Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D26048D8E011EF87C32FA3762E951A.roa
File: A7D26048D8E011EF87C32FA3762E951A.roa (raw, json)
Hash identifier: pzl8+MbcJCOc8QDjeiydEVNDfdRdYkVTEHC8vqArx0s=
Subject key identifier: 56:85:8C:49:CB:72:2D:2E:C0:52:AE:73:CF:33:EE:67:D4:EB:FF:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D26048D8E011EF87C32FA3762E951A.roa
Signing time: Wed 22 Jan 2025 16:48:07 +0000
ROA not before: Wed 22 Jan 2025 16:48:03 +0000
ROA not after: Sat 15 Mar 2025 16:48:03 +0000
asID: 138915
IP address blocks: 154.206.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81906 (0x13ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 16:48:03 2025 GMT
Not After : Mar 15 16:48:03 2025 GMT
Subject: CN=67912147-96ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:57:26:bf:1d:24:1b:6c:ac:c6:2f:f0:6f:df:
5e:ab:44:ce:5a:d0:31:7e:3e:d7:cc:10:f3:4d:6f:
df:04:e2:d2:b4:f5:df:41:d9:f6:53:65:5c:f3:47:
50:58:66:f9:c6:1b:7e:68:2e:45:c2:bb:20:26:35:
e5:0b:a2:70:60:b5:ac:e1:73:c6:de:38:b0:74:bc:
ea:0d:32:81:f5:cc:05:ac:38:e0:c4:bf:7d:3d:61:
c4:f5:eb:f0:39:37:3e:91:a0:4a:43:74:a7:62:ab:
f4:47:80:43:14:c1:f9:db:c4:91:3e:14:fb:d9:1f:
2e:5d:0a:8c:2d:2a:d1:e9:ab:24:83:e3:1e:08:64:
50:03:61:33:1d:54:3f:9d:0b:8b:cc:a0:7a:f9:38:
7e:4b:22:f0:6e:b3:13:df:24:f2:8a:ae:f1:81:f8:
0a:3e:4f:1a:78:b1:6b:0e:c9:31:56:bb:5e:48:91:
f2:80:9e:e4:7a:78:66:b5:cf:af:57:b0:f9:29:2d:
7f:94:6d:c3:3d:d9:88:27:4f:92:61:8f:4d:ad:96:
9b:14:aa:8f:77:52:25:25:9a:4b:86:83:35:31:f2:
c1:cd:27:ee:01:cb:be:21:38:02:cd:e4:01:94:83:
65:b0:b9:a5:51:d7:aa:81:c8:d5:e2:6b:c9:49:fd:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:8C:49:CB:72:2D:2E:C0:52:AE:73:CF:33:EE:67:D4:EB:FF:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D26048D8E011EF87C32FA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:41:96:fa:76:7d:27:61:74:3a:5d:30:32:fc:7d:c8:b5:d9:
ab:ca:0d:cc:f9:d3:5f:fd:94:88:59:47:9f:69:0a:35:35:23:
44:e7:9d:e6:d6:0c:cd:8b:8e:a7:7b:09:5f:07:1a:c6:a2:ce:
f9:7f:3a:2a:d6:42:31:cf:e8:fc:e7:51:de:8d:b3:b1:26:78:
43:9b:bb:56:c8:6f:6f:e8:09:c2:5f:00:2b:12:5e:ca:32:1c:
df:13:b9:5b:c2:4f:12:44:5e:ce:6d:fa:63:ad:0a:66:b5:63:
e4:d3:d3:36:67:76:a4:b0:b6:c9:e5:53:80:3f:2e:b7:c3:10:
57:76:c5:7e:47:cc:7c:d3:df:90:f6:ca:bd:8d:ed:d2:5c:e1:
61:38:51:0b:60:c6:17:75:31:81:46:58:2e:73:75:2c:38:15:
4b:e3:22:74:1a:02:1c:d9:04:5d:65:21:44:b0:79:89:29:96:
e3:c2:10:4d:15:fc:fa:f8:1c:cf:e5:40:38:f0:22:fa:cf:83:
60:94:1c:1d:ba:66:41:74:65:15:6d:1f:98:8d:5c:61:7e:36:
0e:0a:b6:2f:dc:33:e2:a0:70:db:fc:3f:52:52:43:76:41:43:
4c:18:37:b3:eb:ee:cc:73:15:aa:db:01:bb:5c:c4:08:f7:91:
6b:05:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:20 2025 by rpki-client