Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE084326D73211EFB9A62497762E951A.roa
File: DE084326D73211EFB9A62497762E951A.roa (raw, json)
Hash identifier: F1SVJ6kU5SspthZQ4kBidwiDO0tiXpUvzqQpAmMSpyM=
Subject key identifier: 4E:C1:A6:8A:2D:F1:8E:FD:38:D8:79:47:00:92:55:D8:79:4E:D1:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE084326D73211EFB9A62497762E951A.roa
Signing time: Mon 20 Jan 2025 13:31:35 +0000
ROA not before: Mon 20 Jan 2025 13:31:31 +0000
ROA not after: Wed 05 Feb 2025 13:31:31 +0000
asID: 135097
IP address blocks: 154.212.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81486 (0x13e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:31:31 2025 GMT
Not After : Feb 5 13:31:31 2025 GMT
Subject: CN=678e5036-435a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:8c:f5:c9:31:49:b0:f1:db:2b:7e:f5:68:
e4:3d:66:80:ab:a4:81:d9:cc:4c:fd:84:a5:c7:90:
fe:f0:4a:5c:d2:87:1c:cd:fd:d6:06:37:92:1b:41:
6e:71:5b:a5:4a:fb:e8:b0:b7:a3:31:67:76:05:45:
83:2c:a9:be:a7:e2:bd:0d:d3:84:9a:dd:06:e4:fd:
55:68:fd:a2:c9:b3:36:59:e2:7c:73:36:34:b8:23:
cb:14:c0:5b:9f:fc:b0:ac:e5:22:0a:c7:88:7b:3d:
c9:b2:a6:1a:03:16:05:79:2c:ca:20:ba:55:57:7a:
43:35:43:2f:70:1e:57:57:b0:f2:92:ba:94:12:7c:
7c:60:bf:12:05:87:35:52:fa:e0:b6:69:fe:46:d6:
c2:83:e7:40:e5:43:a7:ab:a2:cb:53:d6:b5:65:c2:
31:a8:fd:4d:22:51:02:6f:1d:20:78:1b:ce:15:76:
e9:e7:26:6e:ab:a9:a2:88:b5:eb:8d:c5:68:95:fd:
a5:8e:91:37:0a:88:98:91:6f:42:27:e8:94:61:94:
46:45:b8:31:63:55:40:31:81:ac:02:5f:2d:c6:07:
6c:54:24:70:78:11:52:17:84:ab:91:93:af:1b:cc:
be:0d:a4:44:fd:f0:79:e4:36:69:8b:24:5e:c1:f5:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:A6:8A:2D:F1:8E:FD:38:D8:79:47:00:92:55:D8:79:4E:D1:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE084326D73211EFB9A62497762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.168.0/21
Signature Algorithm: sha256WithRSAEncryption
43:60:1d:c7:46:33:76:0c:10:ba:79:0b:52:b5:5f:c9:c4:f4:
b3:c2:eb:c6:6e:a0:62:1b:4e:29:bf:af:08:81:66:4b:f0:c9:
6f:20:3e:f0:2e:a7:a4:d4:75:a8:37:e6:a3:44:ec:99:5d:4e:
e2:7e:0f:64:0f:0b:56:73:ff:05:b8:73:6d:1c:18:04:fd:21:
82:75:1a:a0:0e:af:64:bf:c3:53:41:e7:06:a8:9a:15:2e:2f:
17:9d:a1:6a:3f:15:d3:a5:b8:54:f2:c0:8b:9b:0c:ed:bd:56:
d9:82:4f:ad:2d:5f:69:90:57:12:f9:21:fa:1d:66:5d:c6:a2:
b6:d6:43:8c:be:90:f7:c0:9d:9f:64:7b:85:24:ce:26:12:bc:
4e:5e:00:d3:c5:86:f2:23:e8:3b:57:f5:97:aa:ab:dd:7b:cc:
11:d8:44:d6:52:c7:61:7a:0b:5b:05:9d:55:47:93:8f:d6:05:
5a:84:89:fa:e0:92:0b:e1:73:40:29:65:96:61:fd:40:71:98:
1e:1d:fc:cd:e6:6c:65:84:c3:2b:e9:27:94:15:ea:08:8b:df:
1f:34:cd:db:53:2f:04:3a:b5:fa:27:dc:4c:ab:d9:69:ab:53:
72:e3:b3:49:f2:44:be:1b:3c:8c:a5:84:de:82:29:7a:c7:68:
16:5a:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:52 2025 by rpki-client