Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1ACD790DCC611EFBF828171762E951A.roa
File: A1ACD790DCC611EFBF828171762E951A.roa (raw, json)
Hash identifier: YsUb3w5FjfQOwGir6eRXTKeCj/S4wk06gJO+08f+pBI=
Subject key identifier: E0:99:92:23:7E:2A:02:14:65:7A:19:99:E1:9D:F8:6A:8B:05:F0:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1ACD790DCC611EFBF828171762E951A.roa
Signing time: Mon 27 Jan 2025 15:51:55 +0000
ROA not before: Mon 27 Jan 2025 15:51:51 +0000
ROA not after: Thu 13 Feb 2025 15:51:51 +0000
asID: 7018
IP address blocks: 154.207.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85079 (0x14c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:51:51 2025 GMT
Not After : Feb 13 15:51:51 2025 GMT
Subject: CN=6797ab9a-9979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:e3:63:42:d1:10:ea:ca:c3:58:c6:07:34:
a5:70:00:4c:11:d9:da:9f:90:71:2b:4f:05:19:f0:
d4:5a:05:74:65:0a:d2:30:ca:97:a4:e3:10:25:4a:
73:86:43:72:4a:80:f7:4a:81:d1:67:64:40:6f:33:
50:e5:0c:dd:6f:24:ac:f8:fe:37:60:b0:c8:f7:9b:
cd:c7:84:bd:d6:6c:2e:8a:ab:08:c0:14:67:ae:1d:
c5:64:49:a3:c1:15:26:28:d7:6c:7e:8e:d0:6f:03:
1a:6a:58:de:4f:75:aa:fb:fd:b7:76:af:3d:1e:a7:
95:e1:1a:03:2b:31:3f:ca:37:65:4b:ee:90:71:8e:
b5:08:45:e1:d7:bf:c5:cd:e5:fd:fb:22:ce:39:51:
ea:0f:06:c7:09:0d:7e:3e:19:e6:44:54:f7:5b:01:
37:19:dc:e7:b1:e1:cf:fb:5b:3f:58:8c:4a:30:ba:
af:b6:d2:8f:71:a7:a6:cf:e7:db:9e:2a:f5:7b:7c:
78:2b:e4:63:5d:30:98:6b:9f:81:80:82:94:e9:5d:
04:b8:35:d2:db:10:02:fb:97:5c:30:bb:13:6d:c2:
78:17:e2:e3:5c:c0:38:8f:20:23:9e:d5:96:40:99:
80:0c:47:95:8b:18:6a:64:d3:59:3f:9e:0b:00:5c:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:92:23:7E:2A:02:14:65:7A:19:99:E1:9D:F8:6A:8B:05:F0:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1ACD790DCC611EFBF828171762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.152.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:f9:3a:8f:0a:92:2a:66:3f:2d:0e:50:4a:af:89:90:61:f3:
0b:62:34:31:0e:38:72:8c:49:e1:83:33:05:09:a3:9d:b4:45:
0c:af:b3:a7:67:9c:05:94:c0:fd:af:ef:90:69:f9:8b:71:ba:
78:a0:1d:f6:0e:73:e5:31:13:5f:41:10:63:f6:77:a7:13:fb:
0b:2e:a4:6d:8f:a0:d0:95:63:8f:d2:fa:88:8d:47:0e:84:f5:
a2:24:a3:83:a2:59:a2:22:ae:d3:c7:07:50:da:02:cc:e2:21:
2b:c0:e1:df:7c:b1:08:a7:00:34:7d:25:82:b6:e7:85:d1:56:
26:fd:be:8a:d0:84:db:b6:94:53:23:0e:73:ad:cc:95:4f:fc:
59:ea:75:1e:22:89:f4:cd:61:72:47:bb:2b:1a:82:d4:ae:89:
1e:7c:1a:51:28:73:ce:f7:9d:55:de:39:6d:0f:b2:23:4d:bc:
3b:4e:eb:8f:fa:f7:3b:14:77:c4:e4:f0:3a:e2:fa:d0:98:6f:
92:45:1d:45:14:8f:11:64:9f:cc:e1:ad:fc:8c:a6:50:62:e0:
a0:58:1a:eb:5e:c7:b9:3e:08:5b:c4:15:a6:34:11:86:6d:f0:
22:7b:76:8c:c6:ec:67:84:23:42:32:e0:c6:10:d7:30:8a:2e:
f9:19:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:23 2025 by rpki-client