Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D79B24D0BA11EF8D79685B762E951A.roa
File: A0D79B24D0BA11EF8D79685B762E951A.roa (raw, json)
Hash identifier: Jb1HNQrv8TZQlWevvAQRMEsFyFkX0wWUKZsbeoVYs9E=
Subject key identifier: A0:C2:81:8B:81:98:88:DF:1D:8B:A9:7B:CB:95:3A:F7:4C:96:80:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D79B24D0BA11EF8D79685B762E951A.roa
Signing time: Sun 12 Jan 2025 07:55:45 +0000
ROA not before: Sun 12 Jan 2025 07:55:42 +0000
ROA not after: Fri 14 Feb 2025 07:55:42 +0000
asID: 137899
IP address blocks: 154.222.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80548 (0x13aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 07:55:42 2025 GMT
Not After : Feb 14 07:55:42 2025 GMT
Subject: CN=67837581-9d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:c9:1d:3b:b4:97:ce:b0:45:50:a8:c1:f0:
45:58:12:b2:0c:d0:8f:de:3f:6a:b1:28:21:48:b5:
22:01:81:ec:d9:ef:1c:67:bc:e4:58:5b:f0:4d:8b:
c8:dd:f4:8f:06:f3:fe:9e:d6:56:80:56:7d:75:89:
78:c9:1c:a6:e1:15:95:72:c4:8c:59:54:91:0f:eb:
3f:3a:16:95:5d:be:72:c5:3d:2b:a0:86:de:69:1a:
f2:a2:78:65:dd:28:db:9e:62:60:b6:f8:ec:0c:05:
80:5a:8e:a6:46:0b:76:cd:ba:fe:66:66:36:07:23:
d2:1e:ae:cf:f7:a7:15:bc:92:0a:39:e8:5f:77:29:
bf:9e:a7:a0:b9:12:af:ad:e9:8c:4e:6e:62:b4:aa:
bf:4c:a2:f0:16:c7:7c:68:06:cf:bb:84:a1:6a:75:
21:21:8b:79:0c:98:33:08:c3:81:a1:90:5e:c2:18:
27:54:bc:06:b5:9d:91:73:ba:ff:55:51:45:6b:8b:
b3:d5:4b:46:cf:da:51:07:c4:87:1d:4c:dd:b2:c3:
45:2f:80:e6:d6:38:79:9b:2c:b5:04:92:de:97:ad:
b5:77:af:a8:a1:88:fe:6a:70:56:c4:6a:a3:1a:b3:
57:10:87:cd:21:8e:3d:8d:a8:db:5b:ad:13:97:9f:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:81:8B:81:98:88:DF:1D:8B:A9:7B:CB:95:3A:F7:4C:96:80:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D79B24D0BA11EF8D79685B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c9:60:2f:65:07:ae:ea:27:4e:be:9e:29:b7:1c:18:09:7d:
e0:c0:0f:83:7e:fa:f4:24:c6:c6:ca:cb:23:d8:2d:07:eb:ce:
d0:e9:e9:ff:49:60:a0:47:4d:a6:44:72:04:dc:30:d3:20:1c:
8d:63:bf:b1:b2:eb:66:e6:46:44:ea:99:9c:61:d3:7e:e0:16:
00:a9:cf:aa:0a:78:4d:6a:bc:ec:0f:3e:04:fb:7b:41:80:0e:
ac:62:b6:97:47:41:96:f3:66:e6:7f:9d:7f:8b:48:aa:29:59:
11:a1:3e:4b:10:0d:8b:c1:95:5d:ea:9e:5e:db:68:98:8d:93:
82:a1:f5:4b:a2:95:d2:c1:90:23:e4:90:d8:64:95:c7:c0:57:
66:73:6b:6a:8e:42:5f:92:b1:bd:88:a0:8f:e0:82:a3:88:a9:
fa:bd:d3:85:99:47:44:62:68:50:fe:fe:82:a5:1f:2a:b1:60:
7f:b9:79:60:96:b7:bb:77:e5:6f:e5:21:7f:f9:8f:a9:1a:09:
48:83:45:d3:f3:ae:58:c9:d5:29:2a:59:2e:89:73:69:0f:f6:
65:a0:2b:cd:7f:2c:bc:84:52:20:2f:c9:24:f8:23:36:6d:b7:
43:16:31:08:eb:fe:5b:e8:e3:42:1a:e7:b6:9e:80:6f:bb:93:
c0:aa:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:48 2025 by rpki-client