Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A577F7E2DA5511EFAC187A7B762E951A.roa
File: A577F7E2DA5511EFAC187A7B762E951A.roa (raw, json)
Hash identifier: ZkzePcqbKCPDJMtYi/XBiUNvN5CkRyf2WCaSaS5bfL4=
Subject key identifier: 6D:AD:44:E4:FB:7F:23:B2:FC:21:10:EF:4E:52:2B:50:97:9A:DC:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01475B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A577F7E2DA5511EFAC187A7B762E951A.roa
Signing time: Fri 24 Jan 2025 13:18:05 +0000
ROA not before: Fri 24 Jan 2025 13:18:02 +0000
ROA not after: Thu 27 Feb 2025 13:18:02 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83803 (0x1475b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:18:02 2025 GMT
Not After : Feb 27 13:18:02 2025 GMT
Subject: CN=6793930d-857f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:e6:cb:11:0e:8c:a4:c1:74:39:a7:73:c2:
f9:3d:2a:7c:c7:79:28:2c:5a:d7:21:85:38:cc:3d:
b3:b1:71:2a:26:87:93:bc:09:8f:e3:71:70:e6:6c:
58:a3:55:5d:81:ac:52:de:c0:72:5e:2a:28:df:fc:
e2:1a:a1:d7:17:b6:f0:ea:62:20:f9:6d:d6:57:7d:
e8:4d:07:df:3f:e6:10:47:94:c8:f7:90:1b:13:5e:
e4:a5:90:ba:11:65:82:57:a5:c3:60:47:99:11:ba:
3c:48:cd:2f:28:a5:5d:c6:95:96:9c:28:bf:93:9f:
ee:9d:cc:c5:7a:0f:3f:8f:20:13:2a:f4:41:a3:60:
c7:5f:98:43:3d:33:e9:9d:8c:a2:fe:28:ba:21:63:
f7:42:c2:75:12:ab:ad:71:a9:e1:24:51:c1:ef:39:
8f:ea:1c:cd:8f:44:2a:1e:40:a7:4d:5c:e6:be:6d:
17:b6:fb:bd:e0:5f:00:5b:5f:7e:a5:0d:59:8f:e8:
e8:32:bd:30:9d:09:05:76:57:1a:53:7f:81:40:82:
e9:16:a0:e4:9d:c1:bf:da:d5:15:97:6c:2f:f9:1d:
e0:8a:bd:92:59:1e:76:6b:b5:77:7b:d3:08:dd:6b:
cf:85:40:6b:9c:26:e1:e3:57:3a:e1:86:86:40:2f:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:44:E4:FB:7F:23:B2:FC:21:10:EF:4E:52:2B:50:97:9A:DC:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A577F7E2DA5511EFAC187A7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:c7:99:79:7d:2f:e6:a5:92:6d:67:9d:ac:2f:51:a3:6b:
9f:47:30:f7:8f:0c:51:b5:7d:f1:52:2e:73:4c:89:9b:d6:88:
74:af:f2:40:04:9a:c9:3e:b1:d0:78:fb:fb:bb:17:ac:80:de:
2b:e2:95:35:82:21:3a:76:df:0f:65:9f:9a:4d:0e:1b:77:e6:
b3:2d:7d:28:54:06:ff:eb:77:86:e4:48:b8:cf:83:54:2d:77:
11:29:e6:2f:30:19:1c:b4:3b:cb:f5:70:7f:3f:10:78:55:e2:
bd:80:2e:bb:e1:21:06:c2:d5:99:73:98:1d:8a:4f:ca:7e:39:
ac:6f:b4:95:f7:1d:50:08:18:61:77:7f:cc:7e:43:68:5c:57:
8f:c6:aa:89:5a:52:28:f9:e0:8b:b2:fe:23:e1:f7:7a:ba:fa:
74:30:a1:fe:77:b9:09:07:1b:43:26:0f:6f:a4:aa:0d:1b:d0:
8b:12:6d:af:86:c2:d2:f0:59:0b:b8:71:f7:55:8c:9e:8e:81:
34:c7:7c:62:4a:da:23:a9:6e:16:ba:4e:22:ae:49:d3:40:f5:
c4:36:76:b9:01:d4:5f:db:ba:93:fc:ab:4e:44:88:d4:b4:da:
cd:3f:9b:66:b5:7c:c0:b2:6e:69:ba:37:68:01:c0:11:86:c7:
26:d4:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:57 2025 by rpki-client