Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22D8818DB2611EFB03E1D81762E951A.roa
File: B22D8818DB2611EFB03E1D81762E951A.roa (raw, json)
Hash identifier: DB/wa+hLkOFP8eb4dFpoJHX+U4mYTNE8OG3y+YJlUfA=
Subject key identifier: 84:D3:94:7A:C3:B6:3F:71:25:1A:45:96:B3:4A:96:67:D4:41:51:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22D8818DB2611EFB03E1D81762E951A.roa
Signing time: Sat 25 Jan 2025 14:14:32 +0000
ROA not before: Sat 25 Jan 2025 14:14:28 +0000
ROA not after: Tue 04 Feb 2025 14:14:28 +0000
asID: 7018
IP address blocks: 154.207.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84427 (0x149cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:14:28 2025 GMT
Not After : Feb 4 14:14:28 2025 GMT
Subject: CN=6794f1c8-59e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:9f:c2:31:b4:40:2c:13:4e:e0:29:c1:bb:
65:9e:21:0e:d4:a7:b5:c0:ff:2a:5b:4e:b1:b1:56:
db:28:46:27:0f:b7:cf:a3:6f:fc:32:4c:64:e3:10:
63:ea:01:f5:d7:ee:48:fd:01:a3:59:0c:fd:5b:6f:
bf:0b:77:f5:7b:a5:01:52:63:8b:e2:3b:49:0b:68:
bf:5c:a2:62:3c:95:3c:99:59:f4:aa:93:b5:12:43:
63:3a:1a:9d:dc:28:22:c7:fe:8d:7c:41:9c:2a:e0:
bd:14:dd:5e:6d:50:23:93:3b:83:7e:d5:cd:6d:5f:
34:99:c0:b7:06:99:e6:aa:dd:d1:0c:b6:7e:39:ef:
e4:32:63:84:f7:0e:43:8b:2b:78:22:2e:0b:0c:c4:
77:71:1e:b9:3b:d8:d3:22:b2:64:1a:94:38:4c:bf:
b8:70:c0:fc:00:72:74:3f:d2:03:2e:96:20:dc:63:
ad:1a:84:c3:4f:59:c6:81:05:e6:f8:c8:54:0d:0a:
64:98:6a:23:2f:77:d7:8a:18:b3:7f:33:96:d5:3e:
94:c1:64:5b:c9:d5:b2:47:34:f0:56:1c:5c:20:82:
39:8c:ca:66:29:99:77:91:cf:1b:5a:db:bc:b7:4c:
dd:26:aa:fc:0f:c5:a0:8b:aa:b9:7d:c0:78:c5:ce:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:94:7A:C3:B6:3F:71:25:1A:45:96:B3:4A:96:67:D4:41:51:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B22D8818DB2611EFB03E1D81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.158.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d1:01:08:e0:c0:a4:4c:75:2b:fa:00:f8:7e:e3:d6:1f:4c:
96:21:c5:20:55:44:dd:d7:ff:94:56:8a:81:10:4f:9a:3b:01:
be:a1:22:5e:4d:ba:23:8e:dd:9d:94:62:b0:ce:08:c2:55:3c:
4d:fa:ba:a0:9c:c9:64:71:5c:e8:e4:75:79:bd:26:a6:77:d8:
7d:ee:94:d9:4c:34:8b:e9:a5:0c:e8:02:b7:71:cb:4e:31:24:
2a:a6:d8:1b:16:91:c4:40:a4:49:f9:f7:15:89:0f:1d:cd:71:
d8:f0:50:b4:27:d7:fc:d4:bc:32:94:b8:47:61:46:00:cf:4e:
18:f0:e5:e3:1f:4b:b2:d8:7f:eb:c6:52:c4:06:9a:61:7c:e3:
79:b5:d9:c4:ef:31:89:5f:12:60:50:21:27:64:1f:05:e6:74:
40:cd:a5:e2:89:ae:72:a8:88:db:ee:cb:92:b5:34:f1:28:06:
4f:15:e4:17:75:57:c2:4b:22:09:3d:f3:0c:07:52:b0:ca:12:
66:66:59:78:48:33:80:40:68:02:1b:c6:ec:a9:f5:03:d0:86:
8a:fa:ac:86:78:e4:02:5f:d7:e4:f5:74:cf:79:49:a9:0f:5b:
78:8d:3b:b8:47:c9:55:e0:3f:63:e2:ef:54:06:c3:ce:e9:ca:
50:06:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:20:00 2025 by rpki-client