Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7D51C0C6CE11EF9FAB6E43762E951A.roa
File: 5D7D51C0C6CE11EF9FAB6E43762E951A.roa (raw, json)
Hash identifier: ZN7ZiY0J992Yt77gBQz7ExjIAO4mGJoJY7kg2qiMJM0=
Subject key identifier: 44:E5:E1:B5:3A:2E:85:31:0E:03:DD:D4:92:1A:3B:0A:B1:86:28:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7D51C0C6CE11EF9FAB6E43762E951A.roa
Signing time: Mon 30 Dec 2024 16:51:51 +0000
ROA not before: Mon 30 Dec 2024 16:51:47 +0000
ROA not after: Sun 02 Feb 2025 16:51:47 +0000
asID: 54600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78060 (0x130ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:51:47 2024 GMT
Not After : Feb 2 16:51:47 2025 GMT
Subject: CN=6772cfa6-3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:36:a3:09:06:18:94:c7:4e:5a:c3:25:a9:
91:46:e7:2a:3e:25:49:7c:5f:60:0a:69:4c:4e:ee:
c1:a5:53:74:19:ff:40:82:a7:3b:3c:d1:71:82:f7:
36:d7:9d:80:c6:db:88:73:a8:39:f9:46:e9:21:b9:
0b:e3:52:27:ff:68:5f:02:16:78:ee:77:fd:d0:35:
b8:65:dc:1f:e1:7b:97:ab:9c:a7:fe:e9:a5:cf:e9:
25:e5:55:04:ad:4a:73:a6:73:76:a4:cc:29:3e:6f:
09:a1:81:45:f7:1d:a5:36:af:82:e8:19:f7:66:b0:
02:b9:d7:9e:2e:fb:69:72:fb:18:ab:44:9f:df:4b:
68:1c:0e:d7:fc:58:8c:1c:53:a4:2b:b5:24:94:a9:
d6:29:d4:b4:58:19:d5:0d:1f:2a:46:77:7e:69:40:
97:dc:2f:ee:91:47:6e:a6:57:9a:20:90:e2:66:41:
a3:31:7e:0f:36:e9:a2:43:4e:6d:bd:0f:bb:7c:5e:
91:49:21:31:a7:dd:f4:85:d7:e7:3b:f4:b5:00:d8:
d0:4a:71:23:09:ea:6d:a2:ae:15:3d:bb:d6:98:f1:
60:50:ad:c7:9c:98:d6:dd:93:36:5e:5a:4e:f6:4c:
ea:e1:db:cb:dc:11:97:86:78:87:84:20:a4:80:ae:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:E1:B5:3A:2E:85:31:0E:03:DD:D4:92:1A:3B:0A:B1:86:28:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D7D51C0C6CE11EF9FAB6E43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
29:ef:97:dd:92:34:8e:db:61:26:66:19:fe:a8:41:f8:d8:21:
bc:86:65:e1:a2:79:1f:5b:f3:1c:af:ea:5e:1f:65:92:e6:18:
2e:76:c2:80:97:39:85:91:21:75:db:cb:f5:94:21:fa:04:50:
1e:70:4f:03:39:38:25:0f:b5:ba:db:75:7e:f9:0d:d0:31:cb:
4e:5f:98:33:6e:da:7b:35:03:fa:32:9c:a0:4e:4e:c6:df:47:
87:5c:04:3d:20:54:ff:7d:53:07:99:fb:18:97:81:1a:ae:ea:
33:e2:75:cb:b4:51:22:47:96:4b:f1:c8:72:dc:75:94:75:b1:
b2:2a:de:03:f0:61:0e:57:7d:79:65:9a:d1:0a:61:52:1e:b9:
83:cc:36:e1:47:7c:57:bb:f7:ad:41:02:7c:c4:68:97:71:95:
d6:40:18:42:cb:1d:4e:21:4d:ce:fd:54:45:6d:db:c7:f1:5b:
9d:41:4a:84:d7:45:fc:f4:b3:18:df:55:49:79:ba:4f:a1:aa:
81:33:42:60:a4:71:28:0d:5c:48:24:e3:c3:0d:d8:c5:a4:27:
11:17:65:0c:cc:50:6d:57:07:56:5d:48:b1:c5:0a:ca:f6:67:
ac:65:6d:04:6d:e6:bd:f4:29:41:11:86:40:88:de:9e:27:bd:
13:3d:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:09 2025 by rpki-client