Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44906AADFE211EF8E0E6B6B762E951A.roa
File: D44906AADFE211EF8E0E6B6B762E951A.roa (raw, json)
Hash identifier: +Y2rmXPFTZAm7YxwNEdX69Lv/CfH60+VYJupvWWxljA=
Subject key identifier: E3:7B:13:10:9C:E4:63:F3:01:D6:B8:C2:1D:14:C3:0B:A3:7C:48:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44906AADFE211EF8E0E6B6B762E951A.roa
Signing time: Fri 31 Jan 2025 14:51:19 +0000
ROA not before: Fri 31 Jan 2025 14:51:15 +0000
ROA not after: Fri 07 Feb 2025 14:51:15 +0000
asID: 63199
IP address blocks: 154.207.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85443 (0x14dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:51:15 2025 GMT
Not After : Feb 7 14:51:15 2025 GMT
Subject: CN=679ce367-a0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:87:f0:8a:1d:71:08:89:ad:ca:80:81:16:
17:be:23:01:70:2f:d1:77:01:d6:96:5a:94:38:e3:
37:ff:ec:e6:18:7d:04:58:d6:32:77:d5:b7:53:4c:
96:b9:6a:22:4c:0f:ce:01:ed:1c:42:83:e7:cd:52:
8a:e7:35:5b:0a:34:79:91:28:2d:2e:94:8a:d5:7b:
ab:bc:87:49:a5:3b:fa:26:30:cf:f7:2c:5b:37:a7:
ec:8e:d3:fa:1d:c7:8a:0b:f4:80:bd:73:7d:61:08:
eb:a8:5a:08:0d:33:51:47:f3:28:e3:fa:63:3f:41:
cd:a9:40:e9:f5:12:9c:ff:01:83:75:60:92:fa:c9:
99:7c:80:3c:fc:f0:f0:2a:16:38:0b:63:7a:f8:85:
67:36:2b:c3:89:d3:23:f5:4e:f8:7b:e9:3e:49:98:
c4:e1:c2:7a:21:f6:98:75:5d:a0:83:9e:34:b3:2d:
c0:63:08:99:47:36:f5:31:e9:ca:b4:80:16:d3:58:
54:4a:b9:ac:55:1d:79:f1:12:b4:f0:45:bf:f9:a4:
c6:b5:b3:dc:37:2a:75:1b:d1:ca:83:ad:10:e6:d7:
a4:f5:ed:df:23:e2:ec:e6:b4:1f:ad:5f:0e:47:5a:
44:7f:fc:4c:6e:95:a2:93:8f:06:b5:11:7c:9a:a4:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:13:10:9C:E4:63:F3:01:D6:B8:C2:1D:14:C3:0B:A3:7C:48:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44906AADFE211EF8E0E6B6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.96.0/23
Signature Algorithm: sha256WithRSAEncryption
49:2d:49:23:fd:0e:06:aa:90:c5:1b:aa:98:3d:dd:6f:7d:ee:
fa:34:2a:73:37:88:21:dd:e4:2c:59:68:28:61:f6:8c:70:30:
66:16:17:0b:28:ec:72:c6:0b:6a:2c:41:c6:ce:53:e8:86:16:
bd:5d:6a:ab:41:58:dd:55:7a:a5:ed:e5:21:21:e3:a0:e9:cd:
9b:e3:5e:12:b0:a3:a4:39:0a:3c:62:75:0b:d9:1a:e2:2e:1f:
99:fa:5f:28:d0:4f:de:bd:8f:f2:a4:ec:30:0c:01:50:20:55:
0d:7e:27:8e:2a:c0:78:03:d0:30:7b:28:36:f7:95:44:2e:78:
67:85:78:46:b2:14:ae:ee:fb:3f:da:48:90:96:61:bc:3f:7f:
ba:fd:8f:d6:8b:25:ec:74:cf:d8:fa:42:c6:24:af:d5:90:76:
50:84:ca:41:a4:1d:1e:24:b9:3f:66:76:04:c8:0b:3a:bc:1a:
f2:e9:0c:68:a9:ca:8d:68:54:57:c1:04:3b:15:0b:78:7c:aa:
f2:fd:f5:24:15:1e:cd:01:d9:ed:8f:5e:78:52:87:e2:e8:b5:
2c:61:66:a5:3d:52:70:8d:05:e4:2f:ae:b8:45:f9:c2:e3:5e:
3c:7d:eb:8a:d0:7a:08:0c:f1:28:36:1b:69:6d:a7:c2:75:39:
46:ab:22:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:23:04 2025 by rpki-client