Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10A770DCCA11EF8C9E158C762E951A.roa
File: BC10A770DCCA11EF8C9E158C762E951A.roa (raw, json)
Hash identifier: HtLPKvLtrcz6x80RfZKikLzNUxOgtGf5FjTxjW0gTxM=
Subject key identifier: 53:42:FE:E6:47:43:BD:9A:B8:D8:A7:63:87:5A:AF:71:13:31:DD:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10A770DCCA11EF8C9E158C762E951A.roa
Signing time: Mon 27 Jan 2025 16:21:17 +0000
ROA not before: Mon 27 Jan 2025 16:21:13 +0000
ROA not after: Wed 12 Feb 2025 16:21:13 +0000
asID: 135097
IP address blocks: 154.216.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85105 (0x14c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:21:13 2025 GMT
Not After : Feb 12 16:21:13 2025 GMT
Subject: CN=6797b27d-98f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2a:14:61:74:ff:88:c8:62:c3:b8:5d:43:e4:
61:ee:f3:e3:84:2d:a0:dc:e2:65:e6:44:32:63:d2:
d6:65:d5:3a:f3:2d:66:0e:03:13:97:b5:82:e1:62:
5f:40:f4:2b:0e:a4:ee:70:86:14:18:30:7d:6f:95:
58:5a:ca:48:ee:11:53:5a:4f:c7:25:a4:01:84:45:
5d:a3:26:45:ad:fc:bc:58:c6:15:81:16:30:c9:d5:
3a:d4:72:29:2f:02:dc:e4:0a:19:11:b9:d3:42:e0:
41:3b:8a:3c:60:11:dd:6c:cd:dd:e9:80:a2:7b:86:
e3:71:a7:b7:d7:f5:c4:de:79:ab:55:92:48:ce:65:
43:14:96:82:48:cf:59:b9:cc:d7:ad:18:4e:73:e9:
8a:a4:79:f0:19:08:37:92:00:28:2a:e9:5b:eb:6a:
89:ae:93:58:b2:42:c6:a0:57:69:da:ac:04:bb:4d:
1d:c2:34:7b:59:d2:ab:3f:c1:6a:fc:ec:dc:67:00:
c1:d5:b4:bb:b4:37:75:8a:2a:9d:19:48:83:12:2c:
35:e3:76:f7:4a:c9:11:c5:5b:45:71:21:85:a1:e6:
f5:58:92:03:7c:c5:a1:66:82:f2:3d:41:62:87:33:
c4:6b:f8:98:c2:57:2e:8e:7b:5e:47:0f:74:0b:b7:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:FE:E6:47:43:BD:9A:B8:D8:A7:63:87:5A:AF:71:13:31:DD:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC10A770DCCA11EF8C9E158C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:a1:4a:f8:cd:bb:4a:ba:a8:e9:a0:6a:b9:6c:ae:ee:48:b0:
f8:f2:08:d5:3e:8f:75:62:fd:6b:27:f7:a8:21:47:af:17:62:
3f:db:a8:5e:e9:ff:d2:ea:ea:cf:64:16:1a:f7:cd:e4:54:e2:
bb:20:61:3f:5d:7e:9b:7f:76:5d:9e:64:23:11:b4:34:cc:bb:
41:60:ad:4d:5b:80:f9:40:eb:a5:5f:e9:cd:ad:96:f3:c8:a1:
3d:34:24:f5:fd:e5:2a:94:25:9a:b0:4d:a4:f1:4c:07:c9:dd:
65:73:64:3a:19:1c:16:27:60:1c:8e:97:7c:f0:95:e1:8c:19:
9a:7b:5a:5b:bc:45:ec:e3:41:f6:ac:62:6c:ec:f0:ef:ac:b8:
8a:f0:c8:4c:dc:a6:a7:91:80:69:15:b9:c9:ce:80:99:b5:88:
72:de:2e:29:c4:3a:e0:c5:f4:85:02:c2:21:19:c8:6f:74:93:
4e:9c:ae:08:ba:84:bd:e0:9f:04:13:c5:51:d1:47:f2:4f:c9:
39:2f:28:93:1a:d2:fe:1c:f2:eb:1c:96:c9:57:62:be:42:d2:
94:c8:cd:dc:c0:6d:33:27:69:b0:0f:57:47:f4:7f:37:5d:fd:
8c:dc:7a:f5:b5:5a:08:07:02:31:23:6e:3a:f5:9e:87:c9:51:
12:15:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:33 2025 by rpki-client