Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E127F7EDA5911EF8E4C5993762E951A.roa
File: 8E127F7EDA5911EF8E4C5993762E951A.roa (raw, json)
Hash identifier: Rm1z7ZOYYQcOq/rMoleQWcOPEDdf8qIgb04gPbYAocA=
Subject key identifier: 26:C6:CA:F3:F9:50:E0:63:6F:CA:8A:D7:EC:25:33:F9:90:A6:E1:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E127F7EDA5911EF8E4C5993762E951A.roa
Signing time: Fri 24 Jan 2025 13:46:04 +0000
ROA not before: Fri 24 Jan 2025 13:46:00 +0000
ROA not after: Sat 01 Mar 2025 13:46:00 +0000
asID: 44559
IP address blocks: 154.198.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83884 (0x147ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:46:00 2025 GMT
Not After : Mar 1 13:46:00 2025 GMT
Subject: CN=6793999c-4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:e0:7c:01:34:f4:ae:af:be:2d:05:b8:51:
92:a4:56:bb:37:c4:82:b0:d2:79:9b:bc:94:f8:d6:
9d:e4:67:ae:8d:df:41:b5:f2:de:53:ce:bd:7c:a8:
1e:70:d1:6d:c8:64:a0:98:ef:48:79:3a:fc:13:ba:
60:19:cc:55:95:fe:1c:1a:e7:70:11:55:a9:02:b7:
3d:69:9a:05:b5:a0:8e:4f:d8:ae:9e:f8:05:22:c3:
e8:ce:dc:73:24:64:6c:e6:08:7d:85:fc:48:d1:a5:
fe:72:d8:a1:a3:55:f0:ba:2a:5f:fc:fc:ff:aa:6c:
3c:65:4a:06:7a:64:64:ec:b2:bf:fd:ec:a6:e5:00:
50:e0:d4:dc:b2:8a:a6:8d:a2:8a:c6:af:f3:96:d9:
89:75:45:dc:5f:74:bf:b7:c9:cb:aa:70:cc:b2:6d:
d4:b1:45:84:54:f9:43:db:de:d0:64:e4:3c:73:65:
59:97:3a:9e:df:75:c8:8d:f0:a2:a0:57:45:94:1c:
22:78:8a:cc:c7:72:e1:d4:85:1c:0d:f7:96:ed:60:
15:ea:35:4b:8d:4e:46:6d:46:36:76:15:19:f7:61:
0e:99:f1:b1:94:ba:3b:5c:82:83:25:4e:cb:d9:42:
cf:70:ed:a5:a7:db:dd:f8:30:78:99:70:cc:82:a7:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:CA:F3:F9:50:E0:63:6F:CA:8A:D7:EC:25:33:F9:90:A6:E1:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E127F7EDA5911EF8E4C5993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.39.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1b:01:92:78:c7:08:2e:7f:72:d1:85:09:4a:ea:93:cc:b9:
2d:b8:e9:0f:94:c9:f2:da:3f:6a:b3:4f:c6:f9:e2:2b:82:f9:
f3:97:8a:2a:bd:a0:c5:3f:5c:1a:1a:b9:04:ab:20:cd:75:a4:
c4:6a:77:8d:40:0b:20:bb:09:28:0c:d5:06:88:6a:37:d6:73:
36:05:d4:f5:4a:12:db:dd:eb:10:c9:84:c8:86:d0:4d:63:24:
ad:a4:84:fa:05:90:59:58:8e:47:41:c5:bb:3c:27:ee:b4:68:
c9:0e:dd:61:1f:89:cb:d9:d0:8a:c7:16:96:ed:d1:7f:21:26:
65:4e:67:21:1d:41:60:e4:36:b0:45:4f:18:53:5e:01:ca:e3:
50:d8:60:26:84:10:94:67:3a:0a:b8:8a:03:be:63:9a:74:d4:
59:d4:a7:b1:17:ea:f5:c5:db:27:79:76:6d:ee:ad:8d:6e:d5:
c4:d9:d0:d9:18:82:e7:2c:0a:ae:a0:cf:82:2f:b4:9f:8e:c2:
71:cd:f2:fe:0a:88:04:77:13:b5:bb:b6:3a:5a:cb:bc:7b:c5:
df:56:f8:9d:79:ed:d3:97:7f:f3:c2:a9:1f:26:83:94:b7:01:
28:3f:65:8b:3a:00:24:b5:84:11:35:fa:36:d4:47:3e:da:c6:
29:82:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:29 2025 by rpki-client