Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3991DCD8A411EF88499094762E951A.roa
File: 9E3991DCD8A411EF88499094762E951A.roa (raw, json)
Hash identifier: YO38UdHsljs0GqCYrGQRWCxqHCvjCK239nSVQBI45Ew=
Subject key identifier: 63:A9:2A:16:11:30:76:40:DA:8B:A8:42:CD:24:74:2E:A6:09:9C:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3991DCD8A411EF88499094762E951A.roa
Signing time: Wed 22 Jan 2025 09:38:21 +0000
ROA not before: Wed 22 Jan 2025 09:38:17 +0000
ROA not after: Tue 04 Feb 2025 09:38:17 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81550 (0x13e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:38:17 2025 GMT
Not After : Feb 4 09:38:17 2025 GMT
Subject: CN=6790bc8d-3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:95:05:26:89:49:4b:2c:70:9b:80:5c:82:
96:29:b2:23:68:6e:5f:2d:9b:7f:7e:1e:f2:2a:83:
d4:1a:17:17:d3:71:48:90:62:8d:3a:f6:c5:11:4d:
67:73:c0:a4:c9:ae:af:df:d7:df:d1:f9:7c:95:e8:
e5:58:a4:49:06:b9:ce:92:36:d0:d0:0f:00:17:e0:
39:09:0c:a5:f9:37:3b:08:29:82:28:9b:7e:8d:54:
64:53:66:c2:dd:00:3c:2c:b4:bd:78:d3:41:96:27:
57:23:bf:90:a2:20:42:41:f6:ff:34:7c:21:6b:17:
d5:f7:94:76:e6:56:88:70:d2:45:25:70:78:0f:bc:
b0:dc:fe:68:58:10:cc:18:ad:4a:f5:26:20:57:07:
7f:0a:f9:e7:1e:22:57:c3:c3:a4:f7:ee:de:e9:e1:
2a:70:8b:ca:1b:7b:85:c3:71:71:d4:67:60:b2:04:
f2:dc:7c:aa:f3:5c:ca:93:2c:f9:ee:67:4e:c0:7c:
aa:6e:ab:0f:4a:cd:97:b4:11:6d:a0:7c:cd:0c:93:
76:a7:c2:b9:53:82:4d:49:d5:0f:64:ba:ac:82:65:
fa:07:f6:81:74:22:dd:87:8a:25:49:d9:79:8e:47:
24:17:9c:69:08:d5:42:55:f5:4c:58:df:dc:44:5b:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:2A:16:11:30:76:40:DA:8B:A8:42:CD:24:74:2E:A6:09:9C:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3991DCD8A411EF88499094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
41:29:78:25:8d:bc:58:f9:37:02:f6:3b:a2:2c:3d:78:f6:57:
c6:18:ad:f4:6f:b0:8a:75:1d:3b:1a:05:97:1e:78:b6:f8:58:
8e:a6:45:f8:26:49:89:76:ae:ba:fa:2d:e3:1b:d1:1c:8c:d7:
f7:f6:43:ac:10:5b:2c:e3:aa:2b:5f:db:ad:5f:af:ef:b9:cb:
bc:39:e8:ef:04:7c:d8:85:be:57:0a:97:8a:0d:a1:88:a4:7b:
7e:2e:29:68:31:07:bd:c3:b5:5b:c9:f8:ee:21:ae:bd:dd:71:
4c:ce:2e:dd:df:27:92:6a:6c:57:c9:ca:5c:4d:c4:d7:63:7c:
8a:ce:18:02:02:96:68:03:04:38:04:79:21:2c:6b:a0:9a:2f:
75:c6:5c:c3:89:ee:6a:bd:39:2c:dc:55:42:9a:13:42:58:28:
39:01:30:bd:b5:73:9b:0f:ce:a6:16:23:8f:0e:b1:71:86:34:
c4:f7:6c:65:89:47:7a:83:ea:fe:07:30:4d:5b:65:eb:7d:cf:
31:1c:46:f5:21:a2:09:ee:34:e7:af:74:57:b8:05:4c:21:69:
21:db:8e:b1:ca:37:25:dc:38:d6:b1:4b:ed:c7:b0:6b:58:b6:
b2:65:c7:3e:5c:34:d4:0d:f2:8b:62:59:be:b5:9f:2a:62:db:
6b:87:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:30 2025 by rpki-client