Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC578AACCC111EF8280FF9E762E951A.roa
File: 7EC578AACCC111EF8280FF9E762E951A.roa (raw, json)
Hash identifier: I8qpMYKAbVQClT7kX+kGy0MZLuX8NWeubM4B5UKrsdA=
Subject key identifier: F6:81:4F:B2:14:43:BC:10:85:9C:24:BB:E7:F6:D4:27:59:8C:1E:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013631
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC578AACCC111EF8280FF9E762E951A.roa
Signing time: Tue 07 Jan 2025 06:34:50 +0000
ROA not before: Tue 07 Jan 2025 06:34:46 +0000
ROA not after: Tue 11 Feb 2025 06:34:46 +0000
asID: 272854
IP address blocks: 154.194.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79409 (0x13631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:34:46 2025 GMT
Not After : Feb 11 06:34:46 2025 GMT
Subject: CN=677ccb0a-3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:82:e7:0e:1e:7f:5f:4a:cf:91:3f:e8:a7:
01:4a:f2:2f:e1:43:e7:25:46:27:a6:2c:ea:09:80:
df:55:f4:d0:6e:25:12:63:e6:2e:91:f5:b9:e8:d6:
83:c7:ad:c0:6f:5e:4c:7a:41:d6:91:9c:f6:52:5c:
72:a5:f2:4f:6f:e8:30:37:91:3f:4d:7c:f2:80:c5:
c2:ae:aa:f6:77:66:a5:5d:e4:2b:0c:68:2c:88:bf:
f9:2a:2c:b4:4d:bf:f5:91:00:cc:a3:fb:87:c8:4d:
ee:f1:a4:10:0c:be:46:ed:ad:54:07:e1:07:f5:2c:
6c:33:d5:10:09:32:5e:b3:75:77:8f:f2:41:09:d6:
37:63:55:e3:b1:ff:c6:18:56:38:c4:7a:60:12:6e:
ee:a7:15:60:45:b7:e2:85:59:c3:6f:35:5c:96:cc:
47:8a:91:ed:75:70:27:3e:a2:5d:7a:16:58:54:3e:
a0:59:fd:41:c6:2a:6b:aa:3c:ad:9a:80:cd:0a:2b:
22:1f:df:b3:f5:70:10:71:18:33:40:aa:74:bd:fc:
ce:81:bd:98:0d:02:88:0d:26:9b:a7:3b:f5:e0:f3:
ee:49:44:9f:e8:fd:82:70:bc:0e:58:eb:f5:67:0a:
8e:51:d4:68:89:23:fe:4d:68:36:e3:73:54:0e:0e:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:4F:B2:14:43:BC:10:85:9C:24:BB:E7:F6:D4:27:59:8C:1E:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EC578AACCC111EF8280FF9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:32:2d:37:a9:32:e3:53:2d:ad:05:f9:da:68:d2:00:b9:15:
2e:ed:ef:18:28:96:7b:a3:53:a3:03:f5:20:ed:7a:3a:62:9e:
d9:99:77:51:8c:22:fd:0f:1e:53:5e:85:58:ac:80:56:8e:f9:
1e:8b:1d:ed:1c:58:18:2a:fd:39:c1:e3:e1:84:ca:5e:8f:0d:
d0:2a:e4:61:5b:11:8d:6c:f4:27:52:06:4b:81:60:43:80:46:
f8:b4:3a:06:ad:1e:34:6e:0b:c4:c3:81:ab:88:15:ac:e4:b8:
60:a3:d4:d3:ef:3e:bd:fd:02:8b:c7:c6:ab:13:12:c5:8d:c0:
aa:06:c6:ed:6f:b7:e2:36:16:dd:79:65:bf:ea:4b:1a:ee:7b:
0f:c1:c1:2d:3c:e7:7b:f1:dc:ed:99:e9:40:d5:02:bf:f0:7d:
0a:9c:d9:9a:74:3b:55:f2:5a:ff:56:43:ed:61:a6:33:b8:e4:
45:25:9e:4a:86:ae:de:c7:77:55:ab:5c:bf:fa:e5:87:d2:5c:
06:59:e2:b8:07:16:bb:52:92:99:b8:51:91:e0:45:bf:2c:c7:
50:c3:d6:d9:d5:39:a8:2f:40:cc:3f:4a:dc:ff:84:50:80:01:
4c:c4:b5:5d:32:e0:56:b0:06:fe:f2:61:34:2b:aa:1b:d8:93:
71:ee:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:07 2025 by rpki-client