Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFA22E0C9C411EF8DDDBDAA762E951A.roa
File: AAFA22E0C9C411EF8DDDBDAA762E951A.roa (raw, json)
Hash identifier: IrCurRhg6J1coGsv7+UEoHAXSvOnIghU40G6PZntcCg=
Subject key identifier: E1:0E:C3:2C:73:A9:07:D3:F3:EE:A1:97:61:DF:7B:AB:99:E9:57:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013498
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFA22E0C9C411EF8DDDBDAA762E951A.roa
Signing time: Fri 03 Jan 2025 11:19:59 +0000
ROA not before: Fri 03 Jan 2025 11:19:55 +0000
ROA not after: Tue 04 Feb 2025 11:19:55 +0000
asID: 203020
IP address blocks: 154.208.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79000 (0x13498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:19:55 2025 GMT
Not After : Feb 4 11:19:55 2025 GMT
Subject: CN=6777c7df-e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:af:9a:f7:c5:4c:dd:d4:33:da:63:86:b3:
e3:94:0e:f4:17:c8:7c:0e:f3:82:c4:97:55:8d:8f:
e8:7d:99:15:7f:dd:ac:9b:40:3d:d2:80:8f:1d:33:
1a:8c:b3:0d:5e:f0:e9:6d:0b:24:41:f1:50:86:8b:
71:4f:7d:33:6d:7f:6a:23:cb:40:a0:4f:71:bc:56:
d8:77:a7:c7:0f:23:9a:a3:4c:5c:4a:cf:08:77:60:
e6:91:17:4e:b0:c6:7a:3d:a6:33:22:24:5b:99:89:
8f:a3:85:71:c1:2d:87:09:0c:56:05:47:b2:de:f2:
97:9a:cd:df:66:62:42:0d:36:98:f3:c2:db:aa:21:
60:8b:91:a3:0d:b0:bf:6d:88:15:c7:88:8c:0d:99:
cb:87:30:d9:e2:00:87:08:04:1e:3b:3d:c2:bc:87:
68:d1:27:51:3d:cb:7e:7a:2a:a2:fb:d4:31:89:7b:
8d:7d:31:65:17:04:4b:0f:39:2a:41:6c:5a:95:76:
d5:5d:16:d4:a6:e7:b7:59:2d:3f:03:32:31:a5:9f:
b5:d5:c9:6f:81:30:10:ff:65:22:5a:b2:0c:6d:a8:
00:d1:4d:fa:54:09:2d:c0:29:0e:e4:b0:75:e3:13:
1d:e8:5f:85:e6:ce:3b:40:f5:8a:ee:d1:5b:70:fb:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:C3:2C:73:A9:07:D3:F3:EE:A1:97:61:DF:7B:AB:99:E9:57:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAFA22E0C9C411EF8DDDBDAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:e7:3b:59:bc:e4:59:b4:36:8d:48:15:ba:3f:82:ca:be:b5:
43:6e:7f:f5:5d:61:40:96:1a:ba:a9:9b:e5:10:c9:20:16:45:
5a:fd:9f:7c:7f:2b:64:87:20:87:6d:45:39:c7:46:d0:f8:52:
cd:2f:89:58:28:64:d6:09:c0:0d:1b:90:e3:58:37:f5:31:04:
f6:80:3d:ca:4c:23:8e:31:cc:e1:eb:19:8a:ca:af:b6:3d:ca:
55:3b:df:22:42:03:ee:3e:80:2a:88:aa:e7:51:6b:a2:1e:42:
cc:7e:55:70:e7:4f:c0:fe:2d:91:2f:b7:4e:dc:32:60:5e:5c:
73:e0:6c:40:7a:13:a6:7c:2d:19:d9:b4:32:98:1c:28:54:29:
c5:f4:27:d0:bd:7b:ab:58:f7:a7:9f:58:38:12:82:44:c0:7c:
20:9c:c1:db:51:5d:8e:19:a1:a9:25:5a:e0:2c:40:55:13:80:
cd:76:5c:14:51:9a:b2:df:bc:c4:a5:b9:63:c0:82:f7:93:49:
60:5d:12:8f:4e:e0:3a:fc:f9:cb:f6:63:ba:c3:f6:f5:fe:04:
15:b3:b1:00:dc:a9:1c:1a:7f:66:81:30:f5:f5:41:0c:f5:2f:
54:7b:ba:06:a4:69:e9:57:1e:c8:3d:ee:23:94:fa:5a:d3:54:
1f:6a:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:43 2025 by rpki-client