Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B616278DFEF11EF81E15542762E951A.roa
File: 7B616278DFEF11EF81E15542762E951A.roa (raw, json)
Hash identifier: VMyvK+KXt9OzJEaBpEQFqR5CL3Zeq32gmdxZ9k04Q0c=
Subject key identifier: 2F:7F:46:4B:AC:BA:FB:6A:85:7B:60:15:1C:F4:DA:A3:0E:B6:9B:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B616278DFEF11EF81E15542762E951A.roa
Signing time: Fri 31 Jan 2025 16:21:53 +0000
ROA not before: Fri 31 Jan 2025 16:21:49 +0000
ROA not after: Thu 27 Feb 2025 16:21:49 +0000
asID: 139646
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85531 (0x14e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 16:21:49 2025 GMT
Not After : Feb 27 16:21:49 2025 GMT
Subject: CN=679cf8a1-9a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:49:d6:21:85:c0:07:28:3f:44:95:60:e4:
bb:a8:9a:24:70:20:67:6e:4b:f0:77:53:89:88:f5:
a4:75:6c:dc:ba:d6:bc:f5:a2:22:23:e6:46:7c:98:
d7:e8:78:7e:07:8c:f6:13:97:0f:95:b4:e7:7e:66:
fa:c0:f8:98:ca:23:eb:8d:e0:16:1f:99:4e:76:63:
d2:0d:24:cc:26:b5:3c:c9:46:19:6a:35:c9:bb:e5:
df:1f:73:f1:fb:75:8c:17:cd:ff:2f:c9:3f:7a:24:
69:a0:b2:71:c6:01:78:6f:8c:0e:76:5a:b4:3e:5d:
2c:32:c1:22:69:7d:5e:49:e2:c7:29:b4:bc:95:18:
95:63:47:79:90:a0:bc:38:5f:27:02:d3:3c:3b:f5:
d3:e5:cc:b6:7d:6a:70:c3:b2:b3:94:9b:ed:dd:69:
70:e0:f6:ca:f5:88:3d:a2:db:ee:9f:81:ee:eb:0a:
6e:a6:b5:86:50:55:7a:61:d8:52:2a:1e:9a:ce:5e:
65:3e:6e:02:7c:5d:0f:54:7b:6c:bc:7c:84:75:c2:
db:1e:71:3b:fc:8c:12:a2:e6:aa:a8:1d:60:c7:11:
da:e2:7b:9b:fd:b4:e5:44:ff:8f:28:9f:b5:92:c0:
cf:4e:e3:3e:2a:33:e9:4b:e7:ee:4d:d7:af:cd:6b:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7F:46:4B:AC:BA:FB:6A:85:7B:60:15:1C:F4:DA:A3:0E:B6:9B:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B616278DFEF11EF81E15542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:f9:f7:a2:bd:39:79:aa:72:a5:09:b7:e3:61:7d:fc:a3:4b:
54:18:0b:a3:43:d9:2b:cd:47:04:ef:e2:59:94:3e:0a:8f:d0:
b1:91:37:bf:5f:40:46:c5:9b:a7:4c:00:bd:f1:b5:da:e6:ba:
de:78:f6:05:e0:2d:11:9c:e9:f2:0e:f9:a5:92:6e:30:e1:98:
ef:6f:ac:3b:52:5f:05:1c:9c:9e:71:86:2c:d7:bc:51:29:02:
40:3d:09:d8:dc:43:23:2f:2b:5d:b8:34:46:fa:d6:a0:5c:98:
24:8f:41:83:9d:2b:2b:11:ce:7b:5c:d1:fd:1c:8d:33:3c:57:
cf:b4:9a:58:d2:e6:a2:03:7f:d0:5e:e5:4e:79:43:12:97:ef:
74:d1:cf:27:76:e8:f8:8f:8b:25:f3:bb:81:6d:e1:b1:3c:ac:
bc:7e:b0:28:eb:81:8b:88:71:51:15:6b:a8:4e:65:3e:eb:25:
e0:7e:c2:1e:e8:86:27:35:2f:46:2e:18:26:9f:6b:7e:61:51:
af:22:76:1c:09:af:11:d3:4f:55:10:0b:59:0e:45:0f:85:ed:
e8:c9:87:28:23:16:7f:3c:4c:6e:ba:7a:76:bc:a5:fd:b9:8c:
fc:08:e5:76:68:8e:7c:05:91:32:6e:09:1a:a2:13:d6:38:2c:
12:0c:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:07 2025 by rpki-client