Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2845822DC0911EF8AC47077762E951A.roa
File: A2845822DC0911EF8AC47077762E951A.roa (raw, json)
Hash identifier: jW/g2IQBkKWb1LE98HIO0gh7FsFgNnKn3ArG/VWGKAk=
Subject key identifier: 1A:4D:97:45:5D:CA:0A:A0:CE:EB:9F:0C:3E:76:20:DE:CE:37:B8:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2845822DC0911EF8AC47077762E951A.roa
Signing time: Sun 26 Jan 2025 17:19:01 +0000
ROA not before: Sun 26 Jan 2025 17:18:57 +0000
ROA not after: Thu 20 Feb 2025 17:18:57 +0000
asID: 142062
IP address blocks: 154.86.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84760 (0x14b18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 17:18:57 2025 GMT
Not After : Feb 20 17:18:57 2025 GMT
Subject: CN=67966e85-aab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:60:9a:19:c1:00:76:e3:7f:be:c8:91:4d:
8b:41:d5:9c:0c:ce:c6:de:80:ab:f4:53:ba:ac:a8:
8e:a9:9f:09:78:b0:57:25:61:01:f4:11:d3:6e:9d:
e3:97:57:8c:df:30:6c:42:11:d8:64:70:33:ff:d1:
14:89:b1:94:0a:ff:4f:36:47:78:d6:1a:82:38:0f:
a1:37:67:a6:d1:23:70:46:e5:3a:4f:04:97:44:91:
3c:d5:c0:30:bd:a3:40:85:80:6f:c6:e4:67:15:73:
ff:13:fc:d9:5f:c1:7b:d8:45:69:91:57:f6:1e:20:
7b:4f:0a:75:c0:62:0f:b6:20:62:e1:16:47:a9:15:
b3:00:fe:8b:c7:ec:a5:4a:dd:72:ad:f2:f4:77:33:
0e:27:3c:a3:50:7d:42:bb:45:ca:67:8b:d7:63:86:
7b:d3:07:ba:3f:ad:be:3e:47:6d:03:a6:5d:23:82:
35:e9:24:5a:d7:97:d3:8b:35:ec:1a:48:eb:e6:67:
a7:77:af:bf:aa:75:47:d0:86:51:99:40:e4:3a:18:
e5:e4:f4:47:88:6a:ff:f5:78:ea:83:15:15:72:3b:
32:c6:e1:4e:7f:3c:62:71:8a:0c:87:19:09:cc:3c:
6f:d2:9a:9b:84:f6:31:06:54:41:60:df:a0:5e:9c:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:97:45:5D:CA:0A:A0:CE:EB:9F:0C:3E:76:20:DE:CE:37:B8:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2845822DC0911EF8AC47077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.64.0/20
Signature Algorithm: sha256WithRSAEncryption
01:56:61:8b:48:89:a5:42:44:b9:e0:a3:ac:22:a6:e2:cb:ba:
3c:95:ae:ed:5c:28:8e:7b:c6:29:a2:7a:27:06:93:8c:b4:ee:
34:88:c3:b9:fd:4c:95:64:1e:8e:d2:7a:67:0b:61:93:10:e2:
79:af:3f:d7:d0:d7:d3:54:c8:fc:83:76:80:04:3b:3c:a2:c0:
00:e6:92:e7:fa:dc:f8:0b:7e:cd:c5:13:e7:80:cf:59:01:82:
ba:c2:9c:22:bd:6d:86:89:ea:35:9d:00:9e:83:de:d5:41:5f:
59:c1:c0:48:b1:c9:05:68:2d:6b:fc:cd:f0:3d:5f:c9:c9:23:
74:51:12:e6:1b:41:34:b1:a5:74:70:4e:79:aa:6b:6d:2c:d5:
f0:67:e9:5a:d1:70:8a:8a:4b:dc:06:2e:69:3c:43:b1:c3:be:
89:1a:53:ed:b3:9a:f6:cf:76:ad:f5:a1:f5:10:04:17:24:2f:
56:d4:af:ba:03:17:3e:56:22:18:0d:1b:0c:d2:e6:a4:9b:43:
4e:0b:f5:61:49:ce:33:87:78:eb:06:95:34:da:c9:38:b6:e0:
e6:3d:ec:84:45:e3:24:f4:b8:60:7d:89:56:19:33:83:2b:09:
b5:bd:ab:5a:b7:ef:9f:94:25:27:18:d0:a1:1e:35:3c:9a:25:
4d:c2:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:05 2025 by rpki-client