Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEA4A56D8E611EF9F11C849762E951A.roa
File: 8CEA4A56D8E611EF9F11C849762E951A.roa (raw, json)
Hash identifier: aLBV9CWWRa/K5JNZ8nIOWYooTWRM1lJ9YNZ8RK9y0A0=
Subject key identifier: D1:FF:E0:E1:97:5B:D6:CA:25:E2:EA:E2:0C:E8:FA:28:5C:3E:D1:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014012
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEA4A56D8E611EF9F11C849762E951A.roa
Signing time: Wed 22 Jan 2025 17:30:19 +0000
ROA not before: Wed 22 Jan 2025 17:30:15 +0000
ROA not after: Sat 15 Mar 2025 17:30:15 +0000
asID: 138915
IP address blocks: 154.206.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81938 (0x14012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:30:15 2025 GMT
Not After : Mar 15 17:30:15 2025 GMT
Subject: CN=67912b2b-1fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:5e:fc:48:d2:75:74:3b:42:a5:c4:38:9f:
dc:74:0b:74:0a:f3:fc:7e:b7:ae:0e:4f:73:84:3e:
7e:a8:3b:d0:a6:c6:15:57:b9:7c:9d:b6:b4:9f:00:
1b:fd:ea:f3:b4:95:24:ad:e0:39:3c:07:76:20:33:
2d:17:a5:9d:a1:45:b7:49:81:6d:56:52:5d:76:2a:
b5:c6:a5:a9:d4:e9:60:54:db:c9:80:3d:37:76:8d:
18:8f:41:3a:4c:ef:c8:7e:13:46:47:7e:ea:9a:4d:
47:01:16:6e:f5:7c:92:5c:eb:1c:c1:ee:73:97:cd:
f0:44:ed:aa:ac:2c:56:a3:97:01:8b:0a:49:98:f4:
6f:c8:f1:9e:f1:e4:f3:40:36:2e:34:72:1a:d9:00:
f1:1f:e6:f6:70:ec:2a:a1:76:03:7b:8a:e4:eb:16:
e9:65:80:08:1d:88:20:d6:35:51:28:94:3e:81:8b:
91:27:07:ce:3b:41:cb:6a:80:a9:e3:39:58:cb:83:
59:6c:c3:ef:0f:cb:44:4a:00:ee:09:c7:62:00:1c:
ae:37:b5:da:71:e5:fb:26:25:a0:77:1c:8a:c2:bf:
fa:2d:43:83:5f:76:17:b4:6e:25:ee:76:82:78:ae:
99:5c:8c:cc:3f:96:76:8b:bd:50:12:32:68:81:ec:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:E0:E1:97:5B:D6:CA:25:E2:EA:E2:0C:E8:FA:28:5C:3E:D1:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEA4A56D8E611EF9F11C849762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
61:61:80:6d:4a:fe:4b:98:de:b5:db:04:43:f3:6e:9a:2a:56:
be:5d:5d:3d:18:5a:8a:db:c5:73:43:f8:df:33:d0:35:b5:92:
70:7d:fc:05:85:8d:45:62:10:9d:95:8f:ba:b2:57:9b:86:ba:
ab:a1:c1:5f:48:36:68:77:3f:2f:ce:79:e0:01:d5:ae:27:91:
3a:0c:d5:09:cb:d3:67:59:4f:31:e9:3d:40:78:cb:97:e0:9e:
9b:39:d2:ee:4c:5d:68:b8:f3:75:6f:87:ef:df:8c:50:e3:de:
f1:e0:27:b3:4b:b5:78:54:31:56:58:bb:ca:cf:21:4c:54:2a:
d5:5f:25:2c:cc:c4:33:e3:23:14:17:29:07:ce:84:26:a7:72:
b8:fa:d4:69:80:d7:2f:38:da:45:8e:0f:10:11:1b:e8:9a:e4:
9a:02:5a:6a:d9:ff:49:58:e5:40:c8:7e:0b:aa:f7:46:3f:a8:
79:bb:c9:2c:5e:31:a3:2f:d1:3b:a8:4b:72:f3:66:22:09:95:
f9:e1:41:e5:35:7a:53:ae:a2:57:a4:9e:2b:80:00:1b:d4:98:
2c:fc:28:ea:c0:7d:8b:c2:c6:b5:5e:11:fd:a3:da:95:29:11:
47:15:0a:1b:18:73:c6:59:fd:47:8d:c2:47:8a:96:29:5a:b6:
12:a7:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:03:15 2025 by rpki-client