:b1:c1:f7:c2:40:f5:83:
8b:d1:41:e2:12:45:f7:a9:b1:96:02:de:46:95:e8:27:c5:b8:
8b:f8:2b:9d:6b:a9:c4:a8:88:b4:23:20:94:19:dc:03:1f:ae:
ca:ef:0e:e0:78:4a:c5:39:30:84:25:98:d2:c3:08:4e:e2:6b:
87:48:5c:ca:d0:b7:d3:1e:94:fb:de:65:15:e3:e2:db:dc:eb:
ee:7c:22:97:f1:de:9c:88:ac:82:fc:39:32:b1:8c:5a:37:af:
de:5a:b5:5b:b2:56:64:e0:31:21:a7:37:ab:e4:ee:a0:5f:6e:
cd:38:1a:5a:ae:e4:82:9a:77:87:c8:8f:1c:e3:d0:a2:a1:5d:
d6:bb:4a:73:19:e8:95:67:7e:73:9d:f5:70:43:ff:39:a3:6d:
99:e5:a8:6f:82:96:16:82:a4:a9:19:26:a6:45:d9:b1:55:f9:
1f:08:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:37:33 2025 by rpki-client