Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D34292DED911EF811C3E81762E951A.roa
File: C1D34292DED911EF811C3E81762E951A.roa (raw, json)
Hash identifier: 7vsWQtz4rUt5ToYXKAbjqh4B0aTIOE5ceZCvAIl+UVQ=
Subject key identifier: 2E:B1:2F:57:95:A0:E1:E9:8B:D6:0A:E1:40:F3:81:6B:70:5D:DB:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D34292DED911EF811C3E81762E951A.roa
Signing time: Thu 30 Jan 2025 07:13:51 +0000
ROA not before: Thu 30 Jan 2025 07:13:47 +0000
ROA not after: Wed 05 Mar 2025 07:13:47 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85404 (0x14d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 07:13:47 2025 GMT
Not After : Mar 5 07:13:47 2025 GMT
Subject: CN=679b26af-e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:72:2c:86:39:6e:4d:8a:0a:fa:e5:7c:8a:
42:46:db:8a:53:ee:f8:ce:e7:a7:6e:a8:b7:c1:f3:
f7:60:db:d5:21:f2:56:27:54:1c:a4:a7:aa:e6:1a:
12:d6:c3:36:09:7d:9a:f1:06:7a:bb:3b:ca:27:f4:
c6:2e:4e:41:a2:80:a2:bc:49:ba:8d:5a:c8:0a:71:
68:65:f8:4a:d0:ad:c5:98:62:eb:29:6c:47:59:99:
2c:1e:5b:72:77:3b:1d:73:65:ca:a9:1f:28:df:82:
22:c4:62:30:cf:af:7b:00:0d:bf:cf:e8:18:1a:03:
33:f5:dc:e9:2b:f5:65:34:8d:fe:1b:ca:cf:fa:7d:
08:81:c9:f7:4e:89:1b:42:db:9b:d2:9b:f6:b3:cd:
c8:1e:13:6a:cc:23:75:a5:85:56:09:a7:80:01:e6:
fa:9d:2c:93:15:94:01:0c:bc:22:3c:13:49:0f:8f:
1c:62:6e:77:52:93:4e:9d:ca:80:c6:1f:f1:db:ae:
7e:80:93:f6:30:c2:5e:78:30:04:23:30:6b:cb:02:
6d:19:1d:54:c3:01:ab:37:a7:22:50:3c:8c:91:32:
12:8a:ee:14:5b:30:0a:28:5d:90:fd:f0:d0:2b:d8:
82:c9:3b:69:26:50:ae:9e:62:ea:74:75:77:0a:f0:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:2F:57:95:A0:E1:E9:8B:D6:0A:E1:40:F3:81:6B:70:5D:DB:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1D34292DED911EF811C3E81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b8:e5:60:ed:40:42:6d:d5:ec:d4:c2:03:df:a2:bc:e9:5e:
21:8f:55:3b:52:d3:fd:79:9c:30:a5:63:86:f0:af:9e:1e:c8:
da:be:78:a4:01:90:a1:46:c8:c1:c6:95:af:16:ff:f3:99:0c:
66:b6:a6:58:3d:a6:51:14:fc:b2:9e:42:7d:23:9f:c9:5e:aa:
d0:be:66:be:fe:e7:29:83:ae:f1:3d:c3:75:26:63:63:39:33:
24:fe:fe:99:d2:07:d4:b1:e7:b7:07:d6:6d:b1:6d:d6:19:e6:
2d:9f:ed:ec:58:2b:48:c6:9e:26:55:b9:07:88:0e:dd:c6:6c:
6a:ff:77:14:a9:df:81:b0:6d:5c:83:c7:cc:c1:f5:84:8e:c5:
74:13:29:e0:8b:62:31:f6:d4:cf:ac:01:ab:7c:f2:4d:65:81:
e7:1b:1a:18:74:65:bf:07:90:0c:00:9a:52:1c:0b:b8:2e:16:
08:a5:85:02:49:0a:1b:a4:b1:aa:81:6d:a3:fa:1d:00:a2:0b:
53:9a:62:42:8f:7f:88:92:ac:5c:4d:ba:58:bf:8a:bb:3b:6e:
8e:a1:41:35:58:d3:fd:58:13:98:59:59:7c:2e:25:69:10:5f:
24:fb:bd:a1:48:56:f2:d5:02:04:09:ab:84:b2:3f:3a:2a:02:
ee:96:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:54 2025 by rpki-client