Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9693228C6CB11EFAFB5E4B0762E951A.roa
File: A9693228C6CB11EFAFB5E4B0762E951A.roa (raw, json)
Hash identifier: xGC7yjQMu5M6Nqa4S7e/GaryQrroP10A9xYz/vQK7wQ=
Subject key identifier: 43:4E:06:31:A9:D1:5D:2B:F9:B6:C6:43:F1:F1:06:2B:E5:61:A0:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9693228C6CB11EFAFB5E4B0762E951A.roa
Signing time: Mon 30 Dec 2024 16:32:29 +0000
ROA not before: Mon 30 Dec 2024 16:32:26 +0000
ROA not after: Sun 02 Feb 2025 16:32:26 +0000
asID: 398823
IP address blocks: 154.213.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78046 (0x130de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:32:26 2024 GMT
Not After : Feb 2 16:32:26 2025 GMT
Subject: CN=6772cb1d-a809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:8c:72:87:4f:dc:45:5c:b3:53:0c:53:c2:
2e:62:e2:c1:9b:d9:3f:0b:6c:2b:42:c6:9f:57:f3:
57:47:1d:1c:2c:3a:d4:1e:eb:38:c5:01:af:ce:f6:
32:4e:b0:8d:84:b5:88:7c:3a:1f:84:b2:2d:d6:31:
d2:63:e0:f7:d3:d3:84:09:33:9d:ac:70:44:25:b6:
80:07:21:12:44:81:61:29:9c:22:a9:97:52:57:ee:
be:d1:c9:6e:11:46:71:59:23:d5:f2:f8:b0:b0:e9:
ca:6c:be:c3:ef:05:cb:6f:b3:22:f5:50:7d:84:1a:
da:d9:1d:6b:d7:51:c7:97:c0:93:1c:d1:26:1f:75:
db:46:e9:86:48:f9:fa:67:e2:35:44:90:98:25:c7:
85:60:81:b3:d4:66:b6:b1:f0:8e:ad:1b:31:52:d4:
01:75:b6:99:f6:96:ff:64:99:a0:65:7e:0e:e8:e8:
0c:74:79:ac:54:1a:86:21:3f:a5:34:c7:72:08:b1:
c4:ea:a6:4d:9c:c2:c2:cd:0a:57:3a:09:66:1f:fe:
6a:b2:b5:38:97:a8:b8:46:33:38:8b:8c:b1:ea:4b:
c0:f7:a9:b0:9e:49:22:ad:a0:0c:b8:91:12:3b:0d:
5e:fd:3c:57:6b:14:c4:c1:0d:28:51:54:75:13:b7:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:06:31:A9:D1:5D:2B:F9:B6:C6:43:F1:F1:06:2B:E5:61:A0:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9693228C6CB11EFAFB5E4B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:c1:2f:43:b9:8c:59:11:8a:47:08:c2:ae:fd:32:34:d3:37:
0a:cd:78:f4:f4:91:7b:bf:46:af:10:f1:a7:bb:80:9f:27:56:
5f:eb:28:c5:90:fe:d6:74:54:51:d6:f0:43:39:30:e3:a9:20:
7d:da:8d:84:eb:b4:51:0e:84:c2:3a:de:08:32:07:8a:60:be:
40:60:ff:de:dd:0d:5d:f4:49:bc:12:2a:ef:59:55:7c:d0:5e:
13:73:ac:4c:b2:3d:90:e6:67:0d:b2:94:b5:26:da:c4:a9:95:
03:7f:ec:54:13:9d:79:d2:63:aa:2c:3b:f9:56:d4:c3:44:56:
17:63:66:70:d2:c9:24:77:a3:f0:e7:64:c6:9f:78:58:5a:8b:
9b:1f:16:9a:e8:f4:74:7c:89:54:ab:ef:27:f2:e0:94:bf:4d:
fe:12:3b:49:11:9a:2f:86:c0:bc:61:8c:e1:29:a5:67:d0:0e:
07:43:93:5c:29:6c:15:60:ae:19:1b:27:76:9f:cf:15:c0:cc:
86:e9:79:24:38:47:9a:4f:2a:98:84:64:1a:e4:f9:db:e2:36:
b4:c8:5d:c2:a2:71:b9:5e:29:d7:25:0d:b4:c8:a2:ba:e3:18:
37:ef:77:b7:de:e4:b9:d1:64:12:44:b9:2c:81:b0:45:ac:99:
6c:0a:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:35 2025 by rpki-client