Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1171702D50811EF8C395163762E951A.roa
File: A1171702D50811EF8C395163762E951A.roa (raw, json)
Hash identifier: lupd5TnMj7p1Jp7fSipPWVPPjVGEHUCWBY9verg4j5o=
Subject key identifier: A1:50:58:AA:6F:71:45:98:14:CA:13:F2:07:B9:91:C8:F8:A4:62:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1171702D50811EF8C395163762E951A.roa
Signing time: Fri 17 Jan 2025 19:24:11 +0000
ROA not before: Fri 17 Jan 2025 19:24:08 +0000
ROA not after: Sat 22 Feb 2025 19:24:08 +0000
asID: 54801
IP address blocks: 154.212.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81197 (0x13d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 19:24:08 2025 GMT
Not After : Feb 22 19:24:08 2025 GMT
Subject: CN=678aae5b-efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:21:d7:b7:12:03:86:8e:06:29:82:f5:5e:
a5:00:82:a4:3d:67:0c:88:ec:b9:bf:02:64:18:db:
23:3d:fb:49:62:71:38:e4:85:a1:12:c1:cc:c5:24:
93:31:7a:53:59:ad:85:0c:eb:4c:58:b2:44:c0:0f:
48:ff:79:e9:25:92:72:c1:33:85:90:1f:2e:58:3f:
60:c0:69:c7:3e:b3:0c:c5:7d:9a:f9:67:fa:c9:bd:
18:67:4b:24:37:52:44:89:ab:3d:dc:70:fe:41:d3:
9e:3f:53:ad:c5:83:e4:67:28:2a:21:e6:eb:5e:76:
40:64:00:18:ca:0f:6e:09:5c:b2:7f:ac:55:98:90:
ca:63:93:51:6c:53:22:de:d5:ae:c1:01:c9:d0:8b:
ab:17:df:90:e4:0b:6a:85:02:70:d8:dc:a1:b8:aa:
a4:17:c6:20:c5:3e:41:0f:03:8a:0f:c0:98:07:4f:
ad:5a:86:d6:9c:e6:4c:ac:0d:06:5f:e3:fe:c8:93:
77:4c:c1:25:d8:6f:b3:97:0e:c6:03:8a:1e:99:f6:
62:a9:29:24:a2:7c:be:36:57:c4:83:a0:7b:0f:3c:
2a:d7:b4:a5:09:3b:3d:f4:63:f9:d1:97:77:e0:bc:
c0:7d:d6:0e:a2:0e:1e:6a:8d:ec:3b:e6:61:04:91:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:58:AA:6F:71:45:98:14:CA:13:F2:07:B9:91:C8:F8:A4:62:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1171702D50811EF8C395163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4a:b8:dc:cb:b0:f7:30:8f:64:9e:3b:60:61:75:b6:21:d3:
28:89:2a:4e:9e:6f:d2:99:14:5e:0a:a7:72:a8:7b:24:6d:37:
ed:41:57:be:d4:b4:1c:c5:6c:55:b7:02:d9:e5:af:42:be:27:
00:e5:dd:21:c0:dd:aa:7b:46:ee:60:ac:b6:54:ed:e9:9b:9b:
e7:59:28:63:3b:dc:57:a4:b4:00:fe:f7:c7:cd:8f:45:e7:e5:
ce:b1:fb:50:24:60:9b:11:c5:fa:cf:6a:4e:01:d6:92:95:39:
dd:f2:91:16:e6:b4:10:6a:38:77:74:9b:7f:84:ae:14:3d:9c:
4f:33:86:c6:ef:0f:9a:4e:0f:9c:00:a6:e4:13:a3:87:79:1a:
50:cf:85:be:fa:44:43:94:03:6e:e3:bf:a3:8f:51:12:47:73:
dc:1e:fd:46:8a:f1:5b:44:ce:fe:d0:7f:ec:b9:75:2f:52:fc:
0b:bd:6b:74:02:52:5d:af:5d:b9:42:24:37:df:37:48:a2:8a:
66:17:b4:30:56:ed:56:82:0b:54:0b:5f:ed:63:59:33:2f:64:
f2:86:40:ef:96:1b:ed:b8:a8:70:21:2a:bd:95:7a:6b:c3:34:
a2:7f:80:99:db:a2:48:06:de:5e:bf:f8:f0:98:b0:af:58:e2:
dd:a8:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:34 2025 by rpki-client