Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8418288EDCBB11EFAA11AEA8762E951A.roa
File: 8418288EDCBB11EFAA11AEA8762E951A.roa (raw, json)
Hash identifier: 5WGvoQULC2h+y/yiTnY4XvrzEuZlWlkEVzapj5VrnPA=
Subject key identifier: 14:FE:28:08:8D:C1:4D:E7:F3:20:08:00:D7:7B:89:33:E0:52:4C:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8418288EDCBB11EFAA11AEA8762E951A.roa
Signing time: Mon 27 Jan 2025 14:32:22 +0000
ROA not before: Mon 27 Jan 2025 14:32:16 +0000
ROA not after: Sat 08 Feb 2025 14:32:16 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85013 (0x14c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:32:16 2025 GMT
Not After : Feb 8 14:32:16 2025 GMT
Subject: CN=679798f6-8e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:81:52:d2:26:db:e7:15:7b:70:c0:be:d3:
1c:92:9f:3d:ae:b8:b5:f7:2f:8f:33:91:c1:54:cd:
8b:ab:c3:eb:0d:3c:14:6a:47:60:fd:9d:8a:99:e7:
21:2d:96:be:4a:bd:2e:93:10:3c:eb:e3:82:ec:8b:
53:6a:a1:cd:08:88:d0:f7:7b:d8:47:a5:79:c9:aa:
b6:43:af:29:c2:20:11:fb:bf:87:81:d2:63:eb:63:
19:5a:49:88:62:e4:4d:b7:ac:75:26:2c:a1:7f:76:
69:6e:98:92:33:96:63:97:b6:7d:fc:91:b0:f7:c8:
73:ae:37:47:8a:bc:c1:82:95:c6:a7:18:8b:f2:79:
9e:4c:f9:cf:bd:21:62:87:55:1d:91:df:6f:85:67:
5d:06:e3:8f:94:c6:ce:8a:7b:aa:6d:9f:de:34:30:
32:b9:79:da:df:3d:3a:96:26:e0:92:7a:5c:20:74:
5a:7e:f2:51:75:d7:cf:f5:1a:da:b6:ed:cf:e0:5c:
74:85:9b:16:09:eb:91:4e:0d:37:9d:07:3c:68:81:
0f:65:8a:99:17:c8:0a:3c:32:0a:41:87:82:dc:af:
9f:a7:9d:69:94:7c:7c:eb:63:ea:ef:1a:ce:06:55:
d1:a7:0a:2a:91:32:9c:aa:0c:44:8f:54:b3:a4:62:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:28:08:8D:C1:4D:E7:F3:20:08:00:D7:7B:89:33:E0:52:4C:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8418288EDCBB11EFAA11AEA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
82:5e:2f:00:d6:b7:60:2b:96:1f:d6:66:2d:65:09:3a:41:63:
16:8f:76:eb:71:46:69:db:8d:c5:f5:59:b8:5f:f9:01:1d:8c:
c3:6c:5c:a9:89:11:87:9e:31:ef:a0:67:ac:be:7c:66:b7:ab:
34:5f:c1:12:d4:a0:26:7e:2f:01:60:5d:bb:f8:6d:47:dd:ea:
66:59:e7:de:3a:8b:5b:b8:12:6b:98:29:59:e4:ac:45:3d:ee:
db:74:55:43:38:0c:65:2c:5d:ee:db:0d:0f:ab:d1:5b:33:8a:
83:b5:69:a2:d1:b9:6d:b4:7d:ba:8d:d4:4a:b2:d1:ac:9d:69:
2a:d3:77:e9:a0:3a:a9:25:a2:24:1b:5c:b1:b4:86:c1:5f:d1:
a5:b5:6b:01:61:ff:64:ff:52:0e:a6:e5:de:b3:48:77:8a:95:
22:e1:63:50:d1:85:20:ec:7c:ce:65:e3:cd:11:ab:56:16:bb:
64:67:ce:3f:db:56:58:a6:ca:0d:93:5a:79:ae:44:13:05:ff:
37:32:1e:e3:e7:49:2f:99:48:88:58:86:93:08:ff:82:b0:0e:
ea:b7:f7:8e:81:57:c0:40:4c:40:1d:c7:7f:77:3c:58:fd:1a:
a0:f9:39:dd:cb:a6:0e:72:d4:88:ab:ac:c7:fa:62:13:f6:ab:
25:dd:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:43 2025 by rpki-client