Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67295D9ED0BB11EFB8F9C45F762E951A.roa
File: 67295D9ED0BB11EFB8F9C45F762E951A.roa (raw, json)
Hash identifier: 6TbcTqHi0mic83kh2Atere0FGfFnqOWei9AFf9sVj9s=
Subject key identifier: 6D:21:36:56:FF:8C:41:E4:8A:C6:B9:C3:B4:31:5E:9B:D5:10:89:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67295D9ED0BB11EFB8F9C45F762E951A.roa
Signing time: Sun 12 Jan 2025 08:01:18 +0000
ROA not before: Sun 12 Jan 2025 08:01:14 +0000
ROA not after: Fri 14 Feb 2025 08:01:14 +0000
asID: 137899
IP address blocks: 154.222.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80554 (0x13aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:01:14 2025 GMT
Not After : Feb 14 08:01:14 2025 GMT
Subject: CN=678376ce-f935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:ab:ed:da:56:f1:2a:f0:e6:62:40:3f:f9:
2e:9c:8a:57:40:9a:80:e9:fd:94:02:d1:73:3a:31:
1e:98:37:e1:d0:57:ee:38:2b:fe:a7:ef:77:5d:d2:
61:83:f7:fc:22:52:38:f0:bd:3f:9b:09:7f:92:85:
d3:74:10:b3:92:5e:fa:e4:32:a5:15:9f:c4:cb:97:
89:d9:0c:61:92:55:69:df:14:9e:d7:60:b6:b5:ed:
fe:5d:74:13:4d:87:66:31:0b:14:03:85:fc:bd:0c:
06:dd:14:9a:be:4a:a4:38:9d:36:7c:23:a8:c0:04:
e5:89:68:bc:61:37:4b:d4:4e:1c:97:4a:1e:a0:c6:
1b:97:df:55:14:16:4b:e3:b2:28:61:59:15:54:08:
52:af:85:a1:b1:f8:4c:ab:28:13:c9:65:e0:0c:90:
83:16:0e:4e:99:70:11:8e:79:a9:3e:b2:e8:36:cf:
06:45:75:04:f4:fe:57:fd:51:9b:a3:b3:cc:f5:b2:
eb:b7:b6:ef:2b:ce:eb:c4:64:53:e1:97:fb:05:74:
61:39:b1:60:5c:f7:38:1e:ff:4a:5e:84:57:92:6b:
93:17:42:25:22:83:48:33:2f:7f:35:eb:4d:73:81:
27:e7:d6:06:df:be:73:05:91:28:a8:bc:cf:1f:97:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:36:56:FF:8C:41:E4:8A:C6:B9:C3:B4:31:5E:9B:D5:10:89:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67295D9ED0BB11EFB8F9C45F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.28.0/22
Signature Algorithm: sha256WithRSAEncryption
28:b2:b9:95:a1:ac:a4:e2:83:06:f0:30:2f:b4:b4:f3:6d:5f:
24:67:8c:d0:a6:4d:aa:17:49:9c:6f:ca:76:fc:3f:d1:bf:a6:
18:bd:41:28:76:fd:ea:40:24:df:0e:b3:5d:ac:63:f8:26:96:
51:e8:94:d9:e5:6c:9b:37:ff:30:6c:48:79:26:cb:a2:58:11:
15:52:2e:6c:8c:46:9e:aa:5a:48:94:22:7a:33:a9:bc:86:2e:
45:30:bc:f5:41:1e:c5:cb:31:d4:f8:5f:6f:a3:2e:37:d5:42:
fa:1d:63:b1:54:27:3a:bb:0b:e5:4e:86:ca:3b:4b:48:ec:37:
f7:ce:3d:a1:c9:76:c4:03:25:73:46:11:a6:31:e3:f7:ab:43:
30:5e:fc:a5:a4:ca:3f:4c:3b:13:22:ab:b5:2b:23:e0:41:25:
ab:c7:44:8f:72:e3:f4:2d:65:58:c4:1f:35:be:80:ae:49:97:
be:99:a3:1b:99:f8:d0:2c:e9:1c:25:11:9c:39:a4:94:43:9e:
dc:d5:7e:3f:89:83:bf:19:09:9d:73:19:6f:e5:f3:bc:29:be:
7b:78:85:a4:aa:07:48:6b:76:f1:a1:b3:05:dd:3d:5a:19:c3:
40:84:a5:dc:01:14:c5:cf:af:1d:bf:13:6a:d1:f7:ea:ac:6b:
b4:f7:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:14 2025 by rpki-client