Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B7144DFFD11EF8B3C44A1762E951A.roa
File: 8F9B7144DFFD11EF8B3C44A1762E951A.roa (raw, json)
Hash identifier: TbBJu3cfjqtpgGwouvAPMa13ZwR/Bbyn3urgCX7LCuU=
Subject key identifier: 35:64:EC:C9:82:DD:CB:E5:19:67:44:7A:A8:A6:03:21:BD:EA:30:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B7144DFFD11EF8B3C44A1762E951A.roa
Signing time: Fri 31 Jan 2025 18:02:40 +0000
ROA not before: Fri 31 Jan 2025 18:02:36 +0000
ROA not after: Sat 08 Feb 2025 18:02:36 +0000
asID: 135600
IP address blocks: 154.196.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85573 (0x14e45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 18:02:36 2025 GMT
Not After : Feb 8 18:02:36 2025 GMT
Subject: CN=679d1040-da84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:82:e9:31:fe:41:b7:03:a3:52:3c:21:a4:
24:53:f7:db:36:c5:d7:aa:6c:13:59:2b:91:86:87:
8a:64:49:1b:c1:da:a1:8d:2b:08:7a:e8:6b:06:83:
26:d4:ca:af:ff:d0:c0:f4:29:6c:0b:78:80:a7:bb:
7b:40:28:fb:45:a2:ed:10:8c:ec:3f:be:2a:88:02:
e7:98:64:ee:e3:bc:89:83:ba:40:49:26:6f:fd:cf:
61:bc:0e:4e:09:f4:02:c3:07:93:8c:23:da:70:ca:
04:b8:3b:bd:0a:43:82:08:5b:ff:24:61:52:5f:79:
ef:5f:49:71:5e:c4:a2:83:a3:f5:34:93:f8:41:dc:
be:30:22:b2:91:e2:c8:1c:a1:2a:71:25:86:a7:7a:
5a:67:1c:04:ab:28:06:25:dd:69:ce:b3:fe:0b:de:
90:9e:90:cb:04:77:a0:01:fc:b9:2c:37:3e:db:dd:
6b:e0:dd:d7:fb:f0:20:84:fc:76:8d:f6:6a:c9:cd:
9a:7a:05:00:68:fd:bc:23:44:ca:11:af:24:1c:46:
c7:d1:70:05:78:68:84:2c:1d:a5:7b:97:ef:35:1e:
50:65:b2:a3:09:eb:f8:7e:45:a0:87:70:a8:9e:62:
22:ac:02:5d:fc:e3:d1:83:7d:2e:6e:2c:ff:38:4d:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:EC:C9:82:DD:CB:E5:19:67:44:7A:A8:A6:03:21:BD:EA:30:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F9B7144DFFD11EF8B3C44A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.240.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:1f:ba:9a:bd:6b:da:37:fe:82:04:a3:1a:68:d1:b2:70:a7:
64:39:49:43:eb:40:30:f9:11:82:5b:3a:d5:f4:9f:d2:72:4c:
20:da:ac:ac:c8:1b:3b:f0:3b:14:fb:d6:ea:db:92:20:e6:f1:
05:f5:c6:7d:63:5c:6b:5f:bb:89:1f:a8:e4:75:0f:da:fd:a5:
c4:d5:e2:a3:0f:3e:18:6c:47:95:b2:6b:38:8f:19:1e:45:a5:
c1:07:5b:37:bc:d1:4b:eb:44:fb:ea:2f:ae:a7:21:78:6c:d7:
e7:8c:05:5c:f9:0a:7e:14:45:fc:2b:84:30:e5:bc:be:2a:14:
bf:e4:f5:d0:e1:52:6b:9d:06:38:19:6f:ae:4f:61:8b:25:7f:
21:36:a3:5c:d1:8f:97:45:62:ac:b7:68:40:55:62:19:68:61:
f3:83:b1:41:81:8c:b9:52:02:bd:22:21:28:1d:c1:a9:0b:72:
ef:8e:3d:ae:f0:4f:f4:67:fb:fb:76:f9:4f:cc:1f:de:c6:2f:
eb:ab:1f:a6:41:2f:79:4f:62:dc:a7:f5:63:38:11:90:d6:01:
be:6f:3f:8a:4b:4d:50:fa:71:e2:8c:24:3b:d3:50:2d:54:92:
8e:13:a0:dd:f2:ce:b7:0e:ff:70:e6:a3:ad:d3:cd:6a:5d:ed:
6f:37:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:10 2025 by rpki-client