Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93322BECDCC711EF84AD2C78762E951A.roa
File: 93322BECDCC711EF84AD2C78762E951A.roa (raw, json)
Hash identifier: h4AJ/fqDWj+9iwKE6Z0CpTsNBrCCCf1F0m4OzAt45U0=
Subject key identifier: 40:B2:FF:C1:23:DD:78:0F:CA:FD:9D:41:21:1A:D3:96:E2:3D:0C:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93322BECDCC711EF84AD2C78762E951A.roa
Signing time: Mon 27 Jan 2025 15:58:40 +0000
ROA not before: Mon 27 Jan 2025 15:58:36 +0000
ROA not after: Thu 13 Feb 2025 15:58:36 +0000
asID: 7018
IP address blocks: 154.207.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85085 (0x14c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:58:36 2025 GMT
Not After : Feb 13 15:58:36 2025 GMT
Subject: CN=6797ad30-a818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:c9:0d:1a:24:f7:4f:83:04:d2:85:89:46:
60:5e:ec:16:68:61:3c:4e:db:0c:f3:ee:f7:20:9c:
a0:67:00:34:48:6f:a9:9c:f2:3a:ee:9c:38:f4:79:
eb:61:f4:76:7f:e5:29:e2:87:49:fd:21:ed:56:b4:
da:16:c9:9c:d4:b5:a7:38:c2:b7:b4:bf:7e:8b:b6:
18:3a:6f:19:64:d7:3e:c3:99:73:4c:da:01:00:8c:
cf:de:a3:25:ac:e0:7b:ca:eb:4c:ff:9d:8a:be:78:
fd:9e:21:55:ef:91:4f:be:e7:80:b3:85:ac:c3:dc:
72:ab:89:9c:a6:9f:42:b7:2b:5c:aa:32:2b:12:e5:
ab:78:b3:db:6b:f5:f7:c5:a6:87:21:a3:8f:fe:b4:
31:51:ac:62:35:d4:b4:64:46:02:b4:28:8a:79:f6:
54:2f:ef:e3:ff:45:c3:fb:bd:3a:95:22:04:90:ef:
89:69:34:4d:a2:73:a4:4c:a2:a9:ba:7f:4b:11:c4:
06:8a:ec:6e:87:32:40:60:91:b7:82:51:6d:2b:1c:
28:47:6f:cb:39:4e:2f:da:ba:3a:94:e9:90:bc:b1:
1a:48:3f:c7:b0:d5:0a:2d:dc:a5:fb:e4:d4:69:9a:
01:0e:8c:5a:95:a3:d7:c2:29:9f:2f:c7:05:86:ac:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B2:FF:C1:23:DD:78:0F:CA:FD:9D:41:21:1A:D3:96:E2:3D:0C:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93322BECDCC711EF84AD2C78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.158.0/23
Signature Algorithm: sha256WithRSAEncryption
18:d2:4a:00:5e:85:04:6c:e3:15:e4:40:85:df:84:b6:47:f0:
07:07:59:c4:80:1d:52:84:34:59:a0:d2:30:8a:1d:66:2f:a3:
25:36:0d:24:21:74:b9:bf:9b:0b:99:a1:b9:4c:c4:0a:23:e8:
54:f6:57:60:95:39:24:af:fd:02:8a:58:e4:17:1d:57:86:c8:
f0:cd:20:90:14:e4:b6:e3:a1:7c:a1:2e:b0:28:b6:cf:67:79:
2c:9e:ef:c0:09:b3:30:90:94:e9:43:bb:7c:6c:9d:31:01:fd:
dd:ce:69:90:4c:91:e5:7a:a8:e0:28:00:89:ea:22:3a:0c:68:
21:ae:b6:34:a9:f7:01:81:4b:a8:e7:ed:04:32:94:bd:77:b4:
5b:f9:7e:6a:23:69:f4:32:e3:83:a0:9c:41:1b:51:6b:fa:9b:
78:a4:d8:73:72:1f:ef:a3:63:f1:87:0c:a8:92:92:77:f4:9b:
07:b1:01:01:0d:69:08:f7:94:6a:7e:d7:36:2e:d3:f4:14:a9:
7a:f8:5d:9b:ee:a7:e5:15:72:86:83:bf:1a:42:ea:41:ea:86:
9e:77:25:57:66:98:ac:3d:2d:2f:d9:1f:eb:0d:0b:58:8c:dc:
aa:d9:79:80:91:5e:cc:a6:1c:75:b3:a0:24:b0:56:46:4c:a0:
92:d0:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:24:51 2025 by rpki-client