Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE9E348D57611EFBB9BE040762E951A.roa
File: 9DE9E348D57611EFBB9BE040762E951A.roa (raw, json)
Hash identifier: d7V13s3vTEuVN/bNL2VfjqKvze1g91btKI+ZZvIBAmo=
Subject key identifier: 3D:15:04:8C:E9:4E:9A:93:3B:A0:4D:3D:7D:43:38:47:E7:B2:D3:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE9E348D57611EFBB9BE040762E951A.roa
Signing time: Sat 18 Jan 2025 08:31:30 +0000
ROA not before: Sat 18 Jan 2025 08:31:27 +0000
ROA not after: Sat 22 Feb 2025 08:31:27 +0000
asID: 54600
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81356 (0x13dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:31:27 2025 GMT
Not After : Feb 22 08:31:27 2025 GMT
Subject: CN=678b66e2-66a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:7b:38:83:a1:5f:13:64:65:31:05:fa:b6:
5c:17:94:54:2c:ad:83:9a:d9:e1:1d:85:2e:8c:47:
88:bd:e3:6b:73:48:df:1a:28:3f:02:80:23:8c:1b:
12:4b:3f:c0:42:07:a0:0b:57:8b:ad:39:6d:c1:13:
08:d8:eb:46:00:2a:35:e1:b3:58:c8:9f:26:f4:03:
b3:b4:4b:d7:c0:27:1c:a3:c3:de:7c:c4:10:0e:dd:
8a:d5:da:e0:94:0c:aa:e3:0d:2d:9c:c8:bc:bc:5b:
dd:73:e9:71:aa:66:d9:49:37:91:75:c3:7d:86:1a:
78:bc:71:d6:db:13:98:e0:73:a9:94:d1:1d:6a:6f:
cd:a7:7e:61:fa:1e:ea:24:8f:21:50:2a:7f:94:02:
20:98:5a:75:14:a0:5b:9a:63:4c:90:3d:1d:36:57:
10:ef:ea:13:37:26:1e:e4:e6:14:62:28:b4:42:5c:
15:fa:b1:55:a7:30:83:6c:63:56:fe:f9:0f:76:dd:
15:dd:7f:94:d1:e7:a7:b2:6a:7c:69:c2:e9:2a:8c:
81:27:59:6c:dd:69:32:47:4c:34:99:27:4a:4a:c4:
a7:30:ee:d3:b6:af:02:da:12:02:90:05:c1:a3:2b:
1d:56:f8:b1:2f:a5:27:13:af:06:e4:ab:a8:30:3e:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:04:8C:E9:4E:9A:93:3B:A0:4D:3D:7D:43:38:47:E7:B2:D3:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE9E348D57611EFBB9BE040762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
64:ff:0f:7d:72:2c:fc:10:4c:f1:00:0a:53:4a:99:bc:ef:1f:
71:bc:3a:6c:0d:c1:04:af:41:4e:2b:b5:1a:aa:4a:d8:04:30:
5c:78:5c:6f:5b:aa:f1:0a:fb:11:7a:00:32:b8:71:e8:9a:d0:
0a:66:3f:4d:1b:30:7d:db:81:cf:5b:1b:7b:d8:52:10:ca:75:
8b:9c:c4:2f:8c:09:15:63:6f:44:97:6a:05:b7:c0:b3:b1:e1:
47:ed:b7:55:8b:1c:51:64:72:4c:79:6e:86:30:33:76:d3:df:
7e:4c:59:41:d8:aa:6c:21:fe:2b:d8:58:84:7a:7c:23:b9:e4:
22:ce:6d:59:0a:96:de:3a:db:b1:cf:2c:d7:a1:e0:71:be:5b:
16:a1:e3:2f:da:5b:dd:20:39:24:37:c2:e5:31:6d:a9:e9:5a:
6e:82:36:f9:5a:20:0b:31:c3:d6:f2:5a:10:8f:09:bc:2d:08:
f4:4b:62:a6:56:ee:9f:f2:9f:1d:9a:52:bf:74:e1:36:dd:b6:
10:4d:ce:59:1e:07:7c:f6:71:e0:55:5b:f9:71:7d:c7:8d:17:
c3:07:dc:d2:ad:f9:4e:08:63:9a:ab:9b:ee:20:de:bc:98:40:
4d:1b:f5:8b:2c:99:87:85:e1:b4:6b:c9:cf:78:a4:38:7a:c9:
47:30:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:32 2025 by rpki-client