Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91ADBAE2B5FE11EFA85443A5762E951A.roa
File: 91ADBAE2B5FE11EFA85443A5762E951A.roa (raw, json)
Hash identifier: hZL8pyvXmlsvrDzMXlE8V+V7M9MATtmhdlv7jRE4zFc=
Subject key identifier: F6:1D:9B:EB:30:0E:86:F2:B6:CE:5F:00:56:93:20:9F:C6:4E:79:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91ADBAE2B5FE11EFA85443A5762E951A.roa
Signing time: Mon 09 Dec 2024 07:24:04 +0000
ROA not before: Mon 09 Dec 2024 07:24:01 +0000
ROA not after: Thu 06 Feb 2025 07:24:01 +0000
asID: 137443
IP address blocks: 154.223.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72133 (0x119c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 07:24:01 2024 GMT
Not After : Feb 6 07:24:01 2025 GMT
Subject: CN=67569b14-1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:29:d7:ec:57:39:14:67:ae:85:91:d5:8b:50:
50:5e:05:dd:37:be:a6:81:df:63:69:27:77:21:5e:
8f:8b:82:2b:cb:3e:16:7c:70:19:7b:54:4b:c9:31:
6d:1e:03:44:46:0c:58:da:53:e4:93:10:10:27:c8:
3a:c5:a2:44:66:c7:b7:5c:7a:ce:d0:b1:17:ea:a3:
71:cc:fc:a6:cc:be:52:78:ec:66:67:02:9c:cd:06:
2a:5c:14:8f:bc:ee:f3:e8:d7:f8:3e:25:cf:46:a7:
94:b4:5f:2d:13:e8:c7:e1:7a:68:3a:83:c4:87:84:
f4:3a:26:aa:22:43:95:86:42:90:34:ba:ae:96:37:
0d:1d:d8:00:99:13:bc:c1:6a:9b:c8:c6:4b:b5:ef:
f1:39:ab:a0:a6:70:50:23:23:26:b5:79:0b:f6:75:
a1:86:c2:01:e2:bc:30:9e:73:e9:54:e6:66:25:08:
fd:b2:96:c4:db:17:15:cd:30:38:8e:f9:3b:d2:a2:
61:e6:71:ba:44:bf:f6:1f:3c:2e:c4:8a:ee:f1:9e:
34:ba:e6:7d:c7:99:a2:61:33:ef:eb:f0:08:8f:ad:
60:db:9a:19:67:29:82:6a:a5:b9:2a:2a:43:45:64:
07:e3:22:69:a9:62:b1:1b:0c:09:f5:f1:91:32:45:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:9B:EB:30:0E:86:F2:B6:CE:5F:00:56:93:20:9F:C6:4E:79:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91ADBAE2B5FE11EFA85443A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:59:a3:f0:9d:a0:bd:60:09:9e:1f:23:d5:37:05:c8:b5:f1:
2c:79:e8:11:31:ef:a1:f8:50:1f:67:8f:89:ea:d9:bd:bc:9b:
d2:d7:71:f2:80:8c:bb:21:70:e4:f8:8e:eb:92:eb:f8:a3:41:
5e:41:a5:71:5d:1c:97:14:ff:b2:ee:13:a6:10:4d:2e:9d:d5:
de:68:89:19:8f:ee:68:ad:1d:ef:38:ea:da:dc:6f:06:d5:3e:
e8:c6:f5:1c:0c:2c:69:53:25:9b:f7:7a:f6:31:42:a5:da:ae:
68:a9:a6:83:d7:b9:f1:98:bc:9e:0e:1f:e3:cd:f0:58:f3:8f:
64:e8:a6:b9:b2:c8:2d:67:ae:81:4a:dd:40:86:1c:56:bb:7d:
e9:1d:a1:6e:49:b1:6d:d7:36:6d:2f:d5:ea:96:cf:97:0d:3d:
55:13:39:fe:ed:be:23:f3:e4:59:1d:c3:cb:5e:5b:04:54:ea:
4b:81:18:b6:50:ef:49:94:4b:2c:3d:e3:f9:6e:d8:aa:d2:fe:
04:87:15:12:f7:a6:a3:d4:33:c8:2d:72:23:64:7b:a8:56:3c:
1a:77:41:be:3a:ad:a4:be:f0:12:5a:b8:61:30:83:bb:05:72:
5a:d7:ff:60:67:aa:29:40:1c:8f:b8:7b:a8:dd:32:aa:38:d8:
71:b1:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:51 2025 by rpki-client