Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4EA722C6CC11EF8907F7B6762E951A.roa
File: 8B4EA722C6CC11EF8907F7B6762E951A.roa (raw, json)
Hash identifier: XEG9npXpd166tAFutSZnt+XmWYbEHEwvCtHsNj5wjhk=
Subject key identifier: 65:10:4F:C3:41:2F:86:75:C5:DB:26:0D:5B:DD:C9:2D:84:7D:A1:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4EA722C6CC11EF8907F7B6762E951A.roa
Signing time: Mon 30 Dec 2024 16:38:48 +0000
ROA not before: Mon 30 Dec 2024 16:38:45 +0000
ROA not after: Sun 02 Feb 2025 16:38:45 +0000
asID: 399195
IP address blocks: 154.193.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78050 (0x130e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:38:45 2024 GMT
Not After : Feb 2 16:38:45 2025 GMT
Subject: CN=6772cc98-129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:ff:cb:36:f2:fd:07:75:ad:bb:d3:8c:06:
fa:1f:27:21:02:63:0c:77:b1:0c:56:fe:9a:4a:b9:
dc:b4:6c:8f:a1:76:52:93:16:f4:3f:62:81:41:8b:
38:8e:66:5c:a7:9a:d9:82:97:1e:7c:38:42:04:50:
50:0d:5c:19:49:e5:50:93:87:d1:ef:e6:d7:6b:cf:
07:13:6e:db:cc:d3:2e:d5:c5:a8:80:c9:95:ac:6a:
85:a5:3c:f2:57:45:bf:a2:58:17:4b:c5:cd:cb:f8:
85:92:54:a6:30:52:fd:ee:a1:05:25:90:fa:e7:15:
37:6e:29:c0:8a:10:0c:71:9f:70:be:79:b5:b2:e4:
df:37:e1:3f:08:b1:f5:ae:9d:d0:f3:ce:d9:63:bf:
f8:21:b0:38:2f:e8:12:aa:5b:81:a0:0a:5a:9f:ca:
58:46:6e:0e:94:db:26:70:60:c3:ec:5a:53:9a:87:
86:d6:9c:2f:14:11:6c:0c:05:b7:85:7a:3b:f4:31:
bc:e6:09:de:5e:12:43:a9:fc:89:67:cc:5e:4a:31:
d9:45:95:96:90:1a:1e:da:6a:e6:7e:60:36:8d:e0:
01:2d:6c:51:b3:5a:a4:f5:ce:c4:02:95:55:52:11:
48:c8:f7:4a:29:af:1e:01:fe:76:d1:a2:85:74:c3:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:4F:C3:41:2F:86:75:C5:DB:26:0D:5B:DD:C9:2D:84:7D:A1:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4EA722C6CC11EF8907F7B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
Signature Algorithm: sha256WithRSAEncryption
17:0b:3c:93:20:24:4b:e5:42:11:89:ac:23:d7:8d:03:c4:a9:
09:3e:4c:45:e3:40:ee:4d:f6:b6:05:9c:21:06:42:65:ef:af:
d9:a2:4a:43:eb:85:87:3e:7b:ae:8d:9b:56:74:56:3c:cf:ad:
bd:1c:7f:34:f7:7c:22:a7:05:bd:2c:55:12:88:ec:8b:c7:f0:
78:ca:5a:e4:67:91:42:3b:a3:1e:2b:05:51:cb:4a:d3:d5:be:
bc:6e:d0:07:1c:40:ff:5a:7f:87:0b:e2:ac:2c:31:5e:09:6f:
e7:dc:bf:24:84:70:3f:aa:82:bd:b6:09:88:a7:43:36:be:51:
2f:91:40:43:a5:97:3e:2d:e1:41:8b:3d:91:88:67:79:ae:53:
8d:60:74:75:20:da:f7:6d:2b:d2:c8:c6:fe:39:2a:05:54:3a:
4f:c8:5c:6f:ff:64:d2:98:c3:b7:63:f6:b3:1d:82:e9:53:5b:
e0:61:92:c9:c3:81:d6:a0:ad:1c:8a:9f:7c:88:76:08:ae:60:
b1:d0:8a:bb:72:3e:a9:d7:2b:ca:bc:eb:8a:62:61:23:e0:a8:
53:2e:35:2b:d5:b5:1f:4b:52:38:e4:5f:91:0a:94:2a:af:33:
00:7b:9b:43:20:30:d5:bb:52:16:fb:8e:9a:9b:bf:05:ab:51:
1e:b3:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:52:19 2025 by rpki-client