Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A48C6776CADA11EFA0F3F681762E951A.roa
File: A48C6776CADA11EFA0F3F681762E951A.roa (raw, json)
Hash identifier: +4A7t/KI8Bj1ncCFIEXK5IvHG2ob3oKU418l4TB7Lqo=
Subject key identifier: 1E:EA:E6:B6:4C:05:95:62:A6:57:62:B8:1D:37:38:89:67:0F:27:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01354B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A48C6776CADA11EFA0F3F681762E951A.roa
Signing time: Sat 04 Jan 2025 20:29:48 +0000
ROA not before: Sun 05 Jan 2025 20:29:45 +0000
ROA not after: Sat 08 Feb 2025 20:29:45 +0000
asID: 203020
IP address blocks: 154.217.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79179 (0x1354b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:29:45 2025 GMT
Not After : Feb 8 20:29:45 2025 GMT
Subject: CN=67799a3c-c954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:3c:36:2f:5b:74:5e:eb:e2:10:fe:af:c3:
8d:9b:fc:4a:f9:30:81:05:76:fb:4a:69:30:71:19:
4c:f7:c3:5d:71:0f:ce:e5:b3:04:fc:48:b0:74:cd:
39:7c:06:f1:da:e3:72:d1:c4:fa:21:b4:a4:f9:24:
c8:2a:3c:8b:1e:64:12:66:82:e1:65:b6:3d:03:64:
e9:f1:91:c8:30:03:19:aa:63:c0:02:21:39:e4:91:
0c:50:9b:de:ab:16:cf:07:46:9e:54:bb:85:48:16:
16:27:8d:42:61:1a:a7:63:f0:12:64:79:20:85:7d:
89:42:9d:cb:23:61:7d:b0:71:9c:7b:ad:0a:fc:00:
d3:7c:9b:42:6b:07:98:b5:5e:cf:e3:c9:e6:76:41:
52:1c:3f:fa:ac:ba:7e:08:fc:bb:57:c3:29:58:a6:
71:35:76:ce:c9:a5:03:fc:a4:19:0e:f9:d3:91:bd:
6d:51:0f:96:a8:27:7d:6c:cc:62:55:a8:e4:b7:5e:
99:ce:41:27:46:0d:1d:a9:c8:9a:e9:fc:94:f4:7e:
ac:83:14:0c:e0:03:0a:10:ea:fc:f6:85:ca:ac:ee:
f1:c6:0d:73:d9:2a:f3:e3:fc:28:d4:8b:e3:55:33:
d0:73:e2:a5:6f:1c:c8:da:7e:60:62:53:8e:a4:a9:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:E6:B6:4C:05:95:62:A6:57:62:B8:1D:37:38:89:67:0F:27:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A48C6776CADA11EFA0F3F681762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.132.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:23:9a:b3:0c:3c:8f:b5:57:bc:76:24:75:e9:14:1d:d5:90:
27:ce:51:91:4f:4e:6c:d5:85:a0:b5:40:cf:7f:00:d3:7a:2c:
89:13:4a:24:73:14:f0:3c:24:b2:2c:43:db:1e:00:12:06:9b:
08:23:6a:96:78:92:dd:f1:31:a6:6c:cf:b9:74:68:eb:0c:63:
f2:e4:bf:ed:5b:d6:36:4f:3c:fb:73:83:90:8d:af:e9:7d:09:
0e:61:06:8c:23:7b:0f:1f:2d:21:79:87:83:20:e2:15:84:2c:
20:2e:f9:c9:6e:2c:2a:af:6a:fe:3d:c4:84:53:dc:61:86:5d:
bc:41:62:54:3c:bf:39:98:b0:e1:21:36:33:2f:96:d9:22:4e:
0b:ce:53:46:41:a7:58:43:13:c0:bf:9b:f3:93:85:4a:ae:dc:
36:82:e0:b8:af:74:2e:c6:d4:a4:21:25:83:6d:f6:34:71:9a:
1f:2c:56:92:bc:48:8e:99:5f:5a:45:a4:54:a6:44:5a:3e:35:
eb:b5:ae:b9:7a:08:14:bc:41:84:e2:e1:3c:12:19:58:cf:98:
e2:f5:d8:b2:cc:c3:ef:b5:78:1a:f8:56:a5:e8:5b:cc:16:b3:
0c:db:b5:4a:6b:db:e3:3f:43:eb:7b:f0:24:21:36:4b:39:2d:
fd:86:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:02 2025 by rpki-client