Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A130BF28DA2A11EF94141556762E951A.roa
File: A130BF28DA2A11EF94141556762E951A.roa (raw, json)
Hash identifier: HTXYTKuhT8v7QKBZUJJ6gKILq50093Ts6MPkpf6OE2I=
Subject key identifier: E5:98:12:6B:3F:32:B3:79:3A:3C:32:0F:71:22:19:82:66:F2:E9:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01444C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A130BF28DA2A11EF94141556762E951A.roa
Signing time: Fri 24 Jan 2025 08:10:10 +0000
ROA not before: Fri 24 Jan 2025 08:10:06 +0000
ROA not after: Wed 05 Mar 2025 08:10:06 +0000
asID: 202656
IP address blocks: 154.222.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83020 (0x1444c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:10:06 2025 GMT
Not After : Mar 5 08:10:06 2025 GMT
Subject: CN=67934ae2-e810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:80:08:68:12:ad:69:d1:19:d3:90:c9:50:
9b:8d:a3:87:cd:c6:90:72:31:9e:5b:59:a2:e0:eb:
48:da:97:ec:c4:ce:3b:af:f3:f8:3d:db:a4:d0:92:
60:15:d0:93:fc:d9:dc:4d:ec:b4:8c:d5:7c:c3:04:
35:5e:79:96:c2:57:4a:ca:0f:3a:ae:ee:42:d1:0f:
0b:6f:10:74:1c:b6:30:44:0b:0d:31:0f:63:66:5d:
cf:e3:68:e2:d0:1d:53:2f:93:2b:77:ae:36:0f:d1:
c2:05:88:4f:e5:c4:4f:b8:fd:8d:cb:4f:85:06:08:
42:cf:43:79:ca:e6:16:07:a3:be:dd:52:5f:b0:ed:
bd:91:bf:a6:92:15:d1:18:66:d5:61:41:25:c5:dd:
3c:c3:39:b4:ae:67:65:1a:66:96:85:58:2f:40:a4:
31:f7:56:23:97:3e:bd:cd:dc:01:1d:60:e1:40:a3:
47:68:89:64:3a:92:e1:00:ff:3f:2c:aa:2d:54:78:
88:0a:22:24:5a:75:f8:c6:fb:61:46:c1:9d:58:02:
e2:7c:a4:bf:d0:c1:20:35:8c:7a:de:cf:3e:4b:7a:
74:5e:12:2d:3e:95:40:8f:2a:7e:8d:09:9a:f6:e9:
5f:59:ab:83:9e:f8:7c:d6:ca:b0:ec:5f:35:3d:3e:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:12:6B:3F:32:B3:79:3A:3C:32:0F:71:22:19:82:66:F2:E9:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A130BF28DA2A11EF94141556762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ee:df:e5:e2:3e:00:b3:51:a4:40:ec:53:7b:d4:cb:f6:1f:
1e:b6:4b:cf:2e:ab:0d:51:de:60:25:e8:60:5e:cd:f4:12:1d:
5e:ca:59:61:2b:33:40:43:4e:11:e5:7c:6a:9c:c7:7b:fd:c7:
fd:c3:1d:53:fd:cc:96:aa:fa:90:6d:c9:4c:b5:3e:a8:bc:03:
f8:04:fe:b2:dc:1d:4a:76:20:f9:c1:e8:d0:47:34:71:60:13:
b0:33:76:4f:4a:d7:b3:81:ad:60:46:6a:ab:c5:f5:4c:f8:77:
5b:60:ae:2e:fa:df:5a:ed:ad:40:94:2e:98:f7:24:28:8c:1c:
61:a0:6c:ea:c3:9e:36:ab:70:89:e1:b5:bb:5b:e5:50:e9:22:
1e:f9:04:22:8f:f2:88:13:6e:5c:67:aa:64:b7:32:76:34:54:
a0:74:a5:3a:77:0f:76:e0:8a:97:6a:5c:be:95:7d:74:cb:a0:
2d:f5:b0:d3:91:53:cd:46:a5:f8:93:a3:c8:33:cf:69:36:49:
ec:d6:3f:6e:65:90:bb:e3:91:0f:55:7f:da:9c:15:9c:61:fd:
bb:88:e7:d0:43:8d:70:80:65:5c:22:01:65:f5:92:95:9c:1b:
77:79:0d:1c:79:16:1d:52:bc:36:71:11:12:53:30:00:fb:8a:
fd:b7:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:34 2025 by rpki-client