Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8622C64CAD411EF8814FB5B762E951A.roa
File: B8622C64CAD411EF8814FB5B762E951A.roa (raw, json)
Hash identifier: yzLv8K8qyAAmoOOwGO9jxTwRyzsksOU2n4ZDtVXPXbA=
Subject key identifier: 77:17:3E:56:DB:7D:AE:7D:CE:43:0A:28:90:AB:44:18:15:44:DD:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01352B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8622C64CAD411EF8814FB5B762E951A.roa
Signing time: Sat 04 Jan 2025 19:47:25 +0000
ROA not before: Sun 05 Jan 2025 19:47:21 +0000
ROA not after: Sat 08 Feb 2025 19:47:21 +0000
asID: 203020
IP address blocks: 154.217.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79147 (0x1352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:47:21 2025 GMT
Not After : Feb 8 19:47:21 2025 GMT
Subject: CN=6779904d-2426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:c2:1a:5e:a6:67:d7:5b:d7:5b:e8:fd:75:
a6:38:9b:b8:bb:3c:a7:06:28:47:d1:21:78:e7:64:
16:1a:35:bc:64:5f:15:52:49:38:c9:82:90:40:68:
bd:d1:7b:3a:a7:97:c7:fc:2b:cb:53:65:84:64:10:
04:db:1c:60:2c:97:d6:37:95:7e:34:de:a7:f4:2e:
54:3a:ce:6f:5b:9a:f6:61:fe:5f:88:7e:37:06:c6:
e1:d9:2f:6b:d5:6c:0b:96:83:1f:40:44:c6:62:72:
5d:45:c0:91:e9:8d:36:cc:53:c8:c8:08:0e:23:36:
9b:04:20:90:12:77:f4:44:1a:21:b2:17:be:b9:28:
c8:19:ac:d1:d1:b5:29:5c:3f:59:11:5c:df:a7:d4:
a6:c7:4c:6d:15:d2:da:50:a9:79:4d:e8:f4:10:01:
d9:c0:0c:fb:eb:41:7b:c7:39:d2:f5:10:fa:04:5f:
98:27:bf:a2:39:61:ac:b2:bb:5f:7c:e5:31:86:a3:
25:76:e5:4f:00:b5:96:d0:3e:39:eb:36:b3:b5:ea:
b2:82:4f:7d:6a:33:b0:92:94:fe:c6:52:00:8f:41:
71:98:eb:41:0f:a4:b6:ef:34:b3:84:8d:8e:7b:96:
8c:b9:a3:66:8e:0a:23:14:2b:23:c8:e4:54:22:3a:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:3E:56:DB:7D:AE:7D:CE:43:0A:28:90:AB:44:18:15:44:DD:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8622C64CAD411EF8814FB5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.82.0/23
Signature Algorithm: sha256WithRSAEncryption
53:12:1f:e5:5b:47:ab:7a:52:de:0f:c6:27:01:9c:18:39:bb:
e4:53:f0:92:96:36:5d:f2:0c:09:d5:a3:71:60:31:29:c1:d0:
11:68:85:be:a0:f9:e8:be:4a:d2:ce:17:d0:c1:6b:9d:04:2d:
fd:5d:8b:f0:a5:35:22:1b:29:62:81:b7:7b:bf:8b:3d:aa:cb:
7e:9e:c7:89:92:7d:52:78:2d:52:1a:c6:96:21:73:d6:2b:16:
0f:39:58:53:74:f3:d5:2f:4a:f8:45:18:d3:e7:e9:04:a5:b6:
fc:69:c7:80:f4:fb:d3:ac:95:f9:40:9b:98:ea:ba:91:4a:31:
97:ba:c9:13:6a:91:5c:11:05:2b:23:6a:ee:76:64:5e:3e:a6:
0f:39:6a:55:03:70:47:f0:76:66:c1:a3:9c:6f:82:22:9e:d6:
91:51:c1:73:7f:0b:3d:54:60:7b:06:46:6a:4e:86:2e:bd:bd:
32:1f:bc:aa:77:83:cb:f9:2f:a6:48:bb:56:ed:63:d0:a6:a3:
aa:bc:03:f7:88:bb:3d:98:06:8d:0e:e0:8f:09:52:42:7f:10:
21:9e:61:c2:4b:6a:09:32:1b:31:ea:41:35:bb:57:24:b2:80:
15:2e:1b:5d:63:8b:a8:4b:80:f0:94:9c:0e:38:7e:65:38:14:
4b:2e:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:01 2025 by rpki-client