Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF0578CDC0511EF9653D25B762E951A.roa
File: 8FF0578CDC0511EF9653D25B762E951A.roa (raw, json)
Hash identifier: WN79pOQedCgIS+p5jeLF4SgZke4vhxvNEmyLbKz4Fuc=
Subject key identifier: 18:28:A4:F9:5D:5A:70:9C:DB:02:DE:8D:1E:CE:7A:8F:43:15:C4:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF0578CDC0511EF9653D25B762E951A.roa
Signing time: Sun 26 Jan 2025 16:49:52 +0000
ROA not before: Sun 26 Jan 2025 16:49:48 +0000
ROA not after: Thu 20 Feb 2025 16:49:48 +0000
asID: 142062
IP address blocks: 154.86.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84732 (0x14afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 16:49:48 2025 GMT
Not After : Feb 20 16:49:48 2025 GMT
Subject: CN=679667b0-bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:56:d4:ba:83:bc:d4:55:8c:66:fa:94:27:
85:d6:20:0c:da:15:17:41:71:95:4b:81:14:ad:2c:
93:83:49:38:20:08:f8:6b:43:6f:6a:0c:ea:9f:fb:
64:c0:1e:66:24:89:da:cb:5d:62:5c:60:30:0f:dd:
92:d1:04:19:9c:d0:3e:12:27:14:cc:b2:a5:11:c9:
b8:65:79:b0:21:ae:d5:5f:7e:43:67:9f:0a:c9:84:
06:fd:93:ae:e2:8c:80:e5:f7:b7:6f:9f:a0:14:02:
55:c8:38:c1:75:d0:23:f5:7a:f1:e2:93:37:cc:22:
5b:97:e9:88:80:89:29:00:68:9f:d9:c7:91:02:c9:
ae:24:9d:9c:1c:53:2e:c3:40:9e:04:89:ae:39:53:
36:2b:4d:16:f2:bc:87:32:e6:3e:9d:2f:17:68:28:
cc:cd:47:86:9f:21:1c:e3:34:db:56:5f:d8:fe:5e:
f1:46:77:72:d1:19:73:62:6e:1c:56:64:46:af:f9:
c3:20:e1:a4:e4:7e:b7:e3:9b:bb:3c:d0:d5:73:0d:
c5:14:f1:2d:76:3b:db:20:82:8e:23:cd:f1:e5:4f:
d9:bf:0c:25:73:e7:ef:63:ea:2d:8a:57:10:11:aa:
a4:3e:17:ce:c5:10:fd:67:60:e9:6f:07:9b:29:83:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:A4:F9:5D:5A:70:9C:DB:02:DE:8D:1E:CE:7A:8F:43:15:C4:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF0578CDC0511EF9653D25B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.91.0/24
Signature Algorithm: sha256WithRSAEncryption
34:57:e1:0a:f0:08:a7:74:34:2c:89:53:d7:11:6a:f8:88:ba:
2a:b8:8f:e1:ec:41:9b:a7:96:17:b2:32:31:26:c8:04:35:bf:
70:7b:11:41:ca:0c:b6:28:ca:fc:92:e3:5b:71:19:9e:4d:23:
c1:ca:d9:03:a8:17:37:51:28:97:b0:20:22:e7:7e:89:36:bc:
77:6b:f7:27:03:f5:88:8a:69:fe:58:ea:3e:7e:82:12:2e:2a:
ce:c3:ce:78:b4:66:31:fc:06:c4:c8:6e:c8:42:99:7e:18:dc:
60:a6:33:1c:0e:d7:7c:12:c5:a1:82:a8:93:0d:24:b0:61:45:
ca:6d:bf:d3:0b:69:04:f0:eb:0d:cd:24:41:a8:43:7f:7b:a9:
21:50:97:ef:b7:7b:7b:2e:f0:85:16:48:c4:f8:43:4e:a2:d7:
e2:34:12:cf:d5:3f:60:ed:e3:05:48:74:8f:b1:9f:c2:c9:bb:
3f:e0:0e:bc:7e:7a:cb:96:2c:07:fb:f7:18:68:4c:5b:ad:de:
b8:de:f1:b3:b4:84:fd:00:52:9b:cb:0a:93:da:b2:53:c5:38:
9e:d0:a0:fc:30:13:ea:58:b4:c2:0a:ff:c9:69:1d:98:05:bf:
dd:9a:ff:4c:55:ed:ad:3f:8e:1f:b6:1f:04:1c:2a:27:db:76:
9e:4b:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:10 2025 by rpki-client