Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A893D9F8D0BB11EF8780E361762E951A.roa
File: A893D9F8D0BB11EF8780E361762E951A.roa (raw, json)
Hash identifier: Q8HaztNLGCVWWuAzG6bDcgn0LLodrPmG3dh47rtxfmc=
Subject key identifier: F8:38:E3:3F:58:29:68:21:E7:37:52:15:3E:D2:48:EB:5C:4E:CE:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A893D9F8D0BB11EF8780E361762E951A.roa
Signing time: Sun 12 Jan 2025 08:03:08 +0000
ROA not before: Sun 12 Jan 2025 08:03:04 +0000
ROA not after: Fri 14 Feb 2025 08:03:04 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80556 (0x13aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:03:04 2025 GMT
Not After : Feb 14 08:03:04 2025 GMT
Subject: CN=6783773c-9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:65:8e:49:68:15:f4:eb:79:19:23:e3:9e:
d4:56:78:d0:3b:c0:ca:af:3b:83:d2:56:97:56:55:
b6:37:d8:ee:3a:d3:80:06:57:e8:9b:4a:e1:8c:da:
59:2b:cd:b3:0d:b7:f8:99:cb:28:d1:f2:e4:ef:b7:
dd:a8:29:e4:28:b6:e3:32:b3:8e:5a:6b:9e:21:6e:
e0:58:c8:45:77:d6:16:cb:ad:0a:70:55:75:d5:e2:
9d:42:89:6d:06:60:4b:73:ad:14:3a:cd:64:00:fc:
d3:84:c9:88:1b:bf:59:59:97:2c:6d:62:dd:f2:63:
1a:29:5d:11:e1:51:31:00:6f:0d:14:e5:ce:ce:e1:
4f:9d:1c:f9:f7:af:e4:c7:83:df:e7:84:bd:98:8a:
8e:06:2f:7f:52:14:a5:fd:34:2a:bb:45:4e:e5:cc:
66:3c:8b:e3:d1:61:16:0c:c9:b7:a8:a0:60:d0:da:
88:e4:9f:13:06:86:50:01:39:a1:79:5b:c4:30:d4:
8a:43:6a:0c:73:ee:2f:54:fc:a2:98:22:1c:89:95:
9f:f5:71:0b:2a:38:8e:ec:70:e0:b3:d1:5c:26:01:
74:9f:db:a3:ef:89:bd:6b:13:54:84:a4:a4:f8:11:
5b:52:cf:02:83:cf:4e:11:4a:d0:c4:7c:67:8d:74:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:E3:3F:58:29:68:21:E7:37:52:15:3E:D2:48:EB:5C:4E:CE:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A893D9F8D0BB11EF8780E361762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
06:7e:58:ab:a4:33:14:59:ef:ef:ef:b3:63:00:e9:3b:9a:01:
f7:ea:00:c6:66:0e:6a:ce:72:1d:6e:2f:6a:f0:89:d6:9e:3c:
b7:f4:22:4b:71:2c:79:0c:a6:33:ee:57:07:1f:ef:a5:70:9d:
e9:fe:6c:ce:2c:9c:a8:28:75:fd:91:be:30:bb:72:61:0a:85:
ce:63:5c:5b:79:38:4f:41:f9:66:58:44:c4:ce:b0:69:95:ec:
13:7e:a1:ef:09:2b:92:de:df:55:23:3f:ca:de:7d:38:cb:15:
a6:01:08:90:dd:33:d0:85:a5:db:ad:06:9e:9a:d9:78:fe:fc:
39:2e:85:8e:a6:82:c0:a9:c1:2c:69:ed:60:8a:49:b7:a2:57:
1a:a3:90:79:63:a2:1a:f4:af:0b:ed:c7:15:24:7f:78:2a:d3:
20:96:6d:8b:dd:14:d3:e5:e0:2e:07:ea:62:0c:e4:ea:c2:da:
f8:a9:60:e4:e1:c4:73:06:bf:3b:7c:77:2a:67:7c:22:7f:fb:
80:d1:a0:75:66:c2:bf:e7:0c:1b:89:7c:d4:be:d9:12:8d:02:
87:69:40:75:bd:6e:b9:8a:7a:89:5e:79:3e:47:c2:b4:e2:b0:
af:35:f0:28:4b:bf:6b:49:8b:98:f7:6b:60:02:ff:1d:9a:a7:
79:48:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:55 2025 by rpki-client