Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E58AB8DB2611EFA2E9B180762E951A.roa
File: 70E58AB8DB2611EFA2E9B180762E951A.roa (raw, json)
Hash identifier: dfMfPo4X1jGKDmLtVcNM6P8JxH0FgDGqgpYJikOO6N8=
Subject key identifier: FA:22:B3:82:BB:1A:4A:9D:D5:0E:10:C5:DC:58:0C:9C:9F:E7:A7:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E58AB8DB2611EFA2E9B180762E951A.roa
Signing time: Sat 25 Jan 2025 14:12:42 +0000
ROA not before: Sat 25 Jan 2025 14:12:38 +0000
ROA not after: Wed 26 Feb 2025 14:12:38 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84425 (0x149c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:12:38 2025 GMT
Not After : Feb 26 14:12:38 2025 GMT
Subject: CN=6794f15a-8df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:9a:e5:3a:ac:80:c1:b2:aa:05:e4:d7:70:
db:03:de:aa:5d:19:02:68:94:a0:72:c7:73:fc:8b:
ba:1e:10:b9:4b:ea:96:91:06:ec:0c:46:bd:b1:23:
37:52:b2:21:61:77:71:43:fe:66:68:0c:28:0a:ba:
f2:1f:ab:e9:76:0a:52:4e:ed:bf:24:21:5f:7c:24:
64:83:7e:54:28:58:dd:f4:e8:0d:af:cd:74:db:ac:
ed:4a:fc:80:e4:f7:6f:50:d9:42:82:fd:1a:c2:a4:
2c:72:cd:3d:41:f4:51:6b:67:27:28:52:e0:98:09:
47:b3:27:6f:93:c8:b2:4f:20:b6:8e:71:b8:e1:95:
a6:20:6b:85:3e:f5:09:3a:f5:97:af:d5:7a:8a:4a:
bd:56:b3:c9:bd:d5:27:50:a1:67:59:3d:08:bf:98:
cb:7e:cd:9c:a7:3d:8f:eb:e9:2a:f1:9b:23:48:8a:
81:8b:e3:48:61:1f:d9:66:91:84:07:ac:3a:3d:ad:
43:63:97:ee:c1:85:9d:97:27:7f:6f:52:15:58:bb:
aa:90:0c:1a:46:d9:42:59:93:24:d9:17:4a:44:a1:
c3:1a:a7:5a:1e:7a:e9:6d:5f:07:72:6b:2c:29:6f:
da:8d:ce:65:63:b1:09:4b:5e:5f:e3:2b:47:4d:ee:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:B3:82:BB:1A:4A:9D:D5:0E:10:C5:DC:58:0C:9C:9F:E7:A7:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70E58AB8DB2611EFA2E9B180762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
46:7e:ad:0f:7f:4f:40:d0:7b:3d:68:61:33:cd:f1:5c:6f:61:
a8:2c:d7:6d:0b:65:90:1a:9e:e1:de:a8:d2:c1:6f:fd:d2:3d:
98:6d:58:c2:ec:10:46:3c:a6:c8:0c:34:e5:8c:79:99:d8:42:
da:f0:03:0d:d4:fd:1a:5d:c7:a5:17:db:67:f2:9b:6e:9c:de:
f1:1b:d3:ed:f0:a5:99:27:16:11:a6:5b:bc:59:3e:14:2e:39:
22:9f:8d:8b:b0:64:a1:73:23:a6:4c:a5:1a:59:61:c6:76:c5:
8e:00:6f:7e:a0:f2:96:1b:38:c5:59:c9:28:18:a2:b1:ad:d2:
5c:9d:ec:67:c6:dd:b5:98:21:c3:d6:b2:4d:90:88:e8:a6:5f:
87:c4:6f:ff:f6:a8:4d:57:36:43:3d:e5:31:90:ec:46:d2:d4:
98:b0:50:af:97:94:e5:aa:5a:58:28:43:b2:ad:e9:f3:22:db:
bb:d8:0b:02:27:3c:6e:bf:46:31:8f:14:37:bd:0f:b0:7d:48:
b0:c4:33:7b:90:e5:b9:2f:c7:e0:1b:bf:92:fd:fd:28:c7:38:
25:17:42:7c:89:90:4c:97:71:01:99:73:9e:3f:ae:86:95:5a:
95:6d:e7:1f:2c:c7:81:a9:57:32:78:43:26:55:99:d3:2e:5e:
1a:37:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:44:41 2025 by rpki-client