Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32EBC02D56711EFA8BD4F61762E951A.roa
File: A32EBC02D56711EFA8BD4F61762E951A.roa (raw, json)
Hash identifier: TjPSmLkjwss6gagYskAHCxKXIRWVqKkqd68THybbroo=
Subject key identifier: 1C:23:BC:79:3E:BD:31:BB:9D:1D:9E:59:7E:09:02:DB:4F:C3:86:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32EBC02D56711EFA8BD4F61762E951A.roa
Signing time: Sat 18 Jan 2025 06:44:17 +0000
ROA not before: Sat 18 Jan 2025 06:44:13 +0000
ROA not after: Sat 22 Feb 2025 06:44:13 +0000
asID: 8796
IP address blocks: 154.217.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81274 (0x13d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:44:13 2025 GMT
Not After : Feb 22 06:44:13 2025 GMT
Subject: CN=678b4dc1-ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:a3:45:7f:7e:1b:6c:d8:63:03:dd:6c:53:
37:02:aa:d5:1b:6a:00:62:72:c1:24:1f:14:b2:db:
18:41:fe:6e:73:c4:3f:90:0c:6d:8c:74:98:e5:cc:
94:3a:55:fe:7a:27:cc:3c:01:2b:75:0b:23:7e:f4:
01:0a:43:71:ed:40:bd:08:55:35:e7:22:1e:68:2e:
1d:f3:c0:93:1e:3c:45:6e:c1:10:fe:76:09:45:ac:
70:7a:ae:7f:a5:af:f1:ae:43:59:f9:e8:4c:99:40:
04:08:19:5e:5c:9d:fc:e1:1e:47:6b:a0:31:09:85:
2c:0e:b7:19:08:97:1e:00:ab:64:49:99:0c:62:0c:
49:ee:d9:7d:e5:e7:b1:29:28:70:d6:19:56:9f:77:
6a:43:bf:a6:3f:1b:29:20:8c:aa:38:64:cd:cd:50:
40:f3:1e:38:3f:fc:62:dd:66:dc:18:f7:cc:bc:fe:
23:e7:5d:7e:88:b3:46:03:9a:bf:2f:ff:b2:9c:25:
5c:b3:a3:82:53:5d:38:79:75:a7:bd:d2:29:72:26:
7e:fd:14:7a:13:e8:69:ff:7b:68:57:58:85:c6:af:
da:02:32:c5:63:2e:ee:db:18:4b:30:f4:b5:72:2f:
87:49:b5:d7:c7:ad:33:f7:4d:a8:d0:cc:a0:17:3c:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:BC:79:3E:BD:31:BB:9D:1D:9E:59:7E:09:02:DB:4F:C3:86:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A32EBC02D56711EFA8BD4F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:04:bb:b0:2b:1c:8a:e1:68:a6:5d:49:98:16:2d:1e:39:e6:
0b:da:6e:34:47:e8:fd:43:49:ca:2b:00:d3:bb:ac:8e:8f:2c:
16:17:87:ed:2e:1e:33:e2:1c:50:54:54:da:5c:05:27:32:b4:
ba:8a:e3:fb:55:d9:ed:9a:97:6f:b0:62:ed:a0:76:08:24:5f:
b4:d1:91:3d:62:df:a4:54:ec:6b:11:d2:3e:a7:3c:da:4b:92:
a8:38:ae:1e:dc:a5:be:d2:2b:15:8d:af:a1:80:e2:5a:2b:0e:
53:b8:cb:b5:64:0e:c1:b0:41:86:ca:ed:65:0c:83:cb:ef:21:
fe:71:d5:2a:aa:44:f2:d2:65:0f:6d:e1:32:76:94:f5:7d:74:
57:1b:b9:ab:52:08:5b:a6:fb:bb:94:85:69:d2:2c:32:9e:7e:
4f:d8:91:fd:14:9c:53:18:e5:77:22:45:1a:ec:0f:fc:bb:57:
d4:f7:05:9b:11:a5:c8:c2:85:a4:3d:f7:2a:0f:16:36:4a:bc:
3c:df:ee:25:96:6f:a5:35:d8:e6:30:e8:62:c0:6d:a4:fa:5d:
a5:14:3e:bc:da:fa:a2:a3:78:11:97:fd:e1:5d:fb:ae:d3:36:
d6:9c:23:f3:f4:db:97:c7:26:9c:70:23:8b:0c:66:18:f2:d6:
fa:e5:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:53:26 2025 by rpki-client