Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB344DFCCEA611EFA05618B8762E951A.roa
File: BB344DFCCEA611EFA05618B8762E951A.roa (raw, json)
Hash identifier: TolC+dr16eGPg+lcbz2VJlO77QWX79Pd8yv7sfRQZDI=
Subject key identifier: 97:13:D8:27:21:33:80:32:F4:06:03:F9:82:F5:F2:67:9D:FC:91:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01395C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB344DFCCEA611EFA05618B8762E951A.roa
Signing time: Thu 09 Jan 2025 16:28:17 +0000
ROA not before: Thu 09 Jan 2025 16:28:13 +0000
ROA not after: Tue 11 Feb 2025 16:28:13 +0000
asID: 5065
IP address blocks: 154.84.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80220 (0x1395c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 9 16:28:13 2025 GMT
Not After : Feb 11 16:28:13 2025 GMT
Subject: CN=677ff921-6c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c0:6f:be:64:2b:34:d8:9c:95:38:22:a1:cc:
0a:24:7e:7b:ae:8e:2d:f1:32:0d:9a:b6:b1:c0:fd:
55:86:87:23:4a:71:8d:c9:56:f5:22:eb:af:3a:88:
c8:a8:86:6d:c6:c9:2a:72:ca:ec:d0:32:7c:85:a3:
cb:4a:35:f4:14:a9:de:90:c5:44:51:2e:fb:7c:1e:
c0:dc:0c:70:b7:6d:3a:0f:9c:07:8b:eb:b8:a4:05:
61:02:fd:4d:d5:55:e8:9a:f7:28:57:73:e0:b7:29:
f3:ba:54:fd:66:51:92:2f:eb:af:38:08:80:4e:92:
02:18:fc:b2:58:d5:78:86:c9:e7:6f:cf:2a:14:35:
1a:64:4a:83:27:27:2d:ca:35:6b:9e:cb:e8:79:36:
c8:f2:5d:76:ce:00:cf:ed:09:63:03:71:3e:ab:78:
99:12:2c:0a:ad:bd:28:00:d1:e7:bd:a4:ef:55:00:
45:20:e0:14:c0:0c:98:46:b3:8a:42:cd:e0:c5:23:
91:95:35:5c:31:6d:8c:6a:dc:5f:54:d6:b6:fb:03:
54:46:ee:97:b3:32:2a:87:9f:41:e5:8f:e6:c1:e0:
b7:86:ce:db:34:d4:04:41:66:51:03:30:e1:01:14:
76:a1:3d:ae:9d:e4:a0:54:3e:3e:3d:f0:a2:4a:93:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:D8:27:21:33:80:32:F4:06:03:F9:82:F5:F2:67:9D:FC:91:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB344DFCCEA611EFA05618B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.184.0/22
Signature Algorithm: sha256WithRSAEncryption
96:df:70:78:64:df:14:5f:d4:fe:29:57:7a:70:29:4b:23:7e:
24:9e:d7:f9:0d:5a:ec:66:6d:4c:3c:ce:fa:55:9d:19:ee:61:
9e:f7:9c:ef:11:78:a9:82:d3:c2:b9:79:a7:f5:8e:be:5e:20:
13:8c:54:26:f5:8f:d4:c6:55:78:7a:76:87:f3:9f:64:6b:d2:
50:f8:6c:c1:b5:27:52:18:20:01:77:59:e0:53:31:14:39:ee:
7d:8b:3b:62:72:8f:f6:5f:28:c3:e2:73:37:9f:78:af:9c:a6:
30:56:24:01:1f:75:d9:b9:66:f1:cf:f9:b3:a4:de:3c:3b:95:
b5:69:6f:9c:9e:74:29:74:57:c1:22:c5:da:26:d2:63:5c:36:
b7:c9:d7:33:ab:08:67:02:55:2f:45:51:0d:c7:5f:5c:45:39:
5d:a8:20:ba:7b:02:2c:37:db:01:5e:5c:21:b5:b8:27:f0:fc:
af:d2:99:5b:5b:17:56:5a:2b:91:34:58:5d:d6:90:ee:d4:12:
ba:07:3f:a1:1a:b4:4b:b2:06:b1:69:5e:69:59:bc:4c:53:b0:
b1:b7:09:24:82:97:d4:9e:d6:d4:f2:50:9c:ee:ad:e8:5a:4b:
06:7a:e6:60:49:59:36:ed:52:41:f4:c8:3a:e8:6d:f5:29:84:
8a:62:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:51 2025 by rpki-client