Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C739B638DCC911EF9BEDEA86762E951A.roa
File: C739B638DCC911EF9BEDEA86762E951A.roa (raw, json)
Hash identifier: WL/0MC8okfPq3yAe5pM3sqm65AOSUFbuVsYzpcTEVwY=
Subject key identifier: 7A:98:C1:B3:E0:99:D4:95:E9:32:84:F8:55:89:96:AA:20:7E:DE:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C739B638DCC911EF9BEDEA86762E951A.roa
Signing time: Mon 27 Jan 2025 16:14:26 +0000
ROA not before: Mon 27 Jan 2025 16:14:23 +0000
ROA not after: Wed 12 Feb 2025 16:14:23 +0000
asID: 135097
IP address blocks: 154.92.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85099 (0x14c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:14:23 2025 GMT
Not After : Feb 12 16:14:23 2025 GMT
Subject: CN=6797b0e2-5a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:04:cf:ad:df:8d:da:c9:f3:e5:ca:73:81:
a7:ea:2b:fd:af:97:2d:bb:15:3f:1b:d7:16:59:2e:
d3:7d:21:41:5c:48:11:a5:d4:ee:6e:a4:4d:c7:76:
d2:ab:2a:77:71:fa:37:af:89:7f:ea:42:89:e1:e7:
03:fd:02:97:ec:d2:b4:b3:40:92:7f:9e:9c:ac:72:
66:8e:a0:20:2f:59:2d:f3:6b:0f:56:96:44:0a:19:
a7:19:01:1d:9f:af:47:e0:5d:af:94:9f:f8:96:26:
6f:83:c7:ed:7e:da:0a:1c:10:23:65:c0:0b:4f:54:
34:c9:c1:c5:0a:a0:08:54:e7:99:97:e8:a0:35:2e:
b5:38:8f:3b:92:bc:94:0b:ed:d5:bd:09:7b:f5:d6:
3c:d7:ca:b5:1e:37:f6:65:03:40:0e:c7:b9:0d:67:
3d:b2:08:ef:73:33:94:67:02:aa:d8:b8:c2:04:6e:
b4:2b:48:ed:04:a8:8a:3e:7f:d8:77:bf:cc:1c:ab:
43:98:8b:0b:c7:29:36:36:f8:fb:f7:19:be:53:60:
41:23:21:56:35:f4:90:f0:01:94:b8:f9:64:5c:b0:
3a:2e:8a:b2:0f:ad:48:b9:58:de:1f:a5:de:38:52:
bd:08:4c:15:e8:d0:5f:4c:46:f3:68:67:f7:08:b9:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:C1:B3:E0:99:D4:95:E9:32:84:F8:55:89:96:AA:20:7E:DE:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C739B638DCC911EF9BEDEA86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:a6:89:db:c9:70:88:ab:bd:53:74:ef:c2:45:95:85:df:e2:
f7:a1:8c:54:83:8d:69:8b:c1:21:01:65:3d:0e:27:1e:1b:d2:
fd:02:69:7c:9c:bf:5e:d6:8c:3c:3d:53:34:10:82:34:ed:8d:
5b:55:3f:87:b4:e0:ef:fd:0d:a3:77:6c:25:e8:4f:4e:32:2b:
c3:d3:f0:4d:ed:37:d9:8e:a7:17:da:e9:f7:39:e6:f8:c4:3a:
d4:3c:15:f4:ec:83:a0:7c:9a:00:10:67:a5:6c:9f:8d:da:4f:
24:4c:4f:68:b4:10:58:7f:3f:e7:8e:59:c6:17:b8:94:d7:78:
7c:e4:fe:b5:99:ee:ed:62:db:6b:4d:7f:6e:75:04:c1:d7:24:
e4:1b:a1:34:ed:c5:b3:a7:bd:3c:75:c0:53:95:ae:f3:42:71:
5d:ae:b0:6b:3e:2e:1c:63:ad:c1:3b:5f:c4:b6:37:ad:ac:9b:
61:f3:15:34:8a:fb:44:69:18:39:7b:29:8b:ad:9f:ea:94:e7:
04:df:f4:74:e5:14:f9:4c:67:24:59:8d:44:fc:3d:1c:7f:d4:
1f:54:a4:d2:55:d4:75:4a:9d:df:87:9e:4c:13:02:a3:1c:fd:
20:95:e7:3c:31:61:fd:c8:bb:37:fa:84:6d:ff:21:69:03:1e:
d3:03:6a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:05 2025 by rpki-client