Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/907A9720D24C11EFAD372F52762E951A.roa
File: 907A9720D24C11EFAD372F52762E951A.roa (raw, json)
Hash identifier: Dbtr2dm+w+pwvcE9d3zSYrBCZABKicGRLshu4ZpOX20=
Subject key identifier: FD:95:94:4E:BA:E8:27:27:EE:46:F6:96:96:C6:68:27:16:E5:08:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ADD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/907A9720D24C11EFAD372F52762E951A.roa
Signing time: Tue 14 Jan 2025 07:52:55 +0000
ROA not before: Tue 14 Jan 2025 07:52:52 +0000
ROA not after: Sat 22 Feb 2025 07:52:52 +0000
asID: 214451
IP address blocks: 154.200.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80605 (0x13add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 14 07:52:52 2025 GMT
Not After : Feb 22 07:52:52 2025 GMT
Subject: CN=678617d7-2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:b2:a4:cc:0a:0d:a8:0a:70:7e:e3:75:fe:
27:a1:9c:e1:c2:f2:e6:6c:05:0b:da:f9:44:05:9f:
ca:d7:e8:51:7c:62:6d:71:26:05:d4:39:c0:6a:9a:
bc:6c:9d:17:02:20:67:fb:4d:78:23:09:b4:b9:a0:
af:dc:4c:a1:33:30:a0:90:85:69:56:8a:10:61:0c:
4a:47:00:dc:cb:1d:99:fb:06:8d:b6:8b:e5:f6:57:
b5:10:ff:68:68:0a:2e:b7:62:fc:e4:22:1c:fb:3a:
03:fc:84:aa:90:8d:83:9e:e6:f0:2e:ee:b4:14:f4:
4a:57:4f:ae:04:da:38:44:2f:02:24:d5:1f:23:67:
69:c9:74:17:82:02:fb:7b:38:04:43:bc:8a:28:1b:
c4:1b:4f:b0:ab:1c:e7:c1:68:5c:96:48:2f:5f:ab:
cb:43:70:b1:56:57:06:9e:2a:0a:1a:f9:0d:36:7e:
79:93:e1:b3:d7:27:06:c1:10:aa:8d:03:52:c7:d5:
45:6c:72:73:30:28:e1:4c:12:5f:08:8e:3e:f7:f9:
de:e0:d5:09:52:e4:e9:53:87:f6:94:7c:d9:98:72:
b3:73:52:49:9d:79:ca:b4:5a:18:10:24:7a:af:3b:
b2:95:86:94:43:6f:75:5e:2e:6c:b7:30:72:cd:2a:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:95:94:4E:BA:E8:27:27:EE:46:F6:96:96:C6:68:27:16:E5:08:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/907A9720D24C11EFAD372F52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.202.0/23
Signature Algorithm: sha256WithRSAEncryption
44:1a:aa:c1:2a:d2:d3:a9:69:33:a7:7c:ea:8b:65:aa:3c:5e:
f8:0e:31:40:91:2c:8c:6b:d7:1b:df:21:f9:9d:69:44:90:d5:
30:f0:72:a9:70:a8:b5:38:d4:fd:a6:cf:54:7d:c1:b0:b2:23:
a1:92:53:6f:e1:bd:6c:e4:7d:3e:a5:eb:4e:0a:8a:6f:9e:83:
b0:62:8b:dc:f6:46:a5:e6:3e:e1:6b:4f:0e:03:cd:cb:5a:19:
6c:8d:f7:5f:83:d1:c0:14:fb:2d:f9:f3:b5:2d:da:43:53:5f:
6f:71:dd:99:06:88:af:5b:51:a0:2a:a1:9c:4f:ec:ef:c1:bb:
a7:98:4e:48:a7:f8:2e:04:59:c4:74:48:26:9e:e1:5b:83:2d:
5e:2a:00:24:9c:fe:fd:b1:5a:54:77:8a:ba:4d:03:67:fe:10:
2b:8e:71:de:36:8c:f5:47:ea:06:58:0c:b1:d6:dc:7b:66:e6:
b2:4d:a0:c9:39:04:23:62:5c:c5:78:dd:c8:ef:02:27:21:ec:
d8:6c:a6:8e:29:03:92:26:ac:2d:2b:f3:d1:91:df:76:b9:b2:
ca:08:9b:ee:03:0c:38:ac:4c:43:a4:e8:ad:5c:e2:01:ef:76:
f0:77:14:eb:f1:a4:0c:4d:87:eb:40:c5:f6:15:d3:7d:90:48:
4d:e5:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:03:58 2025 by rpki-client