Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90E7CA4EDCCD11EF883C0EA0762E951A.roa
File: 90E7CA4EDCCD11EF883C0EA0762E951A.roa (raw, json)
Hash identifier: GBeXyFzPlGOSAxRBXn5IaaGYV+Z1I7D5PeRqrosgvV0=
Subject key identifier: 55:DE:E2:C8:AB:DB:79:49:5E:AB:A9:18:4B:12:2F:32:8B:8A:42:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90E7CA4EDCCD11EF883C0EA0762E951A.roa
Signing time: Mon 27 Jan 2025 16:41:33 +0000
ROA not before: Mon 27 Jan 2025 16:41:29 +0000
ROA not after: Wed 12 Feb 2025 16:41:29 +0000
asID: 135097
IP address blocks: 154.213.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85123 (0x14c83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:41:29 2025 GMT
Not After : Feb 12 16:41:29 2025 GMT
Subject: CN=6797b73d-d186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:4c:93:ae:0d:80:2f:a6:4b:20:c4:77:e2:
50:14:36:96:9f:3e:8d:ae:8f:d2:ac:ad:72:c6:7a:
b6:ee:cf:55:d5:cf:48:cf:3e:29:b2:bd:c9:ba:e2:
85:f8:ed:74:cf:9d:22:02:3c:da:6c:cd:da:7d:2b:
78:7a:5d:bf:2a:0e:b8:61:90:51:e1:2c:9c:77:90:
da:19:20:00:a7:e9:f5:e5:1e:cd:f6:2b:fe:50:b4:
1e:d6:a0:42:2e:dc:94:61:a7:0b:67:e0:ab:c3:fe:
1f:c2:c2:30:2b:6d:bd:57:bd:6a:18:c5:ad:e7:ae:
d7:21:da:41:09:98:bb:b7:7a:8e:da:4a:1b:ec:e8:
db:5b:d2:76:8e:5d:6c:ef:90:3c:18:a9:06:bc:16:
20:7a:93:01:bd:1e:aa:d9:d2:85:1c:eb:42:ab:af:
1c:f8:95:46:4f:3f:f2:3a:0f:d4:f1:68:4a:f5:7a:
cd:4f:6e:f7:b7:af:59:b6:87:bb:78:c0:b7:36:63:
b5:f9:c1:5d:5a:c5:53:e1:2d:70:94:7f:cb:9e:d2:
fe:26:75:15:2d:d1:32:bb:40:2d:ad:7f:9a:5e:91:
07:08:35:f1:2c:45:d7:46:16:14:a6:72:15:3f:58:
c0:f4:9e:11:07:45:67:01:a2:1e:26:d1:6b:00:d4:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:E2:C8:AB:DB:79:49:5E:AB:A9:18:4B:12:2F:32:8B:8A:42:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90E7CA4EDCCD11EF883C0EA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.11.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e1:01:38:df:2f:9d:d6:ff:54:7e:46:e8:da:2e:c2:c0:ce:
23:2f:a8:ca:3b:ef:d2:79:50:39:a4:09:15:0f:a0:9f:e4:97:
a7:81:67:8f:6f:a1:05:34:13:5e:28:b8:ed:68:1a:bc:6f:ac:
1b:93:9b:bb:53:d4:23:5a:55:8f:d1:7f:16:ec:ef:bf:fa:a1:
45:cb:40:bd:8a:3e:1c:1d:cc:12:a8:68:42:56:ca:48:16:57:
27:70:c6:ed:8e:ab:ef:b1:98:70:32:ca:70:eb:ad:d7:03:ed:
cb:21:c5:99:32:fb:9d:f6:a8:21:02:0a:a3:e5:80:5a:b0:67:
1f:5e:4e:1c:f1:93:27:4c:65:b2:de:42:57:2f:45:81:08:04:
37:0d:1a:5c:56:78:0e:57:52:8c:c7:eb:ea:52:45:82:28:61:
95:10:5c:4e:ba:e0:77:98:9b:b4:3d:14:4f:01:b9:8e:2d:f7:
d9:4d:2a:50:02:0e:05:ad:a8:b7:08:57:de:ef:17:da:ed:41:
b1:85:3d:75:69:ab:ce:7b:b1:b6:5f:3c:72:fb:2b:cd:00:9b:
75:2e:d3:53:c5:b3:c2:96:1d:e7:dd:d1:4f:b8:10:57:ed:16:
ea:84:1b:ab:ea:0f:ef:74:50:65:48:3c:3d:5d:11:8c:53:89:
92:88:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:33 2025 by rpki-client