Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5A80E8ED4B311EFBF6865BB762E951A.roa
File: A5A80E8ED4B311EFBF6865BB762E951A.roa (raw, json)
Hash identifier: h8Suw/Y3tGRmOTkdVHi62ihtxY6KElKk18kRo62zBxM=
Subject key identifier: 9B:52:E0:DC:85:E7:8A:B1:7F:42:64:95:2B:C5:5B:24:2F:F9:BB:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5A80E8ED4B311EFBF6865BB762E951A.roa
Signing time: Fri 17 Jan 2025 09:15:52 +0000
ROA not before: Fri 17 Jan 2025 09:15:48 +0000
ROA not after: Mon 17 Mar 2025 09:15:48 +0000
asID: 17561
IP address blocks: 154.213.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80975 (0x13c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:15:48 2025 GMT
Not After : Mar 17 09:15:48 2025 GMT
Subject: CN=678a1fc7-ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:fc:07:9b:7e:1c:97:8c:a5:83:a3:98:1a:
88:b4:67:c0:e1:79:e5:78:7d:8a:8f:7d:24:41:0b:
e1:e5:a3:8b:43:80:cf:77:d3:0b:a1:95:a5:1e:0f:
f3:34:a4:a4:61:b2:a9:04:47:f1:11:42:14:34:f2:
46:03:17:fc:8a:40:e2:fa:78:bc:13:48:73:bc:54:
b5:b9:87:7a:92:0d:38:f9:99:69:e5:aa:ac:ee:13:
e9:cf:09:87:11:f0:7a:2b:7e:ba:e9:b3:75:b0:7a:
4b:67:71:d6:25:28:f8:61:14:4d:79:43:82:12:57:
43:e5:07:38:c7:79:99:dd:3d:e3:59:5b:8f:1f:24:
79:ac:fa:e0:3f:67:25:18:da:94:60:92:7b:bb:57:
bc:98:7c:c6:de:81:0c:53:0f:4d:22:a2:c4:6c:f3:
9e:fd:11:80:db:7a:37:8f:9f:89:29:0e:2b:58:bb:
0b:dd:4c:3f:e6:cf:f5:a4:1b:0a:c0:4a:e6:8b:2e:
cc:ae:c7:54:ea:ca:5e:c4:3c:a3:10:8b:f2:46:d5:
30:a2:80:c6:d2:4c:a0:d1:4f:f7:10:47:20:46:8d:
33:5e:7a:59:88:02:c9:e2:12:06:03:21:ac:da:84:
3d:a6:12:85:cd:95:b4:99:30:de:1a:b8:7b:df:b5:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:E0:DC:85:E7:8A:B1:7F:42:64:95:2B:C5:5B:24:2F:F9:BB:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5A80E8ED4B311EFBF6865BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1a:64:6d:ac:c4:fc:d8:39:ba:38:a0:51:ae:2c:bb:b4:79:
29:a8:87:7e:65:3d:30:2a:53:03:10:0b:83:e0:4f:23:6f:dc:
2d:9d:7f:9d:40:a7:0c:37:ed:7d:63:e8:dc:29:e7:9d:59:9a:
a6:13:d0:17:d3:0c:da:72:3c:06:82:d9:9b:1c:5c:f2:58:84:
22:95:be:f8:ba:a3:1a:bc:56:b7:41:c7:65:cd:3a:bd:54:e1:
d1:21:1e:79:55:fc:4e:2f:63:d9:ab:e5:51:60:8f:d9:3d:af:
a0:5f:7a:9a:64:58:b2:bb:50:02:0c:2d:7f:05:ed:d0:72:dc:
10:72:7b:da:cd:92:6f:3f:e9:b6:23:45:6c:b9:46:88:40:49:
7d:12:89:39:e4:d0:a9:41:a5:d9:cc:87:01:d6:1a:9a:bf:f0:
4d:c9:98:b5:61:9d:85:80:1e:c5:5a:45:5c:8b:4d:f0:c8:c5:
35:79:41:e7:19:1a:bc:c1:98:d1:5c:82:b0:c0:d5:bb:e7:17:
34:00:f1:fa:ce:f0:84:c4:36:22:b1:95:d1:76:1b:75:c9:fa:
27:7d:9d:17:6d:b6:38:14:ce:62:40:2a:df:27:49:65:18:b4:
11:c2:80:b4:7e:c6:8c:ab:0d:22:a9:13:9c:bc:4a:8b:0a:30:
88:10:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:21 2025 by rpki-client