Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEF1606CAD211EF88A9024F762E951A.roa
File: 8DEF1606CAD211EF88A9024F762E951A.roa (raw, json)
Hash identifier: aY8PlGKwOKwg96fjQf5OCZzV4Q0dlZDxVDSMYNN2CJQ=
Subject key identifier: 66:E6:4C:80:66:96:5F:2F:EB:85:7A:C8:27:90:9A:E6:DD:77:10:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01351F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEF1606CAD211EF88A9024F762E951A.roa
Signing time: Sat 04 Jan 2025 19:31:55 +0000
ROA not before: Sun 05 Jan 2025 19:31:50 +0000
ROA not after: Sun 09 Feb 2025 19:31:50 +0000
asID: 11404
IP address blocks: 154.217.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79135 (0x1351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:31:50 2025 GMT
Not After : Feb 9 19:31:50 2025 GMT
Subject: CN=67798caa-309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:b9:e5:86:b9:e8:3d:21:ee:34:2d:45:ad:
a9:4d:bc:6a:3a:bc:b0:97:8f:a4:dd:8b:8f:39:00:
9e:76:90:0c:13:9c:2b:32:68:76:70:86:bb:72:c6:
43:2e:bb:83:ce:28:4c:8b:c6:e6:59:2f:64:03:d7:
34:d0:8a:19:ea:e4:be:8d:1c:96:77:c8:2b:e2:f9:
5c:42:ab:70:a5:b1:f7:46:43:39:41:d7:95:87:e0:
dc:03:48:76:29:2e:24:ef:31:5e:9e:5d:8c:ef:89:
4f:2c:a4:99:80:00:f5:5c:29:af:19:e4:16:dc:71:
c2:e3:6b:e2:aa:71:31:bd:97:58:a8:1e:36:2d:07:
f6:63:07:6b:ff:5d:48:9a:3c:cb:9d:52:69:d9:df:
43:6c:4f:50:1b:3a:48:73:9d:ef:fc:2a:d1:49:0e:
9b:5e:1d:85:91:a9:1e:7e:e3:20:af:b3:e4:f9:16:
d7:51:b3:c3:07:a0:f9:e7:06:16:2e:0b:df:04:10:
d5:2a:6b:5a:d3:6b:c7:3a:58:05:af:64:2f:47:e2:
85:90:5e:98:e0:26:50:26:ea:85:1e:47:3f:96:45:
03:e1:bc:b1:c4:d0:f8:31:4a:5c:b4:5d:21:50:96:
d0:f0:7d:da:1c:ed:cd:74:1c:92:72:5a:71:de:3e:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:4C:80:66:96:5F:2F:EB:85:7A:C8:27:90:9A:E6:DD:77:10:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DEF1606CAD211EF88A9024F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
68:f0:26:46:e9:00:b6:bf:a6:08:fe:ae:bf:f9:1d:89:a1:67:
39:84:54:a5:5b:25:51:68:3d:b0:73:d7:4e:7b:8c:f2:83:d8:
a3:d5:b4:df:dd:89:59:0f:5d:a2:6f:48:5b:9d:f9:e8:da:d8:
56:16:74:ea:21:ee:d1:6a:65:68:01:4d:d1:14:ef:ed:d2:ca:
da:2e:6e:70:0e:15:63:5e:f6:57:88:44:14:05:bf:72:a3:1e:
bb:7a:19:3f:fb:df:bf:18:af:a8:52:0f:92:c3:6b:24:90:c6:
46:68:9c:92:06:9d:e0:c5:30:e2:50:7b:b0:41:43:83:d7:05:
ee:31:73:e5:1e:30:73:a3:49:96:0c:37:97:bc:31:7a:21:5e:
76:fd:26:25:8e:bc:1d:13:59:87:df:4e:6d:1d:37:c2:ef:f4:
a6:05:c7:4a:af:f4:ce:15:ad:3a:d2:20:62:14:88:b9:9a:60:
17:16:7d:83:c9:c7:78:51:20:1d:05:83:6f:ca:58:98:23:cd:
06:04:c8:5a:d7:ea:20:cc:fc:1e:6f:3e:17:f6:2c:89:db:7b:
4d:fb:25:25:1e:a4:8a:03:41:80:dd:fa:de:20:aa:4b:d1:f9:
1d:b4:d1:6b:ad:f1:1d:2c:38:8c:90:34:9b:64:5e:69:7e:9a:
61:9a:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:57:36 2025 by rpki-client