Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7055B22AAD5A11EF819CB8B2762E951A.roa
File: 7055B22AAD5A11EF819CB8B2762E951A.roa (raw, json)
Hash identifier: 7eKB2YHq3TqUqTOPVWQgxmXqLrtyx2tva36aq0dz8Uk=
Subject key identifier: A3:8C:A4:12:5D:4D:34:1E:C9:47:42:18:EC:5A:9D:25:0C:F7:06:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7055B22AAD5A11EF819CB8B2762E951A.roa
Signing time: Thu 28 Nov 2024 07:29:02 +0000
ROA not before: Thu 28 Nov 2024 07:28:58 +0000
ROA not after: Tue 11 Feb 2025 07:28:58 +0000
asID: 5650
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70879 (0x114df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:28:58 2024 GMT
Not After : Feb 11 07:28:58 2025 GMT
Subject: CN=67481bbd-a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:b9:e8:fa:3d:ef:38:49:78:e3:84:d8:4a:
9f:aa:ca:39:7c:2f:13:f7:ed:a9:9c:c9:5d:e2:ea:
bc:19:64:24:b5:c0:b4:e5:05:84:72:e7:b2:60:54:
c6:e8:5a:5c:14:d2:47:4a:bd:11:0e:da:e5:5c:8a:
72:99:f9:a2:a3:f5:d5:b0:fa:3a:cb:3f:43:9f:66:
b6:a6:32:56:a8:3e:70:e7:0a:84:53:af:35:8d:bf:
e2:c2:48:ff:98:86:fe:2f:f0:d4:cd:38:e6:c5:45:
57:9e:8d:b9:3f:90:e1:48:d1:87:e6:c0:fb:6c:59:
d5:25:1c:27:ec:c8:25:3e:ee:c3:2b:9b:f9:ec:e5:
aa:01:22:a4:08:58:ae:53:5a:86:a4:4d:67:0c:41:
27:d3:b1:16:4d:49:5b:f7:52:82:3a:20:6b:f8:84:
aa:4d:5f:1f:5d:f0:cb:39:72:24:8e:27:0e:26:2a:
36:76:f3:dc:cf:f9:b0:db:b1:33:a8:44:1e:bb:30:
d0:0d:81:cf:2e:7c:5e:48:e1:e3:4a:96:5e:5b:91:
22:9c:34:7e:28:b4:17:8f:eb:83:cc:e5:01:f7:1d:
1b:f4:c6:f1:1d:a0:a1:03:fd:5d:f4:da:60:5c:aa:
14:7b:ec:84:0b:c4:28:58:0b:79:53:84:b9:9a:ad:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:A4:12:5D:4D:34:1E:C9:47:42:18:EC:5A:9D:25:0C:F7:06:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7055B22AAD5A11EF819CB8B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:54:57:1b:f5:6e:62:b6:ba:56:34:47:53:70:61:88:a5:87:
49:af:e4:ef:30:1b:a0:72:f7:f0:91:70:0b:e3:d1:ab:80:eb:
30:d9:49:25:8f:54:69:aa:84:c3:ca:c0:67:5e:da:62:50:77:
5d:3f:f3:c8:ab:39:0b:44:62:c2:f4:62:97:8f:87:36:95:fb:
07:52:6b:27:83:3a:a2:b8:7d:af:4e:28:d6:a2:80:09:99:21:
c5:a7:81:ed:88:a3:7f:d4:3b:a8:5f:d9:20:38:42:38:69:8a:
b9:79:3b:d8:67:08:8d:8c:67:29:0d:a4:45:5f:9f:32:ec:be:
a3:14:84:f3:03:d7:03:3a:16:94:93:29:26:9d:aa:05:85:92:
4f:1f:f6:6b:fd:5c:7e:a8:2b:6a:e2:15:e1:45:ba:54:4a:cc:
ad:7a:46:c5:a5:6d:d2:62:53:8e:11:1a:d4:a6:2a:c5:16:27:
53:2b:d8:2b:3d:54:78:a3:14:c1:06:60:37:30:10:82:74:72:
85:de:e1:98:20:0d:64:e5:6d:e6:ed:5d:0f:21:1f:40:ab:c5:
6d:06:3a:7c:73:a9:d0:b7:77:9e:51:95:53:7a:a6:95:0f:21:
65:57:58:40:eb:38:7f:a9:1c:5c:7d:c8:a9:30:e8:4d:ad:26:
b0:5f:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:02 2025 by rpki-client