Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9819B28CC9B811EFBEA1785F762E951A.roa
File: 9819B28CC9B811EFBEA1785F762E951A.roa (raw, json)
Hash identifier: pR8s21536HC5yCVX+jRB0BpfLb+YKKo7CZiGV5f+qTg=
Subject key identifier: 43:2F:59:A6:07:25:13:4B:0C:08:F6:06:BD:B5:DA:4E:01:D6:0D:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013480
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9819B28CC9B811EFBEA1785F762E951A.roa
Signing time: Fri 03 Jan 2025 09:53:33 +0000
ROA not before: Fri 03 Jan 2025 09:53:30 +0000
ROA not after: Sat 08 Feb 2025 09:53:30 +0000
asID: 203020
IP address blocks: 154.217.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78976 (0x13480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 09:53:30 2025 GMT
Not After : Feb 8 09:53:30 2025 GMT
Subject: CN=6777b39d-08a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:fc:aa:66:93:11:5b:09:e3:59:c3:e2:0c:
93:9d:b6:dd:c2:62:da:a8:e7:fd:1e:43:3f:17:cb:
72:d0:33:5e:d7:fb:72:81:eb:ed:5c:08:0a:ed:88:
de:95:14:b1:14:f3:4a:d8:49:36:50:9d:54:50:b0:
4d:5e:e8:86:13:b1:6a:37:f9:d5:54:80:83:59:cf:
4f:29:56:a8:c7:22:d1:1e:96:0f:90:2f:07:90:37:
1c:54:f7:ec:4e:95:1c:0b:8f:8a:ad:e4:bc:e3:1b:
79:60:62:1f:b6:01:0e:62:3f:b5:89:83:27:63:a5:
af:1e:e5:22:8e:a2:c8:fa:30:d5:7f:a9:a8:c7:c7:
e0:5d:27:92:94:de:da:e6:dd:f4:d6:f4:19:8f:41:
28:d5:75:05:a7:18:ad:4d:0b:4e:96:b3:be:a9:23:
dd:3b:04:6e:93:d0:86:18:60:87:f0:d3:cb:6c:a2:
90:e5:ba:6e:3f:13:a3:28:97:37:c1:35:90:66:3b:
45:8d:f6:37:d3:98:d6:ca:af:47:af:73:6d:d0:26:
21:ba:1f:f2:71:50:fd:a6:3c:ac:1f:d8:ed:79:37:
89:fe:d6:97:8e:5d:e0:64:a7:51:69:7f:96:e4:e5:
93:76:17:26:bc:62:d6:10:a7:a3:52:fb:bc:51:4c:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:59:A6:07:25:13:4B:0C:08:F6:06:BD:B5:DA:4E:01:D6:0D:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9819B28CC9B811EFBEA1785F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:56:91:98:b2:24:cb:18:8c:87:3e:bb:c5:aa:24:af:86:2f:
f9:54:20:ca:9d:67:cf:98:ad:4d:c0:b0:44:d3:ff:a6:67:0f:
e5:69:3d:cb:24:c0:32:58:42:39:c5:21:cb:fd:4d:c5:2d:d0:
a5:d5:6d:5b:86:b0:8d:0c:24:04:10:ed:6e:50:7c:c8:0d:29:
8f:d7:cf:f1:ce:56:6c:6b:a0:6f:c5:f9:c3:a0:67:62:75:f3:
0d:59:7f:9d:f1:86:94:41:87:df:97:66:21:1a:0c:17:5f:18:
1a:f4:cc:25:f1:85:7e:f2:b2:30:03:84:9a:23:8a:51:4f:fe:
3f:1c:c2:45:1f:96:b3:48:db:0a:18:4b:5c:76:06:48:81:a9:
09:b8:e0:f9:ad:6c:51:c5:c7:bc:e0:5a:a2:eb:df:75:f7:b6:
2f:6c:76:5a:8f:3b:05:8d:f9:d0:6e:b6:2f:22:de:21:2b:7c:
1b:2e:29:df:72:10:48:96:2f:20:8e:ed:1d:b3:a6:96:2d:7b:
4d:fb:82:8b:02:c3:a3:5a:16:ba:db:e4:0b:ce:05:c7:99:f0:
cb:f4:d8:1a:92:7b:ef:f2:e7:61:7f:26:2f:1b:58:76:d4:6e:
05:8e:9b:2f:13:53:2a:35:8d:e3:95:b8:fd:29:96:0c:72:78:
70:c7:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:01 2025 by rpki-client