Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945CEA90DC9D11EFA88FA061762E951A.roa
File: 945CEA90DC9D11EFA88FA061762E951A.roa (raw, json)
Hash identifier: Tg2akedHpSTv1LORym2Vv99E+Tg3jTJxBtMoUGBPsX4=
Subject key identifier: FA:78:F6:B0:43:31:6E:8E:79:CB:51:FC:2C:5E:17:5C:F9:E9:72:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945CEA90DC9D11EFA88FA061762E951A.roa
Signing time: Mon 27 Jan 2025 10:58:03 +0000
ROA not before: Mon 27 Jan 2025 10:57:59 +0000
ROA not after: Sat 08 Feb 2025 10:57:59 +0000
asID: 22773
IP address blocks: 154.85.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84927 (0x14bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:57:59 2025 GMT
Not After : Feb 8 10:57:59 2025 GMT
Subject: CN=679766bb-d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:3c:15:15:0b:05:84:51:de:82:10:37:ba:
05:82:35:f6:58:96:ce:d9:c2:0e:16:9d:38:e1:66:
25:f7:2f:82:5d:d2:8f:3e:4e:0b:cd:d7:bd:37:54:
ce:b0:3f:59:c9:46:3c:ca:89:1c:10:87:86:1e:86:
33:5c:d0:a8:9c:e0:cf:5a:76:76:6c:89:9a:1a:b9:
ba:da:34:ce:79:28:8d:98:12:1c:f5:f5:a0:4f:87:
2b:2c:35:cc:78:56:fd:6b:e7:42:77:e2:f2:62:a5:
f7:1a:c3:b7:5b:a6:f9:41:7c:72:c9:f2:34:38:19:
02:a9:d1:19:9b:5c:70:ca:c0:34:42:07:b2:50:5d:
1e:31:94:86:1c:10:49:7a:d3:72:0f:e4:27:14:ce:
d7:a1:f8:e3:99:56:ca:eb:19:de:8b:3e:34:88:03:
85:82:3b:0e:69:20:48:32:a1:23:24:c0:7a:78:8b:
6d:eb:30:25:ba:f0:1f:a5:6c:20:48:c9:8b:b8:a2:
3d:62:50:b1:2e:c4:e9:66:f0:21:8b:7f:c9:e8:28:
a6:42:91:6c:5f:9c:c4:67:62:2f:12:77:34:db:ec:
77:18:9e:f4:1e:45:6b:8d:3f:7f:5c:37:39:8f:22:
71:59:a2:8f:88:ef:d4:da:49:e0:52:11:58:e2:47:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:F6:B0:43:31:6E:8E:79:CB:51:FC:2C:5E:17:5C:F9:E9:72:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945CEA90DC9D11EFA88FA061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.112.0/21
Signature Algorithm: sha256WithRSAEncryption
11:3d:42:19:ba:8d:9b:5d:88:4c:b3:20:97:a2:e0:11:ce:88:
4f:a3:5e:c6:0f:e7:1b:b6:ab:74:b7:c6:dc:9b:86:63:89:e0:
6a:6f:97:53:7a:2b:d0:c9:1a:4c:cf:43:5a:63:a4:68:de:17:
75:36:33:a2:75:77:6e:89:be:b1:a4:38:86:32:34:42:84:95:
a2:df:c9:6a:f7:43:fd:97:81:1b:3b:b9:24:8a:60:98:df:99:
3f:02:22:da:4d:0b:9a:50:24:e7:33:3d:a0:72:52:da:f5:3e:
b2:3f:43:c5:dd:e8:06:2e:0e:b4:67:f2:bd:1c:0a:05:ae:6f:
40:f2:02:e0:17:dd:5e:ef:3b:a9:8f:1c:13:7c:1a:8c:2f:59:
12:11:69:d6:8f:a5:89:34:be:d6:08:ab:c1:be:16:b7:58:b7:
52:2e:fe:7d:76:0c:d2:f1:d5:39:7e:15:7a:d6:1b:7d:92:7a:
da:95:a5:a7:45:c1:f7:5f:2d:2d:5a:c0:a8:00:7f:35:91:70:
55:8e:eb:bb:ea:87:5f:c9:47:7b:a3:11:94:98:bd:8c:c0:d3:
2c:15:29:00:6d:98:d1:09:cf:fe:2a:13:d6:9d:a4:08:4f:2b:
de:72:fe:24:48:76:33:d8:29:f2:82:36:3f:36:04:a5:56:a8:
b1:5e:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:45 2025 by rpki-client