Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F785B2EDBEE11EFBC47C142762E951A.roa
File: 6F785B2EDBEE11EFBC47C142762E951A.roa (raw, json)
Hash identifier: kKh3v3zsYyFmNm5OyFFbO2HwEwYLawzKmDuu9AdOM/M=
Subject key identifier: 47:77:13:73:66:71:37:CC:3E:1B:C5:18:3A:D7:C8:9C:88:FC:03:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F785B2EDBEE11EFBC47C142762E951A.roa
Signing time: Sun 26 Jan 2025 14:04:19 +0000
ROA not before: Sun 26 Jan 2025 14:04:15 +0000
ROA not after: Fri 21 Mar 2025 14:04:15 +0000
asID: 138915
IP address blocks: 154.90.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84660 (0x14ab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:04:15 2025 GMT
Not After : Mar 21 14:04:15 2025 GMT
Subject: CN=679640e3-70ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:07:c4:d0:96:5f:d3:74:65:51:6d:0d:8e:
2f:84:9c:ed:cd:49:ea:17:f6:62:2f:a8:97:fc:c3:
4b:c5:fd:f5:16:d6:03:ee:11:a9:b5:45:38:b0:1c:
a4:bf:61:75:c8:a3:8a:56:90:4c:f6:de:87:61:43:
e7:b5:c3:2f:56:f7:fd:86:2d:4f:b8:90:b9:5c:fe:
fd:22:e1:5e:5b:0e:ac:61:a3:f3:41:5e:6c:b0:ea:
4a:8a:6c:72:8b:92:66:e3:34:e4:9c:6b:0a:81:08:
d1:dd:0f:c7:4c:6b:aa:a8:d9:f9:49:ed:2c:25:b0:
44:ce:30:3e:56:7f:c9:96:de:40:5f:da:4e:fc:89:
27:66:42:d4:c9:9f:07:fe:61:84:0f:7c:5b:59:fb:
54:b7:a0:2e:0a:9d:06:ca:19:0d:05:e0:e5:c4:27:
c2:38:da:b6:25:95:62:f7:f6:56:f8:a6:74:95:0e:
79:56:36:64:6b:f5:3a:0f:ed:61:c0:77:b0:56:e2:
46:9d:23:5c:7d:fc:94:dd:2d:35:84:d2:d7:2b:c6:
33:7f:c3:7e:32:87:75:2d:a7:08:59:b4:8c:46:95:
4c:74:3c:90:a2:f8:02:ad:ab:d4:01:50:09:73:e9:
45:28:b9:72:5d:73:bf:c1:bf:d3:1d:c0:6d:96:8a:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:13:73:66:71:37:CC:3E:1B:C5:18:3A:D7:C8:9C:88:FC:03:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F785B2EDBEE11EFBC47C142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ad:7e:a4:12:d5:e1:b6:79:28:04:dd:0c:1e:fc:6a:9c:b1:
5b:f7:4a:12:86:87:53:6b:fd:f1:26:32:15:09:59:8e:bc:b9:
3b:49:fa:31:69:70:62:3e:55:a7:b3:76:81:2d:06:8c:3c:44:
9a:5d:c6:6f:e5:63:f9:b5:3b:02:7a:98:b4:1e:f9:8f:37:09:
77:49:6f:24:df:ad:53:f9:77:4e:3b:9b:14:ee:df:4b:e0:3a:
8d:94:82:cd:29:ec:f5:23:1d:65:1b:33:ab:13:4b:d1:4d:f2:
0a:e2:37:e8:9d:4c:32:78:64:cc:e7:84:fd:29:08:80:29:12:
c1:b6:8c:eb:72:9a:e1:36:57:31:15:9e:44:b5:90:82:0c:bf:
45:7d:49:5f:c8:24:06:1d:f6:1e:68:d1:64:d7:10:41:8a:84:
bf:3e:57:45:3b:87:51:70:4e:4a:52:0e:7b:f0:db:bb:3f:a8:
ee:94:c6:84:75:c3:8a:d7:a6:62:21:ac:cd:98:ff:fb:72:40:
bc:f9:97:98:b7:07:f6:da:ef:4d:1b:cb:70:d3:a1:15:c5:31:
96:82:72:42:9a:27:ef:ea:be:77:e2:58:28:ad:44:ee:27:b3:
75:33:5a:87:b7:b1:63:25:73:3f:cc:b0:44:7c:91:09:a8:94:
21:32:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:06:59 2025 by rpki-client