Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3F5F5CD73011EFBF650E88762E951A.roa
File: 9D3F5F5CD73011EFBF650E88762E951A.roa (raw, json)
Hash identifier: WPLqwYWyWWI4td+6YMuKCpnHz0UtM+eQzrOXZJLCqL8=
Subject key identifier: 85:03:F0:E2:32:E2:B0:17:FC:8C:8E:14:A4:99:9F:D3:2A:C0:DF:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3F5F5CD73011EFBF650E88762E951A.roa
Signing time: Mon 20 Jan 2025 13:15:27 +0000
ROA not before: Mon 20 Jan 2025 13:15:23 +0000
ROA not after: Wed 05 Feb 2025 13:15:23 +0000
asID: 135097
IP address blocks: 154.213.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81468 (0x13e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:15:23 2025 GMT
Not After : Feb 5 13:15:23 2025 GMT
Subject: CN=678e4c6f-cbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:a0:69:f9:61:71:bc:59:0b:e1:34:5c:dc:
1c:3c:a4:4f:37:35:34:3b:ba:32:da:e7:64:ed:5b:
8c:5c:b5:56:ce:b4:25:18:d8:77:22:d2:08:4c:16:
46:34:b6:ca:6c:93:cb:6a:51:5b:50:13:9d:4c:5d:
76:2e:35:63:e8:13:46:2e:75:f6:0a:a4:6c:7d:72:
dc:7e:de:c9:0b:fc:09:83:8a:49:7e:f5:ee:f3:aa:
c7:54:1b:1f:b6:e0:7a:ff:e3:af:25:e6:73:b0:83:
67:bf:03:65:8a:e3:00:d2:2f:68:49:0c:3c:c2:ad:
5b:a7:b5:00:da:23:a9:cf:14:8f:2a:c6:04:71:0f:
65:5d:4c:bf:12:7e:e1:6d:2c:03:41:dd:a4:78:2a:
ef:52:3d:44:ae:c4:ac:db:02:d6:2f:ce:2e:b1:6c:
43:95:62:48:a2:47:1d:7d:7b:38:61:2f:f4:76:45:
a9:94:34:07:c0:9a:41:5f:4c:9f:b1:cd:fc:f0:22:
e2:dd:7c:1c:4a:5a:a9:1d:68:ce:d8:3b:e1:01:76:
0d:eb:a0:6a:27:21:ca:f6:a1:40:5c:09:3a:e7:6a:
5d:15:e4:5f:d2:4b:e7:99:a5:b8:54:f9:0f:a9:0e:
50:50:40:0b:d5:7c:fe:b2:40:ef:28:21:57:70:b1:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:F0:E2:32:E2:B0:17:FC:8C:8E:14:A4:99:9F:D3:2A:C0:DF:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D3F5F5CD73011EFBF650E88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:f4:dc:73:de:54:f6:d0:ca:74:8f:09:71:0b:7c:71:77:f1:
f3:d0:75:63:d9:00:14:b4:e5:d5:b5:65:c7:1d:5b:93:44:c1:
8e:29:a0:6f:fb:8a:03:6b:dc:b1:48:db:ff:b0:95:43:a8:87:
c4:10:74:38:ed:ce:ce:56:bc:14:73:81:eb:5e:1a:49:4a:4d:
8c:73:1b:67:81:a1:1f:6d:77:ed:91:8a:57:49:e6:90:c9:9b:
f7:3e:f0:ef:1c:cb:44:bb:54:08:c6:a1:16:7c:03:46:8d:c2:
73:27:43:73:7b:f5:ee:5b:e6:c9:c4:3c:6f:c1:44:2c:f8:93:
76:d6:b2:88:c9:9b:7c:e7:e3:00:8b:3d:ec:f9:64:b7:c9:a1:
51:60:59:12:a0:0d:13:d3:af:6f:ad:5f:bd:3d:e7:f6:32:1e:
56:b0:34:ae:c8:2e:ce:94:14:eb:98:5a:27:e6:17:a6:30:42:
32:82:bb:ee:14:45:0b:f8:44:f6:1d:db:f2:86:17:be:87:15:
84:a7:bc:17:20:e0:dd:f4:6a:23:56:87:1a:55:a6:85:04:8b:
f4:75:ac:b2:3a:2c:1c:ab:69:36:0a:62:6f:3a:ee:bd:d8:18:
9c:26:a0:19:50:12:6a:76:12:b4:f4:41:da:f2:43:19:5f:d7:
70:df:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:20 2025 by rpki-client