Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ECD6D2CD9211EF976FD15A762E951A.roa
File: A4ECD6D2CD9211EF976FD15A762E951A.roa (raw, json)
Hash identifier: 3FFr/iKGrqxAS2ooliGqd/XHYr+ozHX1JyTMLBuJj60=
Subject key identifier: 18:CB:E6:67:B9:76:7B:95:B4:56:A4:20:78:BD:DD:FB:74:83:B4:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013694
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ECD6D2CD9211EF976FD15A762E951A.roa
Signing time: Wed 08 Jan 2025 07:31:59 +0000
ROA not before: Wed 08 Jan 2025 07:31:55 +0000
ROA not after: Wed 12 Feb 2025 07:31:55 +0000
asID: 20473
IP address blocks: 154.197.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79508 (0x13694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 07:31:55 2025 GMT
Not After : Feb 12 07:31:55 2025 GMT
Subject: CN=677e29ef-e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:a3:a6:82:72:bd:a0:dd:e9:69:3a:cb:80:
d1:64:21:6d:ec:4b:56:97:37:9b:7a:1c:dc:c3:8c:
88:85:bb:6d:7e:c4:4e:95:68:10:dd:5a:96:e1:64:
39:04:12:b2:88:67:08:9f:7c:87:49:59:97:04:d7:
02:9e:65:31:68:89:82:c4:21:ae:1a:fd:4f:16:5a:
25:4b:22:f7:3d:2a:06:42:b5:cb:b3:5f:3d:f1:23:
76:bd:b7:b6:8d:3f:25:fc:b9:97:59:de:de:de:bc:
09:c4:82:32:f9:9b:fc:28:b8:3b:c6:c9:fd:e6:63:
ab:6c:bc:27:45:77:ef:dd:ae:70:07:b3:b5:3c:92:
59:31:17:d9:a1:f4:ca:51:38:fe:fa:46:80:ce:a5:
d9:26:95:98:1b:f6:b1:d9:6b:46:65:13:b6:d8:cb:
32:74:82:e6:88:33:a3:a0:2a:fe:32:ca:d3:56:62:
12:32:65:d2:fa:c4:84:24:f9:5b:a5:17:5c:00:54:
da:71:9b:08:d8:32:0b:02:b6:af:b5:a4:49:b4:f5:
e3:92:f6:d6:b1:1d:98:eb:0f:33:bc:67:b9:e0:91:
55:82:7b:d5:f4:b0:80:c6:e2:fc:d6:17:f3:e8:65:
d6:5a:32:90:68:07:2b:9c:e3:5e:d8:ac:4e:35:e0:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CB:E6:67:B9:76:7B:95:B4:56:A4:20:78:BD:DD:FB:74:83:B4:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ECD6D2CD9211EF976FD15A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0a:ab:80:48:78:d2:80:f4:cf:70:8f:2f:29:e9:86:df:4e:
38:47:a6:bc:92:a8:68:22:41:53:6e:c7:df:70:a7:fa:ef:92:
05:b7:bf:06:b9:8e:cf:20:75:f6:36:a5:da:0f:38:26:0e:1c:
de:bc:7c:6a:65:af:32:b8:ef:0b:c2:5c:ad:65:36:4d:53:e8:
79:df:5c:a0:b0:a1:3d:17:9d:c0:45:69:54:e5:2d:8a:00:ba:
0d:59:8f:54:80:8c:bf:0a:c6:86:90:dd:33:e2:63:41:86:3e:
79:48:ff:fa:39:a5:2c:ea:62:f7:e9:75:00:94:8b:d5:ba:d4:
8c:4a:eb:5d:b0:67:e7:2d:22:51:66:fc:fb:1b:33:a3:e9:21:
d9:6f:f6:21:56:49:98:b7:e0:ee:15:8c:41:ab:02:2c:3b:86:
4b:af:ce:2b:5a:50:a3:f6:56:13:96:98:38:0d:a5:de:2a:20:
00:c0:c1:c7:ff:06:30:5d:95:d9:0b:6e:c0:da:7f:2a:9e:29:
4c:f6:00:93:97:e6:c8:90:f7:79:a0:d3:87:5a:77:0b:00:1e:
8c:66:49:5a:c3:f8:ac:8a:0c:99:de:81:6e:62:3e:30:f0:ae:
c7:a6:cb:7d:45:7c:65:32:5f:cf:ad:98:8e:3a:02:48:df:58:
71:40:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:05 2025 by rpki-client