Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2433AECBE411EFA19735A4762E951A.roa
File: 8F2433AECBE411EFA19735A4762E951A.roa (raw, json)
Hash identifier: 8+qyg2BXog/5iuEIEKU/RGROSENKWozgxT1NXM0cLWQ=
Subject key identifier: DF:33:6C:A0:76:A8:96:B1:E1:97:97:46:3B:1C:52:23:5D:FC:EF:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013577
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2433AECBE411EFA19735A4762E951A.roa
Signing time: Mon 06 Jan 2025 04:13:19 +0000
ROA not before: Mon 06 Jan 2025 04:13:15 +0000
ROA not after: Sun 09 Feb 2025 04:13:15 +0000
asID: 11404
IP address blocks: 154.217.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79223 (0x13577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:13:15 2025 GMT
Not After : Feb 9 04:13:15 2025 GMT
Subject: CN=677b585e-d8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:03:7a:fe:0e:3d:84:90:63:15:1e:48:68:
f9:ed:3c:0c:bb:4d:84:64:dd:82:77:38:9b:a9:cf:
02:6c:86:f2:a8:60:3e:fa:bf:dc:5f:58:71:e3:fd:
38:be:3f:ce:ac:30:78:17:98:21:bc:6e:86:f5:32:
b8:c9:d7:28:55:03:a6:91:d8:31:36:e4:7a:1d:38:
fa:82:29:42:3a:98:5f:30:68:7b:ab:5d:09:c9:ad:
24:26:23:76:92:13:b3:77:e3:8c:d5:fb:6e:ef:5a:
0c:90:32:91:93:e9:4c:d1:9f:64:29:06:5b:7f:e9:
7d:df:5c:ca:04:8b:d6:3a:06:ee:8b:1e:c2:aa:b1:
93:6c:26:b3:7e:cb:67:16:37:cd:2f:9a:56:d9:87:
0e:7c:15:34:9e:20:17:1c:8c:5a:24:9f:61:ad:1f:
47:e2:08:f1:99:7b:96:4a:04:4f:98:59:86:1f:82:
59:15:06:00:d7:1d:9f:5f:ee:c1:96:cc:53:3d:06:
24:ab:2f:f5:9c:bc:87:0c:fe:a0:4b:ea:a8:f9:02:
77:5c:fa:46:16:30:4d:2d:a6:c5:5b:9a:e5:35:12:
77:33:0c:28:a4:de:dd:f5:9b:de:03:9e:38:2c:0e:
4a:b1:04:93:2e:01:9b:a4:f1:2a:a0:ca:d9:0a:a4:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:6C:A0:76:A8:96:B1:E1:97:97:46:3B:1C:52:23:5D:FC:EF:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F2433AECBE411EFA19735A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:2a:48:6d:0d:da:96:a5:4d:b4:65:88:38:a5:fd:9d:0b:38:
21:16:e0:f3:89:1d:fb:58:3e:f3:d2:25:02:a2:3a:de:8e:d6:
ab:4e:a2:ca:34:4f:31:a3:ac:b0:82:56:72:e7:44:cd:b7:c9:
93:a1:d8:b7:8f:ee:45:7a:c6:94:2a:b3:5f:83:e3:32:b1:3b:
2b:0c:f8:67:36:e2:4a:c8:ca:ce:c8:da:af:5d:ee:ae:1c:82:
c5:eb:65:3f:4d:92:fa:65:79:8e:c6:56:88:f2:06:53:4c:f7:
03:2d:59:f4:e1:95:9b:14:f1:65:61:0c:4a:b4:8d:cb:82:34:
38:84:8b:a9:63:5d:5d:ec:a4:f1:1c:92:a1:f7:0e:3f:c3:10:
84:05:dd:40:c3:a6:20:4a:77:8a:eb:71:0a:78:6d:67:53:d8:
7c:c8:54:54:29:c7:93:ef:15:87:39:0e:1e:47:c0:c6:8e:d0:
08:6d:3e:2f:64:8e:05:c8:e1:bd:c6:19:11:60:c7:a0:5f:c7:
de:95:c7:96:86:10:d3:34:4c:a6:82:3d:35:5a:cb:66:2d:36:
b3:30:9a:2b:a6:a8:bc:3c:60:e3:3a:85:54:61:73:af:98:c6:
b5:d2:06:20:fb:d4:cb:d7:6f:8f:cc:f1:cf:eb:e7:02:be:00:
88:b3:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:29:57 2025 by rpki-client