Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29B6462C9C711EFB00545BC762E951A.roa
File: A29B6462C9C711EFB00545BC762E951A.roa (raw, json)
Hash identifier: d5Va5/BllYlBmuxcnt72oCgXoF0E7FTAYQTEnQFKisM=
Subject key identifier: BE:2D:F4:21:3C:D4:45:50:E7:05:7E:88:0E:FF:01:B0:14:47:C8:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29B6462C9C711EFB00545BC762E951A.roa
Signing time: Fri 03 Jan 2025 11:41:13 +0000
ROA not before: Fri 03 Jan 2025 11:41:09 +0000
ROA not after: Tue 04 Feb 2025 11:41:09 +0000
asID: 203020
IP address blocks: 154.209.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79024 (0x134b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:41:09 2025 GMT
Not After : Feb 4 11:41:09 2025 GMT
Subject: CN=6777ccd9-5e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:ee:ef:a0:71:71:b7:e4:dd:7b:cb:7e:bc:
82:51:3f:5e:c4:bc:f1:4a:c5:e5:82:42:c7:98:e4:
d8:77:9a:28:b4:71:d1:c8:a1:b0:38:1f:77:d2:22:
71:99:54:01:b8:e8:c4:1a:c3:f6:81:ad:29:17:d3:
a3:7f:15:18:35:49:89:f3:ee:b0:c2:99:b4:e9:85:
20:b4:29:9f:e1:65:7b:ca:77:5b:43:4b:37:12:b2:
f7:0a:d5:b9:d3:6f:e7:3a:8e:1a:37:05:fd:77:54:
31:fa:9e:44:07:db:f4:dd:5e:a4:53:99:d4:91:14:
57:4d:03:ef:09:38:70:46:70:9b:04:c7:fb:23:5b:
92:31:e5:f9:b5:60:14:1d:2b:10:38:4e:3a:c6:7a:
06:74:73:30:32:77:d8:0a:24:e3:57:d1:8b:bb:fc:
1c:d2:b1:46:a5:8d:7d:2d:a3:f7:b2:74:96:91:f6:
fa:6f:48:40:37:71:21:cb:a3:e5:39:cd:98:e9:e4:
bb:6b:33:fd:88:c5:e2:95:21:7e:b3:42:90:51:29:
74:7d:f6:c7:b0:88:4f:4f:69:9a:14:ec:5f:d7:88:
55:b4:9c:7d:80:8e:3d:0f:b9:6e:b4:47:d9:6b:d9:
e8:ee:e8:2a:ae:63:50:0b:59:f9:62:11:1c:07:ca:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:F4:21:3C:D4:45:50:E7:05:7E:88:0E:FF:01:B0:14:47:C8:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29B6462C9C711EFB00545BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:b6:d1:f2:1b:ee:00:8a:e3:33:0d:39:ac:1b:99:6c:c0:8a:
a3:3a:4f:fe:97:6e:4d:7a:fb:36:b8:d4:fc:8b:92:a8:ae:9b:
7f:ff:c4:43:ae:f0:5e:23:ba:b9:44:be:06:4f:ee:86:65:9c:
3f:b6:dc:fd:82:f3:cc:a8:db:b3:82:55:c4:55:aa:f3:48:05:
85:bb:03:e2:e8:45:58:a0:9d:44:8c:4e:c7:40:af:a6:b3:7b:
15:1c:b8:71:d6:80:e5:59:eb:7d:86:39:c8:01:57:ef:eb:6b:
95:aa:44:cc:0b:b4:3c:79:04:ab:06:04:ef:8a:03:23:ad:28:
16:a1:ce:08:d5:79:d7:f2:38:ae:7f:28:3b:45:1a:de:a5:5c:
c1:2e:84:15:af:67:50:f6:72:d9:ca:6d:0a:4a:38:60:85:55:
1f:81:20:66:a2:a1:d2:58:92:db:f6:7d:3d:1a:e6:09:84:be:
6f:97:14:44:b5:d2:80:63:7d:ff:73:96:73:97:46:ef:63:e1:
7c:8a:7a:75:1a:53:ff:5c:2a:86:7e:d4:9a:71:aa:57:59:15:
93:08:f0:ae:44:88:64:8c:ce:e0:a3:41:f4:6c:c1:05:fa:b3:
e3:c0:e3:eb:11:7f:b3:d1:69:0d:64:b6:31:f4:09:25:ae:f6:
5e:5e:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:23 2025 by rpki-client