Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D446D50B11EF9C02DB76762E951A.roa
File: 7ED5D446D50B11EF9C02DB76762E951A.roa (raw, json)
Hash identifier: xq4W67+LqLM/XwWLosfEhdU3wuiJhzQc04+2EYHdOrA=
Subject key identifier: C9:87:8B:83:F5:6A:F3:37:C9:7C:85:6F:13:A4:C0:2A:74:A7:BD:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D446D50B11EF9C02DB76762E951A.roa
Signing time: Fri 17 Jan 2025 19:44:42 +0000
ROA not before: Fri 17 Jan 2025 19:44:39 +0000
ROA not after: Sat 22 Feb 2025 19:44:39 +0000
asID: 139646
IP address blocks: 154.208.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81203 (0x13d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 19:44:39 2025 GMT
Not After : Feb 22 19:44:39 2025 GMT
Subject: CN=678ab32a-54eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:bf:44:43:c7:34:25:a2:a8:14:18:26:8e:
eb:b3:d2:38:ea:da:f6:33:c1:cb:03:ac:52:5e:de:
a9:43:5c:f2:9f:94:02:86:2c:ac:cd:32:40:d8:92:
ca:67:b0:f0:f3:0b:46:7f:72:fc:a0:0d:90:79:27:
3b:00:4b:ae:19:61:e8:ca:90:9d:ae:54:a0:33:9c:
2e:4a:60:89:9d:0d:43:1f:8a:b5:17:40:a3:fd:d4:
a5:56:65:7f:18:7c:8f:f5:67:11:34:7e:78:b9:39:
60:7b:19:e9:64:fe:36:e0:f1:e6:6f:18:be:85:93:
84:e6:f3:87:68:b9:22:65:2d:3b:86:bb:65:05:77:
47:2c:b8:9b:cb:9b:cf:8a:f7:af:56:54:34:e1:b3:
05:80:32:61:d4:9e:d0:7f:1b:33:91:c4:35:a6:61:
0a:78:13:94:a9:91:09:93:4b:59:97:85:8a:5b:c1:
93:59:a5:6b:70:60:61:db:1f:3a:d3:dc:76:ca:c5:
fb:61:08:9c:a6:b0:ca:bc:57:69:10:01:4e:00:65:
2a:07:9e:34:df:35:93:5d:43:95:e1:1b:25:04:f2:
11:19:a1:8a:b2:9a:24:ea:6b:93:da:04:fb:c4:1b:
04:98:db:a0:37:43:7e:27:1b:7a:26:01:7a:b7:87:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:8B:83:F5:6A:F3:37:C9:7C:85:6F:13:A4:C0:2A:74:A7:BD:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED5D446D50B11EF9C02DB76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b4:15:a7:2c:a5:ca:60:2b:a8:d7:ea:2d:29:a7:38:71:01:
03:fe:ea:43:44:e5:8b:11:60:52:5b:15:8b:c0:d0:46:01:7d:
d9:8b:bc:46:5d:56:5e:ec:ac:66:28:6b:9e:a8:cc:8f:ac:44:
49:f1:d5:bc:62:b0:e4:74:e2:21:51:7f:6a:61:f8:eb:a8:87:
ff:7e:f6:64:cd:5b:11:54:b0:d4:da:16:57:bc:39:4f:85:96:
33:e6:38:66:24:a6:af:7a:d8:12:4c:c4:0c:05:85:b9:7f:7e:
5b:20:70:88:64:18:13:aa:59:e6:cc:8d:f6:a9:af:0c:fe:54:
31:9c:20:43:e5:6d:c6:16:4f:d4:a3:86:9e:6b:ff:a8:ca:7f:
84:37:2f:6a:49:1c:ce:ed:79:e0:6f:e0:78:42:51:cd:36:f9:
ce:e9:47:ba:e3:a0:fa:54:f5:b9:4a:c5:ea:a2:e0:5d:73:f6:
fd:0b:02:13:bb:60:4e:80:9e:55:5f:ac:b7:8e:8d:51:b5:c1:
46:21:40:d1:60:2b:47:1c:63:98:ef:a2:96:97:cd:7b:6d:af:
82:09:89:89:12:64:9b:85:f3:3b:29:2e:07:44:c0:8b:1c:3e:
fe:41:bf:74:91:95:63:1a:55:93:bf:c4:3b:c3:6e:a1:38:be:
b6:79:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:36 2025 by rpki-client