Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A905352ADE2211EFB971BEA6762E951A.roa
File: A905352ADE2211EFB971BEA6762E951A.roa (raw, json)
Hash identifier: ncRRAv1c190oYgNzhKhM4zD5fi5m6U6Hyz1fS0vtFw0=
Subject key identifier: CD:72:A9:19:41:9F:BF:4B:54:DD:AC:0B:23:A1:05:EA:FE:4D:12:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A905352ADE2211EFB971BEA6762E951A.roa
Signing time: Wed 29 Jan 2025 09:23:12 +0000
ROA not before: Wed 29 Jan 2025 09:23:08 +0000
ROA not after: Wed 05 Mar 2025 09:23:08 +0000
asID: 203020
IP address blocks: 154.207.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85340 (0x14d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:23:08 2025 GMT
Not After : Mar 5 09:23:08 2025 GMT
Subject: CN=6799f380-2f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:d0:ed:4e:76:a8:f7:54:e1:70:83:e4:2e:
15:38:63:cb:ca:54:e5:3b:f5:2a:83:e5:ed:61:61:
4a:fe:9e:c2:cb:16:6f:cb:d6:3a:c8:1d:d0:d5:80:
96:13:67:9d:62:f4:5a:cc:f4:ee:fe:30:c4:9e:9b:
63:23:c0:c0:2e:04:46:c8:fa:72:7c:54:e5:dc:9f:
de:a6:34:6c:08:c4:6d:6a:15:08:6d:e0:6b:9e:0f:
86:1f:03:dd:e4:5c:57:9a:ae:8f:d2:1d:7e:a5:80:
8d:bd:ae:ad:a2:60:64:47:ee:a1:2e:73:aa:f7:83:
30:aa:0a:45:c4:62:52:6d:f4:61:bb:19:0f:59:8c:
20:b1:00:69:4d:f7:df:c0:7e:5b:4d:23:a7:ab:8c:
90:2d:18:72:8f:81:3e:95:5f:1d:a0:35:84:f5:88:
c1:c8:8a:7d:d2:72:e6:77:a9:95:bf:f0:ff:40:2d:
2f:5c:c0:fb:8d:de:44:ca:29:f4:a3:ef:d7:2c:2a:
7e:e4:b6:0f:f4:23:8f:70:c4:8e:5f:07:c2:82:0a:
8a:a5:ed:df:3d:09:06:a7:a4:3b:e9:f6:73:90:a2:
61:da:a6:fb:37:42:42:89:92:06:72:f2:30:a5:e1:
20:79:1f:40:a3:3b:45:89:9c:6a:62:c6:de:cc:34:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:A9:19:41:9F:BF:4B:54:DD:AC:0B:23:A1:05:EA:FE:4D:12:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A905352ADE2211EFB971BEA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.120.0/22
Signature Algorithm: sha256WithRSAEncryption
12:22:d2:67:41:8f:9c:8e:3d:4f:7d:68:dd:87:42:3a:70:87:
75:dc:c5:0b:a4:be:fd:39:12:ca:62:d9:24:c9:c8:be:36:46:
aa:f8:8c:36:a9:4c:dc:7e:5f:c0:7d:76:b7:3c:54:7c:be:61:
54:7e:f2:e5:69:39:ce:61:f6:6d:5b:a4:e3:f2:c0:f2:c8:50:
fe:37:3f:51:fb:ae:28:6d:76:76:2f:91:9d:52:1d:aa:9f:b2:
ff:41:43:68:09:64:c4:ac:57:9d:72:c6:46:4d:59:34:cc:88:
f1:73:4b:68:18:0a:72:90:62:38:80:f0:34:a5:69:8c:60:ab:
cd:52:fe:40:94:df:a8:2c:e7:30:48:93:2b:62:fa:52:23:c9:
4e:f8:52:04:2f:75:94:b4:b8:aa:14:62:49:f7:e1:23:c7:81:
31:50:9e:6a:92:14:a3:6e:ab:c3:f1:6c:d9:51:72:66:a4:3c:
e3:42:16:d0:52:00:3f:47:dd:df:3b:f5:79:dc:f7:00:1b:27:
00:d0:84:d9:24:43:9c:fd:38:5c:38:7d:1d:54:bb:14:1a:74:
18:11:66:8b:0e:89:72:f5:c1:7e:4c:b7:a9:ff:af:66:3c:ec:
25:37:64:6f:86:06:76:0a:13:e9:cf:f4:fb:0e:7b:11:de:01:
1e:e8:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:46 2025 by rpki-client