Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0AC360C9B711EF8D2C2C5B762E951A.roa
File: DC0AC360C9B711EF8D2C2C5B762E951A.roa (raw, json)
Hash identifier: hOlIAesxynt6hESeDHBERLGoxuOp7lcUsDj+Eg/zO6s=
Subject key identifier: 0B:4F:38:D2:37:3E:06:CB:A3:0A:5A:49:89:C1:56:E6:37:90:02:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01347A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0AC360C9B711EF8D2C2C5B762E951A.roa
Signing time: Fri 03 Jan 2025 09:48:18 +0000
ROA not before: Fri 03 Jan 2025 09:48:14 +0000
ROA not after: Sat 08 Feb 2025 09:48:14 +0000
asID: 203020
IP address blocks: 154.217.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78970 (0x1347a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 09:48:14 2025 GMT
Not After : Feb 8 09:48:14 2025 GMT
Subject: CN=6777b262-3a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:61:d1:12:24:d9:31:a3:8f:c2:95:bc:9f:
bb:16:53:d1:03:be:95:14:88:0c:28:72:6c:6b:c1:
de:c4:61:5b:6e:11:f7:82:00:a8:3a:0b:63:b6:fb:
ea:46:72:33:f1:b7:a2:c0:64:d6:09:8d:3c:9e:8d:
ca:43:bf:16:ef:33:3e:d3:ef:e9:67:1c:59:ab:b4:
5f:cd:1e:a8:d8:9c:10:9d:aa:6c:ba:68:45:6a:a5:
4e:0f:47:d6:88:6f:58:e0:03:2d:63:bf:28:2a:a4:
4c:b7:7e:cf:9f:cd:f9:51:55:d8:82:35:9e:52:a5:
3b:af:86:7f:c1:45:dd:81:1c:f3:e2:ab:f7:92:04:
7d:f3:43:a1:2d:bb:f8:c8:da:e4:05:f3:21:ad:c4:
65:4c:ec:fe:12:5d:d0:2c:5a:1a:45:b0:a8:2e:63:
ad:80:91:4f:2a:47:af:76:40:a1:e6:98:a3:18:66:
16:92:00:f9:eb:0f:a0:35:e7:ce:07:78:7b:0d:0d:
38:63:b0:75:b2:7e:e1:71:5e:7d:07:f0:7d:5e:a6:
c4:12:7c:aa:98:3b:b1:e1:69:9f:59:3c:30:17:21:
12:a2:b7:52:76:d0:bf:eb:ad:9b:30:86:c6:99:43:
1e:00:96:1e:c6:b5:0b:a8:f1:bd:02:f2:bf:6f:c6:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:38:D2:37:3E:06:CB:A3:0A:5A:49:89:C1:56:E6:37:90:02:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0AC360C9B711EF8D2C2C5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.0.0/17
Signature Algorithm: sha256WithRSAEncryption
08:0f:ad:28:06:6d:23:d4:b8:23:89:13:32:0a:a4:ab:d0:4b:
11:c3:2a:78:cb:37:b5:62:f9:f2:e5:32:b2:27:a3:39:ef:df:
90:bf:2c:df:1c:7a:38:b5:7d:00:ad:06:8d:76:63:7c:01:0e:
68:2e:ec:a0:16:38:4b:57:4d:7c:86:02:be:36:f0:49:91:ed:
63:c8:c0:7e:72:35:4b:81:09:1a:ba:92:3b:98:0a:71:56:af:
18:ef:ce:58:6d:ac:8e:df:87:f7:16:e2:d1:a1:39:4e:b9:cd:
9d:e9:2e:2c:94:3d:f6:b7:25:35:c6:7d:0e:07:98:67:74:eb:
50:40:5a:44:a4:ee:de:56:78:8a:59:39:34:78:4d:5d:40:97:
19:55:ac:c5:c3:3b:e3:5a:6d:c0:38:04:9b:b2:de:ff:3d:a4:
1c:22:87:bc:1a:f9:a5:2e:90:c3:75:2e:dd:ca:e9:48:f4:39:
7c:ff:d2:22:45:07:bc:11:eb:b8:ca:07:e7:27:eb:34:af:cc:
7c:88:a3:38:b7:69:a9:2b:13:ef:c1:60:9d:45:20:b1:73:25:
2f:40:6a:83:fa:15:65:99:d6:e1:46:33:b9:56:50:53:96:41:
93:21:6b:ca:e1:a1:06:69:a5:a4:b0:6c:02:ff:ae:15:c1:f5:
07:32:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:45:08 2025 by rpki-client