Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/779D9F56CAD411EFAE82A65B762E951A.roa
File: 779D9F56CAD411EFAE82A65B762E951A.roa (raw, json)
Hash identifier: cLPye8E6xsNAuFancHK7SF9B4REz20t3cILTXac37oo=
Subject key identifier: 38:AB:C6:AE:1F:FB:82:60:FD:AE:1C:00:A7:3A:08:E8:3D:9A:6B:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013529
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/779D9F56CAD411EFAE82A65B762E951A.roa
Signing time: Sat 04 Jan 2025 19:45:36 +0000
ROA not before: Sun 05 Jan 2025 19:45:32 +0000
ROA not after: Sat 08 Feb 2025 19:45:32 +0000
asID: 203020
IP address blocks: 154.217.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79145 (0x13529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:45:32 2025 GMT
Not After : Feb 8 19:45:32 2025 GMT
Subject: CN=67798fe0-8588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:b8:59:87:5d:33:b3:29:71:34:32:7f:39:
5c:d4:e0:e5:e1:69:6b:9d:fd:21:69:64:32:fe:08:
4b:16:51:bd:36:9b:75:92:16:8d:53:fc:d7:93:53:
59:7f:4b:25:a6:5e:fd:a4:26:10:e0:b8:54:cb:1b:
97:11:0e:b0:7e:e8:88:ef:95:22:ce:49:ce:35:97:
a9:02:5f:2d:4a:56:65:48:e9:9d:5d:16:3c:98:3a:
4a:61:d3:b5:d6:ca:6f:db:f5:58:b9:e1:d1:c9:a3:
17:34:08:f8:58:e2:e6:4f:49:f7:fb:9e:6f:d0:5b:
4b:9a:45:1a:c2:6e:64:ff:5e:06:07:78:0a:1d:31:
b0:34:12:6f:58:e6:c5:c1:28:ce:ae:38:4b:a3:b7:
b0:e6:10:81:6b:f9:44:56:bf:62:a9:ee:64:ec:09:
fb:b3:6e:6f:1b:cd:4a:8e:d4:9b:ac:b9:d7:1e:98:
2f:12:76:50:0d:ed:e9:27:58:f2:d4:f7:a3:eb:3c:
7f:98:fa:f1:31:03:11:61:09:5e:55:8a:70:bc:d7:
b9:a6:da:22:60:73:c7:17:3d:01:f1:98:7f:9d:c4:
9b:b0:43:08:8d:5c:57:ec:46:53:35:a3:d0:a2:7e:
5b:bd:ff:39:4c:92:24:3b:ed:74:aa:1b:24:f8:0a:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:C6:AE:1F:FB:82:60:FD:AE:1C:00:A7:3A:08:E8:3D:9A:6B:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/779D9F56CAD411EFAE82A65B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c6:7b:bf:c3:1d:e3:a3:e6:8d:1b:33:81:44:50:68:a0:28:
fc:ec:ac:bd:01:cd:8d:81:46:87:8b:b1:c3:9b:30:94:a0:1d:
29:6d:bd:63:4d:28:c7:19:f0:4b:ef:d6:dd:b8:20:09:18:43:
a1:15:22:6b:c2:75:4c:3d:90:0a:2a:f4:bf:ea:0c:4a:12:02:
53:d7:51:d7:0a:35:78:ed:80:4c:53:0c:ec:37:4f:2d:35:51:
51:10:74:bd:5a:34:61:28:f1:ad:94:e6:f7:f4:3e:e8:74:b4:
61:46:0c:75:95:39:e2:e7:a5:21:85:9d:1b:aa:a8:be:3b:da:
f9:e5:21:bc:46:e3:24:83:d5:51:41:27:b0:b5:13:00:d6:c5:
51:9b:08:b1:34:10:72:3e:ac:27:32:ca:9e:d8:65:3a:38:b8:
ed:0c:4a:fb:2b:26:c7:eb:b4:9f:5e:d4:e8:dd:a7:e9:ca:01:
06:f6:c8:3f:9a:90:f8:cb:9d:63:6e:ce:ec:f4:2c:4a:81:33:
9c:d5:fe:83:b6:33:57:7e:0a:ea:0a:31:81:2b:c3:a8:09:8a:
cf:25:a7:ec:8b:ad:25:81:0e:3c:ef:80:95:e1:b8:f3:fb:68:
76:5a:85:2f:75:ad:6e:6c:fe:40:0d:b3:a4:0b:af:29:f0:04:
93:39:35:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:00 2025 by rpki-client