Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A545ABE2C9C611EFA5C3C6B5762E951A.roa
File: A545ABE2C9C611EFA5C3C6B5762E951A.roa (raw, json)
Hash identifier: fLsN6/OzXr0t156p2gFZlAgyVyMY5MdPRMVTU31QfHg=
Subject key identifier: E7:84:63:03:D6:F0:7D:DA:BB:E7:65:9E:76:22:E9:D0:DE:03:96:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A545ABE2C9C611EFA5C3C6B5762E951A.roa
Signing time: Fri 03 Jan 2025 11:34:09 +0000
ROA not before: Fri 03 Jan 2025 11:34:05 +0000
ROA not after: Tue 04 Feb 2025 11:34:05 +0000
asID: 203020
IP address blocks: 154.204.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79016 (0x134a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:34:05 2025 GMT
Not After : Feb 4 11:34:05 2025 GMT
Subject: CN=6777cb30-ede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:02:4a:61:e4:bb:b5:ef:07:a1:92:f6:d9:
34:a6:ad:a6:a6:ed:7e:c5:9c:cc:b8:8a:1a:a2:39:
6a:5d:0d:54:bb:07:ce:7b:18:7f:6b:30:b8:de:35:
04:c3:03:ae:8d:06:5c:f9:67:77:2d:53:9e:10:28:
f7:8d:36:b5:c3:31:79:27:fe:bc:f5:78:ad:51:cb:
51:23:3c:5d:99:df:95:54:60:72:a3:98:4e:37:94:
c9:a9:e6:8e:69:10:75:be:13:64:fa:d3:82:30:d6:
e1:22:7a:dd:33:3b:de:ff:92:6a:cf:b2:6e:79:b7:
2c:67:d9:7b:28:f5:88:e1:a5:89:90:91:bc:69:8f:
18:69:53:30:65:e2:91:e2:d8:4b:33:67:9d:d6:22:
ac:79:40:e7:89:00:f4:5e:67:f5:22:be:d1:2f:8c:
3c:a0:af:e1:b7:f6:c3:ca:8a:17:a4:56:35:6f:78:
ea:5d:2a:2a:c7:0e:5b:03:76:79:24:87:0d:4d:77:
e4:fd:07:34:f4:1b:54:9f:18:e4:48:f4:bc:94:ea:
de:42:63:17:8d:94:2a:18:95:14:6a:a1:7f:67:20:
de:39:42:d1:25:9e:54:72:29:be:ad:2e:fd:a3:70:
3b:07:25:27:c3:42:b2:db:98:99:2c:84:f7:d9:d6:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:63:03:D6:F0:7D:DA:BB:E7:65:9E:76:22:E9:D0:DE:03:96:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A545ABE2C9C611EFA5C3C6B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1a:95:c8:93:09:9a:7d:4f:14:f7:48:d4:7f:a8:36:03:9c:
56:51:64:2f:75:99:42:b9:29:55:37:cc:7d:73:17:2d:5a:58:
20:fd:93:66:97:55:84:0e:2d:ba:dd:4c:ee:1c:b9:37:d2:9e:
5b:e8:5f:49:c3:a3:24:e0:1c:c5:75:2b:10:89:ea:16:8f:80:
e1:c0:be:c7:f7:fe:e5:6d:f4:71:5c:ed:4c:1e:aa:d2:e6:e8:
d0:1f:99:99:00:67:69:2e:bd:6b:ab:05:56:8e:2b:ea:09:2e:
4b:11:4e:d8:64:ec:fe:7b:85:b3:c7:9d:78:d2:ed:59:7a:13:
20:33:88:cc:4f:b6:17:fa:45:b6:35:83:ba:4b:88:27:69:a1:
db:1b:b3:86:4d:a9:d7:a5:b9:84:f1:51:f5:99:db:ea:a4:7c:
68:59:62:11:21:58:b4:33:95:db:7b:e3:6c:9e:9e:bf:c6:d9:
eb:26:79:f3:73:4e:93:d8:0b:66:8b:a8:4d:9a:9e:e3:20:65:
55:43:c2:e9:99:18:fb:9e:cd:fc:f3:59:40:93:f5:e1:55:59:
a2:d3:9d:b4:85:43:40:1a:39:c8:a6:ff:64:48:1e:a5:15:26:
c8:e6:cd:54:b6:48:5d:d1:2f:da:76:29:49:8c:0e:86:d3:42:
93:38:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:10 2025 by rpki-client