Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D52B9E4DA5611EF88505880762E951A.roa
File: 8D52B9E4DA5611EF88505880762E951A.roa (raw, json)
Hash identifier: wa6/4eqMt71XZr1okAJ2fprdeZFeV3RleICKI20PkJM=
Subject key identifier: E0:06:E0:2A:DF:E8:2F:1C:6F:29:E7:86:4B:22:AE:8C:1B:44:CA:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01476D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D52B9E4DA5611EF88505880762E951A.roa
Signing time: Fri 24 Jan 2025 13:24:35 +0000
ROA not before: Fri 24 Jan 2025 13:24:31 +0000
ROA not after: Fri 28 Feb 2025 13:24:31 +0000
asID: 62240
IP address blocks: 154.194.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83821 (0x1476d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:24:31 2025 GMT
Not After : Feb 28 13:24:31 2025 GMT
Subject: CN=67939492-0479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:93:d6:b9:cd:86:a3:59:92:ad:76:3f:a4:
e6:09:a5:82:31:f2:5f:e1:93:48:4c:46:c7:b5:6d:
4c:13:3a:3a:17:55:e4:3f:3b:8c:64:51:c5:7d:c6:
06:54:a5:29:2e:53:05:03:23:70:57:6f:57:e7:0b:
fe:dd:0c:3c:5f:37:7f:d5:3e:08:dd:2a:79:12:3b:
1b:0a:5f:e8:f7:64:c1:6e:12:d9:20:3c:42:e7:0f:
06:bc:50:04:1e:c7:c0:90:5c:6d:d8:9d:c8:6c:96:
38:9e:bb:93:81:b2:11:fb:82:3e:ca:9b:f8:c1:6c:
45:66:21:6a:10:13:37:a1:32:43:ea:90:43:6f:6e:
93:2e:cc:d5:ea:7e:74:70:5c:67:39:04:5c:f0:c1:
1c:8c:5c:8d:58:86:51:69:b8:94:08:f9:05:8a:31:
3c:44:90:fb:45:a7:52:81:fe:15:f7:c3:14:45:ce:
e8:a7:54:a8:f3:e4:4c:46:f5:e1:e9:97:e0:fe:7e:
a3:8b:b7:1d:30:93:a3:28:ee:cb:8e:8b:1d:84:e5:
87:f9:d9:a6:c7:d8:bf:ea:8d:a5:03:f2:b2:50:56:
92:b4:0e:b8:d7:a0:46:47:8e:bb:a3:d5:f2:a9:b5:
37:f6:ec:0e:eb:4d:56:2c:46:4f:44:2f:ba:39:12:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:E0:2A:DF:E8:2F:1C:6F:29:E7:86:4B:22:AE:8C:1B:44:CA:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D52B9E4DA5611EF88505880762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/21
Signature Algorithm: sha256WithRSAEncryption
d2:9f:34:e0:36:48:d8:34:26:13:45:49:a2:cd:e3:10:81:e4:
02:6a:f4:1c:1a:ee:c7:31:16:67:e5:ce:53:c4:1e:ee:dc:68:
fc:6b:c4:69:af:a4:3c:7f:6d:e5:54:7a:89:56:de:39:7c:97:
ce:35:a7:ca:64:bb:66:b4:08:1d:0f:48:26:a4:9b:61:71:bf:
82:ff:e0:ee:40:8a:a7:65:b1:58:e7:d2:50:7c:5d:6e:69:45:
a2:7c:e8:50:a1:3d:9e:6d:8c:bf:ec:ec:78:1a:da:cc:45:3b:
6b:69:53:18:82:9c:de:9e:26:61:35:76:dc:f6:44:ed:a3:1c:
5f:f4:05:b4:a4:7e:fa:bd:87:0f:98:6c:8c:13:c6:57:6c:9f:
f6:f4:e9:ed:f1:8c:64:b2:2a:f2:dc:ef:15:1a:43:1d:60:58:
6e:44:2b:b7:8e:39:6e:59:7d:03:58:47:60:28:ff:f7:51:cd:
54:01:28:e2:4d:51:b3:4a:0d:44:e1:61:4f:a5:01:86:c3:70:
ea:8e:81:3a:9f:1e:00:64:87:23:b6:62:45:8c:03:30:2b:f2:
17:77:4a:7b:44:46:77:d5:99:c7:34:7e:be:c9:08:37:4c:04:
c4:4d:63:a2:92:8d:20:9d:8f:96:9f:29:96:b3:4f:48:4d:97:
5c:89:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:54 2025 by rpki-client