Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376E174C6CD11EF8A2995BD762E951A.roa
File: A376E174C6CD11EF8A2995BD762E951A.roa (raw, json)
Hash identifier: FwkgAYGDJrp/ngGWpOhG9I+X37vYu4CXRnb9mGPV1kg=
Subject key identifier: 40:0C:88:AA:D4:84:98:9E:D9:1F:27:C3:BF:43:AF:43:21:71:B4:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376E174C6CD11EF8A2995BD762E951A.roa
Signing time: Mon 30 Dec 2024 16:46:38 +0000
ROA not before: Mon 30 Dec 2024 16:46:35 +0000
ROA not after: Sun 02 Feb 2025 16:46:35 +0000
asID: 54600
IP address blocks: 154.202.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78054 (0x130e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:46:35 2024 GMT
Not After : Feb 2 16:46:35 2025 GMT
Subject: CN=6772ce6e-09ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:b7:84:c2:8c:37:f8:e2:06:1b:f2:90:52:
7e:b0:7f:40:1e:8d:f3:09:9f:08:e0:ec:8b:ec:e4:
72:1e:bd:bc:ad:ea:99:e8:e7:1f:66:15:a1:63:5a:
9a:5d:5a:cf:0b:0f:85:c1:eb:fc:a4:0d:43:74:2d:
29:f3:38:ba:a7:b5:f9:b8:ec:36:a7:d7:35:b7:c2:
75:92:6b:53:49:ba:54:26:b0:3e:da:65:47:ab:17:
d3:b1:e4:98:c3:62:76:7d:86:0d:ea:55:35:eb:8c:
ea:3d:c2:04:74:02:c0:d5:13:a3:15:28:2a:94:15:
ee:04:e6:c1:9f:03:c4:86:15:65:e2:3f:df:3c:26:
01:36:51:bd:8c:6f:29:42:91:14:07:54:19:98:22:
36:3d:76:51:0b:53:ae:bc:ce:a7:70:98:c3:93:04:
fe:f6:90:e7:d9:e3:9e:32:58:5f:9b:b7:ee:7f:3e:
39:31:c7:8d:5d:22:0a:00:8e:10:b0:cd:d2:b7:4c:
bc:54:94:0b:bc:07:c1:7d:ae:25:d9:d1:ae:01:c4:
5c:f3:94:c8:ec:79:5d:eb:a8:9f:8a:1c:43:47:c2:
0a:85:dc:df:16:86:40:90:9d:62:74:99:53:84:19:
81:ab:36:39:5c:05:1d:83:ad:7b:f2:10:34:d6:d2:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:88:AA:D4:84:98:9E:D9:1F:27:C3:BF:43:AF:43:21:71:B4:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A376E174C6CD11EF8A2995BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.224.0/20
Signature Algorithm: sha256WithRSAEncryption
40:96:b9:fc:5c:28:8b:3f:f7:7d:dd:94:80:47:19:3d:3c:08:
f9:55:36:6d:2f:cd:04:4f:ec:72:15:a9:dc:40:2c:aa:c7:ae:
c3:91:4a:a6:67:98:f3:52:21:b4:51:5d:61:fc:b6:15:1d:1d:
3a:38:10:14:3b:d4:42:60:15:23:00:1a:48:a4:42:1d:98:91:
27:93:70:0a:27:32:53:3e:0d:04:c2:e7:c7:86:f2:30:6f:7c:
97:9b:c8:aa:a6:70:d3:9a:cf:8e:4b:45:e7:df:21:ee:c9:ff:
57:a9:61:b1:b9:fa:58:c8:66:c7:db:df:47:45:59:d2:f4:9d:
75:2d:9c:5f:89:42:9e:7a:f5:52:e3:1f:de:9e:1b:df:af:29:
0b:54:94:ed:6e:f7:ca:de:56:84:a3:d1:66:3a:4c:f1:61:21:
1a:77:8c:bd:33:1a:34:fc:42:1a:23:b6:d4:5c:84:ee:a1:48:
74:58:b6:7c:fd:82:a3:a6:56:f8:0e:ae:86:6b:1a:1a:eb:56:
19:bd:6a:07:92:69:c1:7c:ec:28:30:ff:2a:a6:1f:50:76:a3:
4c:fd:b6:e9:b9:41:0c:3c:24:57:8f:e8:4a:8d:27:17:6b:5d:
38:98:78:19:0a:ad:8e:09:1f:72:6f:98:43:71:8b:4a:6a:57:
a5:b2:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:13 2025 by rpki-client