Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A021554EDCCC11EF8E4D1E99762E951A.roa
File: A021554EDCCC11EF8E4D1E99762E951A.roa (raw, json)
Hash identifier: 3dq7rHMu3FkC/6ETskdlk0Rr2E08FEMlTVBc6Jflt7I=
Subject key identifier: D2:55:0C:87:C4:DE:DC:80:AB:3A:B4:1E:6F:B1:6A:1E:99:5E:DA:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A021554EDCCC11EF8E4D1E99762E951A.roa
Signing time: Mon 27 Jan 2025 16:34:49 +0000
ROA not before: Mon 27 Jan 2025 16:34:45 +0000
ROA not after: Wed 12 Feb 2025 16:34:45 +0000
asID: 135097
IP address blocks: 154.212.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85117 (0x14c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:34:45 2025 GMT
Not After : Feb 12 16:34:45 2025 GMT
Subject: CN=6797b5a9-d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:d6:e1:4b:38:1d:7b:2c:22:bf:a6:fd:80:
e7:34:a4:c1:a4:5c:a3:92:cf:38:0f:eb:bf:57:43:
0a:d0:b1:24:db:19:64:d3:cc:4c:cb:eb:cd:de:b2:
be:89:b4:aa:e1:c9:b5:88:0d:36:02:9a:aa:ba:ad:
84:7f:3b:50:ca:fc:1d:3b:47:16:08:c6:f1:69:ff:
f8:2b:02:95:9c:1d:9d:4d:a7:8d:e7:b9:cb:fd:0b:
d2:5d:4b:98:ea:11:c0:72:f1:a3:3a:96:dc:ad:fd:
49:9a:d2:d1:63:01:35:08:7c:3e:73:b6:a6:02:8e:
84:92:0b:bc:81:14:a6:97:15:3b:b5:2f:75:33:54:
e6:30:9c:c0:92:6a:0b:38:17:02:1e:fc:f8:a3:12:
56:06:f9:e8:23:32:56:a5:34:6b:26:00:a4:1f:81:
cd:0f:78:31:33:ed:7b:47:a8:8d:62:9e:ec:b2:aa:
66:ff:c6:3c:47:e0:6c:f3:fd:57:cd:4c:53:9b:81:
0e:f3:16:ca:0f:43:5b:11:1a:a6:75:98:98:a7:99:
f4:1b:60:21:8d:26:b6:cc:ba:4e:2e:0b:d8:93:a2:
3e:21:4e:29:15:3f:51:b7:88:26:c7:db:ae:dd:83:
cb:25:2e:4f:d2:9e:e1:47:70:5f:16:d5:5d:1f:66:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:0C:87:C4:DE:DC:80:AB:3A:B4:1E:6F:B1:6A:1E:99:5E:DA:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A021554EDCCC11EF8E4D1E99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.176.0/20
Signature Algorithm: sha256WithRSAEncryption
34:b7:9d:e3:85:4b:e0:22:fc:54:4f:f5:b2:3d:48:40:b7:1e:
b7:aa:da:2a:3c:2c:01:e9:a9:b7:e8:04:00:f8:7b:25:17:25:
f0:4e:73:b1:a3:9d:2a:97:e6:c9:3a:ca:f3:75:65:18:71:e4:
ac:28:d4:3b:7f:e1:7d:fc:06:70:2f:15:46:7d:29:02:20:96:
e7:21:22:a2:08:e0:ff:75:ce:68:dc:ab:7b:e6:51:94:1d:41:
43:9e:02:70:9f:41:2d:e9:e2:bc:7e:f1:f7:a6:b9:48:a4:97:
58:d6:bf:27:fb:d6:ca:18:59:81:75:a6:b6:ac:05:8a:66:49:
49:57:fe:63:a2:a9:d9:82:1e:d3:99:3c:b0:b9:79:56:14:a5:
5c:b4:96:37:b8:c1:43:99:6f:36:99:81:2d:eb:35:e9:9c:7b:
61:23:56:84:15:27:99:5b:a4:dd:58:28:b4:e5:4c:d3:b9:df:
d0:3d:15:db:dc:1d:87:0d:d5:03:cc:ab:5e:70:d3:5f:02:b5:
3c:75:d7:29:1f:d2:43:87:11:d5:69:98:ce:35:c1:16:2b:01:
56:3b:d6:23:a6:5f:2b:9b:af:5b:5d:ce:bc:35:e6:2e:e3:c4:
e4:83:4f:cf:1c:b9:7a:db:bc:cb:97:20:d0:7a:e6:d4:99:87:
06:3b:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:40 2025 by rpki-client