Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3676BEDCCB11EFA7804194762E951A.roa
File: AF3676BEDCCB11EFA7804194762E951A.roa (raw, json)
Hash identifier: OAfCIeCJ/wXocKnd2hIF1wnIbw1WxNzyGWYw+ck1BDI=
Subject key identifier: 48:63:21:65:00:EA:50:1A:69:AF:07:70:74:C6:3B:D9:8E:72:C6:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3676BEDCCB11EFA7804194762E951A.roa
Signing time: Mon 27 Jan 2025 16:28:05 +0000
ROA not before: Mon 27 Jan 2025 16:28:01 +0000
ROA not after: Wed 12 Feb 2025 16:28:01 +0000
asID: 135097
IP address blocks: 154.91.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85111 (0x14c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:28:01 2025 GMT
Not After : Feb 12 16:28:01 2025 GMT
Subject: CN=6797b415-c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:1a:18:12:72:7b:9d:bf:62:f7:53:08:55:
ee:47:d8:13:ef:6d:05:69:f1:14:55:38:f1:9a:bf:
d2:f1:1c:3a:2c:a8:61:4e:2a:2c:49:5d:55:5b:02:
d2:c5:87:98:a8:98:5c:05:56:9f:0b:f3:bd:8f:5c:
df:3f:e7:81:86:31:aa:bb:7f:1f:4a:75:c8:d5:0a:
e7:ef:c5:92:1c:14:44:6b:1f:92:b8:c5:e3:8d:93:
35:95:2f:c3:a0:08:87:0a:b1:f7:51:7e:04:18:0b:
99:5e:b8:69:60:34:df:60:ab:d1:2a:3b:8d:6e:73:
19:5b:f3:db:07:1d:9f:04:58:80:eb:1b:aa:23:55:
65:d4:6c:6c:fa:18:0f:6d:f4:41:8b:a6:3a:15:18:
56:12:bd:f1:01:12:f3:40:d4:32:8b:3f:37:8f:29:
db:e9:a1:ab:d4:cd:6d:1e:5b:af:5d:f7:43:5a:79:
28:a1:9c:83:d5:1f:90:81:39:f7:a5:00:69:af:d2:
23:35:67:0e:57:62:67:7d:bd:a6:19:ac:77:e7:df:
75:42:92:b8:21:69:7d:29:b1:60:8a:78:80:57:b0:
4b:d6:d2:cd:f3:ce:98:99:f7:da:33:01:20:03:0c:
29:64:5a:a3:8b:53:ea:22:7e:c0:8b:f7:50:b4:ed:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:21:65:00:EA:50:1A:69:AF:07:70:74:C6:3B:D9:8E:72:C6:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF3676BEDCCB11EFA7804194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.8.0/21
Signature Algorithm: sha256WithRSAEncryption
73:0b:fa:89:50:40:cd:fe:c8:cf:a5:70:6e:67:0f:cc:22:b2:
79:55:bf:03:ad:7c:5c:47:87:ea:03:4e:98:9f:ef:e1:59:81:
ce:1f:30:26:0b:43:57:e5:45:23:33:9c:46:08:9a:93:c9:05:
ab:af:8c:b8:5e:a0:82:be:3f:00:22:9d:af:c4:f5:db:c6:fd:
5f:9b:d8:49:c8:4c:bb:90:9b:af:73:d3:8c:ca:00:30:b5:ef:
8f:ef:37:fe:9d:53:2b:56:36:e5:96:8f:6f:67:22:e1:eb:ac:
56:bb:4e:0d:0c:e0:5f:2b:6c:5f:2f:ce:97:d5:13:8d:b4:a6:
6c:be:a9:bb:8b:62:dc:90:6c:ba:f3:0d:5e:21:2c:98:17:e9:
36:bd:f0:6d:c6:28:c8:be:ce:e1:3f:2e:95:cd:52:4e:31:6a:
0d:83:99:ff:55:8e:00:0e:e1:2a:f5:f2:cd:14:42:6d:f1:68:
bb:47:9e:4b:54:5c:33:40:44:24:76:f1:ce:87:77:47:30:a4:
e2:b3:e8:31:3f:6f:c7:31:cd:ac:83:e6:ea:c4:d9:2d:39:4e:
96:19:50:4f:1d:8f:f6:5f:5c:46:8f:01:1a:13:ec:f3:d1:90:
dd:be:a8:6e:ee:c1:19:ea:c5:70:82:ba:d2:f7:6c:b1:f6:1e:
f7:43:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:05 2025 by rpki-client