Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A15BC38DB2A11EFAE930B9C762E951A.roa
File: 9A15BC38DB2A11EFAE930B9C762E951A.roa (raw, json)
Hash identifier: gw38ciiB3m1+WqaM6aAxwXFQ0JaAfw1Kn4NbSw9vivM=
Subject key identifier: 41:00:53:78:DB:CD:74:BD:60:C2:8B:44:12:0A:D9:C8:F6:99:C1:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A15BC38DB2A11EFAE930B9C762E951A.roa
Signing time: Sat 25 Jan 2025 14:42:29 +0000
ROA not before: Sat 25 Jan 2025 14:42:25 +0000
ROA not after: Thu 27 Feb 2025 14:42:25 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84452 (0x149e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:42:25 2025 GMT
Not After : Feb 27 14:42:25 2025 GMT
Subject: CN=6794f855-ea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:81:99:f1:29:2b:33:52:88:e2:b4:00:f0:
9d:96:bc:75:0b:2b:12:af:13:d8:ad:9b:3a:4a:fa:
f5:ac:f4:c8:f2:37:50:ee:cd:b9:ec:fe:47:17:2e:
2a:93:06:18:ab:78:ea:a5:8c:cb:37:7b:64:a1:b8:
50:b4:93:f6:be:72:30:d8:ae:52:df:b5:7f:dc:78:
e9:1c:6a:8a:91:e1:db:b8:d3:a9:c5:84:5f:55:2b:
31:76:37:4e:3e:74:cc:8c:3d:db:70:ed:8c:c0:40:
2d:2c:63:9f:b5:fe:77:a6:15:b9:1b:13:e0:16:6d:
fc:45:0e:07:f6:2c:b9:49:88:ff:b5:a1:c2:52:26:
16:49:fb:fe:1d:58:eb:ca:7c:7c:e2:23:8f:3e:14:
e5:94:c7:b3:f2:70:21:b3:68:d3:bc:18:06:60:35:
66:cd:e5:c1:2a:c1:fb:c1:1f:61:7c:6a:06:9a:a9:
b6:9a:73:34:f3:88:1c:2b:fa:ad:fb:e3:2b:49:e4:
eb:d7:d2:7d:4c:e7:52:72:9f:de:65:3f:40:5b:d9:
66:fb:fc:3f:24:cf:1d:4c:1b:5c:6b:ca:0f:4b:90:
a8:42:5c:8b:13:2f:61:09:b4:3b:96:e7:46:dc:63:
3f:d7:f3:74:00:ef:c3:9b:ea:19:87:4e:34:b6:8a:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:53:78:DB:CD:74:BD:60:C2:8B:44:12:0A:D9:C8:F6:99:C1:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A15BC38DB2A11EFAE930B9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:e6:9a:e7:c0:65:f3:f8:4e:d2:b7:4f:87:68:78:9e:28:c8:
ac:1d:73:69:ef:b4:c4:a8:a6:b8:3b:1b:7d:12:c1:fe:5d:9d:
cc:dd:c0:26:b3:ee:49:05:97:f3:f9:bf:dd:7d:63:f6:7c:3c:
98:6d:af:9e:f3:d2:1c:fa:38:91:63:db:de:30:59:9f:da:1b:
1b:0a:2b:82:82:ff:4c:23:0e:71:80:d4:0c:90:87:72:08:cb:
82:e8:00:11:03:69:ca:e8:e2:36:06:a4:6f:77:6e:3d:a6:31:
9f:4d:b0:e0:ae:aa:16:4f:2f:fc:2c:d3:73:e5:4c:81:ca:59:
30:98:ea:c2:a8:a2:04:eb:cc:f8:7c:0f:93:64:8c:74:95:22:
f2:14:18:1b:da:d3:86:a8:7d:16:58:b4:20:53:4b:3b:dd:20:
21:5c:09:df:b6:b9:bf:5d:0f:e2:33:4a:16:82:47:8f:fd:f7:
18:b7:c8:0d:0a:f8:b1:25:de:61:cf:dd:9b:27:5a:bc:7f:9b:
33:a4:44:e8:66:6d:15:71:0d:58:43:f9:d3:51:bd:5c:7d:84:
74:f9:f3:34:28:c9:f2:4b:e2:c4:26:7e:ac:b7:97:ee:06:31:
82:b5:11:02:2f:06:47:08:9d:d1:77:72:d9:79:c6:be:d3:96:
e2:54:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:06:00 2025 by rpki-client