Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8112D36D8A511EFBE078B99762E951A.roa
File: A8112D36D8A511EFBE078B99762E951A.roa (raw, json)
Hash identifier: asSIKU5agne18iEgBXY5EopcZ6t0JsZayBFg/DgIMZM=
Subject key identifier: 23:86:62:5D:22:97:2C:AD:DE:0A:F4:3E:77:A5:2D:B3:BE:80:8C:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8112D36D8A511EFBE078B99762E951A.roa
Signing time: Wed 22 Jan 2025 09:45:47 +0000
ROA not before: Wed 22 Jan 2025 09:45:43 +0000
ROA not after: Tue 04 Feb 2025 09:45:43 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81558 (0x13e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:45:43 2025 GMT
Not After : Feb 4 09:45:43 2025 GMT
Subject: CN=6790be4b-f27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:cc:f3:d0:48:07:41:31:2c:0e:43:94:ad:
48:2d:b6:88:f2:0e:32:3b:d0:73:d7:de:8a:13:af:
bf:d8:fb:5a:50:f3:d3:67:e3:d2:96:d3:8b:f3:49:
02:a5:87:2b:52:0e:6b:91:75:c2:17:14:7c:10:64:
0a:5f:ba:6f:36:e3:dc:e9:31:24:69:d5:33:8f:c6:
64:81:b2:ba:4c:e6:64:17:bc:5a:05:30:c4:be:9d:
94:34:93:3a:e4:19:4a:94:22:28:5c:e0:d4:85:a0:
56:51:d3:57:92:d1:0b:6f:0d:2a:99:2f:1e:43:51:
9d:6a:c6:bb:75:1b:24:50:c6:5c:b8:8d:de:40:a1:
f5:b5:21:ed:8d:ad:3d:56:32:8f:8d:fe:32:03:46:
20:9f:76:24:e3:bf:89:30:0c:b6:df:ab:73:18:82:
45:57:e9:22:51:a6:d5:40:50:6c:45:d6:4e:5b:22:
b5:d1:f7:1b:56:74:c9:e4:37:8d:83:52:12:eb:b7:
15:b9:7f:0e:2e:16:8d:53:7f:6d:5d:8a:dc:97:25:
7b:08:7a:6f:8f:90:4c:2b:af:0e:5d:99:4f:6c:4e:
4f:0b:f6:19:61:8f:57:8b:dd:28:49:fa:e7:14:c9:
ca:c5:d8:2f:a7:df:12:f7:cc:19:fe:ce:ea:95:d8:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:62:5D:22:97:2C:AD:DE:0A:F4:3E:77:A5:2D:B3:BE:80:8C:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8112D36D8A511EFBE078B99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ca:bd:16:f6:a8:61:33:1c:b9:a6:c7:82:ca:64:22:4b:bf:78:
60:1e:41:79:db:25:37:64:f9:a3:22:78:e0:7f:62:72:88:ed:
36:4e:a3:20:9b:76:b7:af:1b:aa:f8:0a:6f:13:fc:38:44:5f:
91:a7:67:26:0f:a3:e1:ba:a4:5f:0e:1d:fe:e2:4f:a2:b5:60:
6b:be:2a:ff:96:c9:53:36:2f:a1:ff:c8:42:1c:fd:b7:40:3e:
a6:c5:18:35:bb:c0:f2:62:59:f9:f3:23:47:65:9c:7d:f8:80:
08:da:60:39:22:8d:fe:55:9f:3b:74:6e:49:34:6d:de:65:01:
1c:45:b3:53:2e:5d:da:d8:94:0b:6f:72:50:7d:27:3a:cb:d9:
16:96:69:a4:2c:b7:a8:4e:cf:15:7f:fc:12:cc:a0:d4:80:d2:
b7:7a:e8:41:a7:d3:a1:bd:b5:45:f4:72:47:e0:74:dd:6d:4d:
2b:8d:fa:fe:ce:01:c4:c0:73:5b:dc:8b:26:c9:c2:85:09:e8:
f1:8c:d7:ca:40:57:bf:df:11:4f:d8:1a:c9:b1:77:59:60:f8:
25:28:e0:ac:ef:6b:ab:d9:75:db:fe:89:1e:96:6e:92:4f:f7:
52:43:0a:76:7c:5e:97:7c:ec:21:e2:99:3b:02:3b:3a:51:41:
d0:46:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:53 2025 by rpki-client