Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD5FBD86CAD911EF842AC87B762E951A.roa
File: AD5FBD86CAD911EF842AC87B762E951A.roa (raw, json)
Hash identifier: C8SC4SWlhLPdh6UowvjanAq7CbEYdGH2RdRQ7+GlHBo=
Subject key identifier: 8E:70:63:D8:A3:54:31:71:A9:0B:64:EE:AB:95:38:C8:14:0A:24:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013543
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD5FBD86CAD911EF842AC87B762E951A.roa
Signing time: Sat 04 Jan 2025 20:22:54 +0000
ROA not before: Sun 05 Jan 2025 20:22:50 +0000
ROA not after: Sat 08 Feb 2025 20:22:50 +0000
asID: 203020
IP address blocks: 154.217.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79171 (0x13543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:22:50 2025 GMT
Not After : Feb 8 20:22:50 2025 GMT
Subject: CN=6779989e-ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:d1:31:3c:28:66:54:03:a2:9b:42:b4:a4:
95:c1:52:18:c5:f3:57:d8:e5:19:52:33:ed:ba:27:
69:64:6e:82:2f:74:1e:1c:6c:7c:33:bd:ef:83:36:
84:d5:f2:23:d4:47:b2:03:42:c2:55:e3:8d:7a:f0:
d8:ab:84:30:db:96:9b:eb:6e:89:a1:29:94:00:62:
fb:89:19:d0:9e:3f:9d:15:33:c3:3a:ef:64:2c:d4:
88:57:a1:6e:e1:0e:4a:c3:f1:8b:68:95:54:fe:fc:
80:54:45:b1:8a:5c:60:00:64:a2:23:ce:58:92:bf:
f7:33:04:60:12:ee:f0:e1:6e:83:86:46:66:d2:16:
cc:a6:90:09:e0:58:44:13:e2:18:26:1f:8d:97:ca:
8e:b1:25:44:ed:cb:1e:3c:a9:c2:b5:67:29:ea:05:
50:3d:68:aa:3c:2b:32:85:6d:39:13:8f:16:1c:3d:
28:73:a0:b1:c2:91:f0:67:9f:b6:27:9b:cf:8d:03:
74:92:38:46:a6:64:b4:23:59:4a:48:47:8c:b0:b8:
bc:46:c0:3b:f1:83:ff:9d:60:3e:5f:b0:83:ba:67:
92:bd:2a:29:2e:af:24:aa:20:f5:03:d1:25:5c:d4:
a8:b7:07:51:78:9c:5b:64:c8:d7:cc:58:a5:6d:a3:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:63:D8:A3:54:31:71:A9:0B:64:EE:AB:95:38:C8:14:0A:24:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD5FBD86CAD911EF842AC87B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.144.0/22
Signature Algorithm: sha256WithRSAEncryption
19:32:8f:66:2c:3e:72:57:5b:ca:c6:e3:b1:c0:c6:72:2c:4a:
be:b5:e4:b1:74:b0:70:1b:23:d8:f2:cd:b1:28:a6:52:71:b3:
9b:6e:b7:ed:11:08:6c:3a:05:e1:71:d3:66:72:00:7e:12:0e:
f0:f5:f3:5d:3f:7b:79:75:04:45:4f:70:8f:f4:78:ee:76:25:
58:60:c0:86:6f:4a:60:da:e9:e9:68:76:25:4f:d4:e3:ae:de:
ac:5b:01:a4:29:3b:40:7f:3f:c7:5a:a7:a2:97:c7:32:f9:0e:
44:08:28:76:e3:01:2d:80:92:f8:ec:a5:9d:73:ab:b8:c9:1c:
4d:dc:09:5e:54:de:c7:90:97:a5:16:d3:d9:12:7d:97:17:98:
2e:e8:f3:9c:b6:b9:9f:7e:83:f0:8a:98:de:69:13:c2:41:62:
a1:bf:26:23:4e:fa:70:7a:cf:c8:12:90:ef:67:e8:74:76:fe:
19:61:00:ba:5a:68:ad:f3:2a:d3:f5:34:52:5e:09:ee:3f:c7:
db:91:2c:7c:e1:61:5c:c9:a7:39:5d:39:a7:98:ae:7d:6b:f6:
f8:71:d8:f5:10:0e:c6:a0:72:48:53:ae:f9:47:5c:fe:2c:f6:
ad:5c:81:05:d9:e2:a4:1f:31:8d:3c:3e:21:6a:e2:61:94:d1:
9c:33:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:11 2025 by rpki-client