Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4319C2EDC9A11EFA1176A4F762E951A.roa
File: B4319C2EDC9A11EFA1176A4F762E951A.roa (raw, json)
Hash identifier: 0OgMtqu7ZIYY5n1q0fCFmSztFvENk0LymUC3LFwWQ4c=
Subject key identifier: 83:6C:33:48:B2:6B:C4:03:D2:E8:31:3D:46:EB:96:8A:4D:48:70:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4319C2EDC9A11EFA1176A4F762E951A.roa
Signing time: Mon 27 Jan 2025 10:37:28 +0000
ROA not before: Mon 27 Jan 2025 10:37:24 +0000
ROA not after: Sat 08 Feb 2025 10:37:24 +0000
asID: 22773
IP address blocks: 154.84.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84909 (0x14bad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:37:24 2025 GMT
Not After : Feb 8 10:37:24 2025 GMT
Subject: CN=679761e8-4a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:73:4b:5e:18:11:35:6d:b8:33:a9:ad:70:
f4:60:f7:88:a9:7a:ce:b0:a5:b3:ac:f0:03:c0:19:
30:57:5d:00:b5:c3:03:8e:d7:ce:80:59:db:5c:7e:
f3:6d:1c:df:05:e4:8e:16:ca:e6:3e:b4:eb:02:87:
7c:4b:01:df:b5:cf:8c:b3:7c:9e:c6:f9:07:9e:37:
fc:35:b9:dd:57:11:f5:07:31:6d:de:af:4b:47:b1:
a2:d0:e2:65:3e:92:9f:29:94:1e:1f:07:d4:a0:15:
df:30:6e:5b:ce:99:54:c0:1f:59:9f:c2:03:66:c5:
ca:ef:e2:57:96:e1:1a:35:75:bc:22:50:ab:56:fa:
d3:6a:c4:d1:0c:63:66:80:90:5c:5a:c6:f8:2b:c8:
00:5e:5b:e8:35:ee:ed:b5:b2:fc:b6:e5:97:e2:1f:
1e:78:16:dc:34:fd:1e:50:a7:bb:76:ed:ad:d5:7a:
eb:15:24:18:09:f7:5d:7b:5f:b5:cd:7c:15:d7:2b:
3a:3a:5b:bc:42:b1:07:72:b7:c8:e3:b3:9f:bd:79:
20:a5:0c:0c:0f:64:f3:73:5c:f3:ba:33:b1:36:94:
62:9b:d0:5f:90:f5:d0:06:f2:fb:49:69:89:b8:39:
2f:5d:e7:bc:96:d0:88:4b:d9:3a:3f:16:f8:58:54:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6C:33:48:B2:6B:C4:03:D2:E8:31:3D:46:EB:96:8A:4D:48:70:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4319C2EDC9A11EFA1176A4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.28.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:13:cb:f5:aa:94:53:b5:75:6e:86:a8:fd:49:53:47:8f:e8:
37:d9:3c:19:40:35:b9:99:f3:2f:80:f3:c0:ce:58:6d:b8:d9:
69:7e:dc:4b:fe:5a:8d:df:97:bd:4e:4f:ef:b3:33:0d:59:ef:
6a:a4:c2:b0:b5:4f:7e:33:ec:80:ca:25:3a:ec:75:78:80:d0:
1a:19:52:3c:00:95:7e:2e:d3:05:67:8b:ba:e1:d3:55:05:d0:
f8:57:e4:68:77:e1:33:2c:d6:e2:2a:29:15:95:ab:62:ee:8a:
83:bb:3f:07:0a:a2:1c:76:f8:ce:f6:26:14:6f:e7:30:6e:b4:
a3:ae:bd:4c:77:5f:72:96:89:8e:ed:e2:19:f0:cc:5f:dc:6f:
b6:f8:07:a6:dc:30:30:0a:d6:b5:96:5e:ed:b3:83:cb:2c:ac:
f3:62:1c:6c:c8:b4:6b:39:07:ee:ab:ad:85:3e:99:31:fc:b1:
52:54:fa:4b:f0:4f:fb:02:e1:f8:91:9a:44:09:96:d6:6d:7a:
40:fe:de:cb:07:8e:8e:93:68:4f:19:bb:72:b6:c2:cc:db:0b:
1c:a3:c4:a7:c7:17:ff:03:b4:f7:ef:db:f2:10:32:0b:3b:1f:
d9:a7:f3:87:4b:83:43:80:29:07:19:8d:40:6d:98:ce:43:91:
8d:10:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:32:33 2025 by rpki-client