Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8DA324DD6511EF8E8F3AA6762E951A.roa
File: 8F8DA324DD6511EF8E8F3AA6762E951A.roa (raw, json)
Hash identifier: 7HdZNWBW8JgknpftNiIAfQ358I9FqhPpA9OwZ5stsag=
Subject key identifier: EC:BC:EE:D3:6C:D6:0A:FB:7B:58:05:22:AA:B7:87:DD:5B:9C:48:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8DA324DD6511EF8E8F3AA6762E951A.roa
Signing time: Tue 28 Jan 2025 10:49:34 +0000
ROA not before: Tue 28 Jan 2025 10:49:31 +0000
ROA not after: Fri 14 Feb 2025 10:49:31 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85200 (0x14cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:49:31 2025 GMT
Not After : Feb 14 10:49:31 2025 GMT
Subject: CN=6798b63e-2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:a4:7c:4f:21:c5:1c:e3:8a:ad:71:82:d9:
2f:6a:08:25:19:06:79:02:6c:48:dd:73:68:c1:cc:
70:0d:07:79:1f:55:8b:de:c0:1a:03:bb:06:44:56:
a2:9b:9d:5a:fb:48:81:ec:f7:35:a9:e5:1a:d6:72:
08:59:e7:e6:59:3f:19:a5:11:e6:82:09:d1:d8:41:
4d:8e:bc:99:05:32:b2:ac:3c:92:14:17:8a:bd:ff:
99:ee:06:1d:f6:c2:f5:ef:13:14:25:0a:d7:f3:c6:
3f:3d:6e:6f:b8:23:6d:98:69:d6:dc:93:1b:72:88:
0f:5c:1e:79:c7:9a:ab:6e:97:98:32:df:a3:8e:01:
b4:d1:57:0b:cd:0a:64:ae:2a:e8:0a:d8:73:7c:e9:
d3:0c:db:ff:9b:e9:c5:e8:94:3c:4c:f1:17:28:20:
28:b1:9b:3d:76:cf:0e:2a:1f:3c:50:45:e0:cb:c0:
96:46:0a:90:dc:65:2c:ce:49:78:e5:46:dd:4e:9d:
d1:2e:3a:88:e6:52:c3:cd:41:aa:4e:40:7c:5b:44:
87:4a:7d:c5:ee:c1:14:bc:4a:2e:24:6e:27:a0:8f:
a4:0a:59:55:38:9a:f3:86:73:23:c2:42:91:67:4d:
56:4e:d8:ca:da:bd:2d:c2:b8:bf:88:bd:dc:f1:92:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:EE:D3:6C:D6:0A:FB:7B:58:05:22:AA:B7:87:DD:5B:9C:48:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F8DA324DD6511EF8E8F3AA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bb:ce:44:78:82:1b:b5:18:2a:ac:d1:37:1f:1a:cc:5e:28:
28:9d:17:ee:26:d3:f3:7e:5b:a5:fe:be:68:35:02:34:da:f1:
4b:2a:78:57:12:46:48:9d:ae:a3:bd:63:c6:a7:4b:f4:2f:17:
18:f6:9d:7d:d5:33:86:fe:27:a0:5e:ab:3f:af:fb:6f:56:4b:
bd:82:fe:de:3a:e1:14:2f:73:16:f3:c7:aa:14:ca:f1:50:a1:
3e:5d:45:07:af:22:0e:27:e2:95:95:21:55:7f:09:79:24:b4:
55:0b:80:bc:34:20:c5:fa:0b:bf:7d:e4:16:38:77:58:89:d7:
ee:68:27:e4:17:57:c1:5c:a9:c8:60:6e:59:da:11:9c:b2:62:
e1:1d:90:a2:b3:bb:69:72:7d:5d:a1:4d:ab:fe:be:bf:52:00:
54:08:bb:52:51:53:18:5c:99:78:72:be:b0:cd:96:5e:29:9c:
38:d5:cc:38:83:19:25:e2:0c:29:d1:23:ab:6f:55:9a:8f:7a:
8c:aa:fa:15:19:26:3b:29:df:6e:80:81:72:87:a1:94:3a:4f:
55:af:28:c5:29:c7:c4:69:b3:e2:b7:dc:52:bf:1a:d9:be:a5:
83:40:68:d5:d1:c0:88:a2:84:00:df:d8:f8:06:3e:f9:63:ae:
1b:95:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:02 2025 by rpki-client