Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FAD20CAD811EFBE246575762E951A.roa
File: AE8FAD20CAD811EFBE246575762E951A.roa (raw, json)
Hash identifier: nhLTwq+y82to2x+7CIfOZYlQ4uXQdYM6RzPgXtdd5I0=
Subject key identifier: B4:16:C3:3D:EA:E8:AA:F8:1B:1B:FC:78:09:97:B2:39:37:50:9F:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01353B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FAD20CAD811EFBE246575762E951A.roa
Signing time: Sat 04 Jan 2025 20:15:46 +0000
ROA not before: Sun 05 Jan 2025 20:15:42 +0000
ROA not after: Sat 08 Feb 2025 20:15:42 +0000
asID: 203020
IP address blocks: 154.217.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79163 (0x1353b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:15:42 2025 GMT
Not After : Feb 8 20:15:42 2025 GMT
Subject: CN=677996f2-8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:6f:fb:d9:5f:0b:79:97:81:9b:2d:97:41:
a1:c4:fb:3b:f8:a7:6b:a0:f5:93:68:0f:6b:b6:4e:
f7:f0:b3:20:3d:97:e6:08:f2:bc:47:0e:92:e8:70:
61:26:d1:5c:88:a5:15:57:72:ea:31:73:a3:a7:2a:
e7:05:3b:1f:e3:3f:63:b8:4d:f4:3d:b5:3a:39:e2:
08:2e:3e:1c:3e:bf:c2:34:3e:e1:a8:7f:f2:be:f2:
6d:fb:aa:4c:a0:68:4e:70:f0:34:6a:53:1d:a5:a8:
92:8a:97:4d:01:b5:d2:eb:a3:49:69:09:57:de:18:
a6:b5:f6:e0:8a:9f:10:17:6e:3e:33:d2:8c:c1:ca:
e0:e5:35:a4:56:a8:dd:01:34:2d:b0:46:13:40:b0:
7e:de:78:b1:4b:31:22:65:46:df:5f:e3:9b:b3:47:
d4:72:4e:54:62:fd:cb:b6:d7:6b:e0:35:82:6c:31:
83:51:7b:db:78:3c:ac:c2:b5:6e:f9:ee:69:f2:02:
92:5e:82:bf:98:59:31:81:49:a3:c3:7e:36:76:bf:
6c:68:3d:31:4a:14:7d:04:29:cf:e5:80:66:34:db:
1f:5c:8d:17:80:3d:50:cd:6b:d1:eb:14:e9:31:4c:
18:25:7b:6e:eb:1d:ca:b4:7c:3a:5f:8b:85:a7:3d:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:C3:3D:EA:E8:AA:F8:1B:1B:FC:78:09:97:B2:39:37:50:9F:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE8FAD20CAD811EFBE246575762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.158.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:2f:71:fd:02:b4:d6:9c:a9:c0:99:9a:fa:ea:d1:30:8a:a9:
2b:9b:6f:f0:af:24:22:71:4c:c2:d3:6c:14:53:2b:1b:6d:07:
10:7f:6d:a8:7b:70:1d:56:77:36:bc:e2:77:6e:53:8d:2f:cf:
ab:0d:43:74:27:e7:8b:4d:34:94:c6:4c:f9:92:f6:c6:1c:e4:
96:f9:b0:d8:0a:2d:8b:18:09:eb:89:2b:ff:e3:d4:c0:7d:43:
b8:82:32:7c:12:c7:31:45:87:27:e6:e1:2a:2f:6c:10:78:dc:
60:e9:29:97:4d:9b:7c:19:af:fa:e8:1d:42:8f:48:e0:0b:72:
7a:3f:dd:d9:6f:a9:4b:d9:e2:bd:c1:d7:12:7d:3e:d3:92:ef:
11:1e:24:f9:c8:fe:fd:12:5b:59:15:81:05:dc:c7:59:38:09:
13:5b:d2:d0:de:3f:09:5a:24:6e:67:71:09:28:e3:04:e2:c7:
5e:40:8e:36:f5:50:27:e9:e1:b4:7e:4a:4a:96:a5:76:fb:ed:
7e:c9:b1:37:cc:da:05:0c:c3:c0:61:e1:31:8c:11:e6:b8:b8:
47:77:35:0a:d5:83:7d:b8:de:e8:94:43:b8:db:a1:59:cd:28:
ee:d8:96:bb:49:45:24:c0:e7:7b:1a:9f:7c:26:bb:63:ac:d6:
ee:f4:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:19 2025 by rpki-client