Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CD28DEDFFD11EFBFE642A1762E951A.roa
File: 84CD28DEDFFD11EFBFE642A1762E951A.roa (raw, json)
Hash identifier: UwaFIXfesupv36i2JYEIwS0pTJV0eo1ASLNBC/aqD+I=
Subject key identifier: 0D:1C:A8:DF:80:B2:73:45:98:35:71:55:C0:6F:EF:18:A7:5C:BF:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CD28DEDFFD11EFBFE642A1762E951A.roa
Signing time: Fri 31 Jan 2025 18:02:22 +0000
ROA not before: Fri 31 Jan 2025 18:02:18 +0000
ROA not after: Mon 03 Mar 2025 18:02:18 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85571 (0x14e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 18:02:18 2025 GMT
Not After : Mar 3 18:02:18 2025 GMT
Subject: CN=679d102e-54a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:34:62:06:31:8f:40:07:52:16:9e:d0:69:d2:
ef:ae:25:82:16:00:18:ad:10:af:31:d3:a7:f2:bc:
18:7c:4f:1a:11:48:a5:56:ce:ba:b1:60:ce:6f:71:
33:01:16:39:fc:9e:e3:d5:b2:25:70:dc:99:f8:95:
15:d0:33:4f:83:7c:2e:9c:26:bc:b8:00:3d:c0:40:
72:a7:ba:12:c1:4a:df:8d:9c:ba:19:79:30:f4:aa:
88:09:c0:a8:ff:f8:30:59:c9:95:db:ce:71:90:c2:
66:f0:04:9f:26:3d:41:27:6a:b7:c6:29:f9:10:c5:
cd:e4:d6:97:6a:af:b3:20:64:92:e4:2a:46:33:0a:
02:96:63:88:c4:01:9e:6d:06:24:74:57:2c:1b:5d:
fa:12:36:02:6b:67:8d:48:3e:53:6e:87:48:85:1c:
7d:94:d6:73:a1:d1:1c:c6:b2:a7:5a:8c:92:ce:28:
52:e6:22:12:2d:83:8e:b6:7e:b7:58:ea:7a:51:e8:
80:b6:9c:17:c1:9e:ce:69:d7:77:1f:b6:3a:97:3d:
35:a8:ce:6a:63:e4:7d:f8:93:4e:3b:b9:c4:69:e4:
d6:a3:19:d8:e0:f9:d0:c0:5a:05:27:8c:5a:80:ec:
0a:5b:38:ec:6f:ad:f2:c4:f2:7f:65:fc:49:f1:f9:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:A8:DF:80:B2:73:45:98:35:71:55:C0:6F:EF:18:A7:5C:BF:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CD28DEDFFD11EFBFE642A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
11:85:a9:c5:77:9d:c9:88:26:5c:62:a4:b3:d9:8b:20:5c:eb:
c1:85:fd:84:38:a0:d2:9b:70:66:93:98:9f:fe:2e:6c:e2:87:
d4:ec:78:b1:1a:ca:0d:21:d8:f3:40:2e:dc:dd:00:fa:72:2f:
1d:35:4f:68:5b:86:fb:af:2e:62:dd:cb:52:b3:57:f0:48:00:
c1:42:41:16:1e:05:19:d3:28:a4:a1:e9:f1:4f:c0:d5:02:be:
1c:92:ab:8e:94:05:3d:4e:6c:a8:8f:74:f1:f7:57:27:e7:5c:
15:42:c4:6e:00:e6:5c:ac:1a:8a:a7:ec:06:de:da:20:81:26:
06:26:4c:a0:91:d7:11:f5:2e:58:db:24:3c:8f:0a:11:4e:31:
8f:83:78:83:20:ec:81:fe:c3:f2:4e:a9:c0:4c:f0:8d:11:2e:
e9:c2:06:1b:d2:ac:fb:ca:5f:ba:81:0b:8e:c7:8c:ee:f2:56:
71:c8:6d:00:cd:2b:9a:e6:ae:26:41:b7:16:1e:32:aa:33:90:
36:03:16:0b:2c:ce:7f:9f:24:b0:bb:79:28:20:26:c8:05:14:
6b:dd:00:dd:4c:a3:3c:1b:70:47:bc:78:1a:a4:7c:59:46:81:
c9:d6:a4:13:82:b1:0f:c6:79:29:ba:8d:ec:93:cb:91:47:d0:
ed:85:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:10 2025 by rpki-client