Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2DB786EDB2511EFB47D6F7C762E951A.roa
File: D2DB786EDB2511EFB47D6F7C762E951A.roa (raw, json)
Hash identifier: E6j0wdrk26rbZ8hjaxJ393JJXo+jfE34awVD45ErM60=
Subject key identifier: 27:84:61:C8:1F:75:07:5E:82:CF:E7:43:C2:60:AA:04:0B:1D:97:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2DB786EDB2511EFB47D6F7C762E951A.roa
Signing time: Sat 25 Jan 2025 14:08:17 +0000
ROA not before: Sat 25 Jan 2025 14:08:13 +0000
ROA not after: Wed 26 Feb 2025 14:08:13 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84417 (0x149c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:08:13 2025 GMT
Not After : Feb 26 14:08:13 2025 GMT
Subject: CN=6794f051-25a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:b4:54:46:30:cd:62:55:e1:bc:cc:e7:01:
45:86:02:7c:d3:b9:62:59:b2:c8:41:53:e7:a9:f5:
43:1f:34:22:0e:44:e5:b2:95:c0:b3:77:42:64:fb:
e8:5b:db:ac:90:ed:c0:a0:b3:d8:ce:21:62:e0:73:
18:42:63:ff:84:dc:11:b7:42:9c:a4:84:dc:89:52:
d2:cd:05:96:e1:5d:73:f6:02:e5:e4:5f:46:d5:6b:
9a:f6:bb:d1:c5:87:04:95:d0:25:e8:ac:14:ab:bc:
c4:05:42:f6:aa:88:4d:4a:b4:d9:8e:b7:7d:37:17:
6a:3c:2b:a8:1a:83:ec:07:6f:b0:e6:2c:a2:2f:33:
0a:c2:fc:48:2c:1e:63:55:d7:ad:78:51:b8:08:27:
d7:28:ed:e0:51:5f:6c:d6:e6:ed:1f:e0:ee:ce:05:
d4:f3:77:e4:52:c5:65:2e:fe:2f:49:85:22:85:04:
e8:91:ac:08:1b:60:51:af:0f:83:0e:3d:2b:7d:30:
3b:05:83:e6:e0:e1:44:92:9d:7e:da:0e:c8:26:81:
f0:ce:ec:60:0f:bb:31:b6:27:22:15:a0:ad:f7:98:
55:e0:86:21:fc:06:0d:91:18:ea:a5:b0:37:60:c0:
e5:1c:61:23:6d:d5:49:b0:0b:79:55:b4:7d:0b:f8:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:84:61:C8:1F:75:07:5E:82:CF:E7:43:C2:60:AA:04:0B:1D:97:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2DB786EDB2511EFB47D6F7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
73:c9:76:05:4e:1f:75:27:47:6a:28:ef:4f:be:3c:35:28:68:
8e:e9:f2:7a:d2:6a:3b:b4:81:01:ba:88:85:3f:fc:81:0b:c1:
66:47:52:eb:8a:8e:3c:06:01:c2:bc:46:60:11:39:82:1f:b8:
f4:b0:aa:0c:80:cd:f4:d1:82:34:24:3d:6b:4e:29:eb:25:96:
fe:84:ff:03:84:d5:28:bc:f4:2b:23:78:e0:0e:14:43:62:70:
9a:ed:53:11:35:3b:0a:1f:79:b8:bb:b2:3d:f4:40:22:1b:7e:
cb:15:0a:1a:f6:4b:61:e7:2c:72:c1:a4:25:18:e0:b9:2c:39:
6f:a6:c1:60:2c:58:c1:42:39:07:f7:55:0d:8d:3b:91:bf:c6:
c5:24:a4:d4:a1:d3:bb:6d:ef:a4:04:03:24:61:31:5d:14:1d:
9d:70:6e:52:ff:4e:33:39:fc:57:0f:b6:7d:16:4b:05:80:57:
d4:c4:ef:c7:51:23:ff:9e:a0:05:4f:18:f3:f9:41:30:bf:38:
e4:c9:8b:20:27:32:3e:24:5b:17:63:63:8e:bb:5d:d4:ed:da:
df:f8:5d:30:a7:0a:22:31:37:4d:46:b0:f3:66:03:db:1f:ca:
c0:97:b1:0d:7c:65:7c:c7:9a:a3:4c:0d:45:4c:f4:bd:d1:5f:
17:5c:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:17 2025 by rpki-client