Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF34F868D8A211EF88BF1687762E951A.roa
File: DF34F868D8A211EF88BF1687762E951A.roa (raw, json)
Hash identifier: zIC4BuA085CR3bvqAAbJtKRzSptVVWJm7W+PhSvhBfc=
Subject key identifier: 9A:42:EC:25:60:27:AC:7E:8A:34:B9:F0:99:7E:A7:F1:06:13:AD:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF34F868D8A211EF88BF1687762E951A.roa
Signing time: Wed 22 Jan 2025 09:25:51 +0000
ROA not before: Wed 22 Jan 2025 09:25:47 +0000
ROA not after: Tue 04 Feb 2025 09:25:47 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81536 (0x13e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:25:47 2025 GMT
Not After : Feb 4 09:25:47 2025 GMT
Subject: CN=6790b99f-1db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:4c:59:e3:1f:d6:6b:70:e0:32:67:d9:0b:
28:40:69:78:60:58:4e:c8:34:2e:7b:7e:c1:10:a5:
82:de:2d:88:b7:51:0f:2c:4f:48:ef:74:ce:a1:25:
ff:a3:f2:9a:d5:62:c0:7b:36:a5:3b:a5:4b:fb:90:
c0:20:99:e1:2c:23:84:50:48:52:92:88:ef:0a:7a:
24:83:e0:bc:19:ae:7a:04:dc:c7:b7:0a:6b:c9:81:
c8:7b:21:58:8b:7b:7b:dd:dc:ab:75:34:d3:a8:bd:
29:02:ef:44:ca:a9:01:5f:5b:43:aa:77:39:a1:2f:
6b:23:09:37:44:00:3e:9b:a0:c9:e5:68:24:a4:3f:
1a:97:9a:c2:9a:f9:a1:ee:2e:20:7e:d8:be:17:4f:
2c:6c:95:6a:96:09:f7:fd:4c:93:af:3f:8d:b4:ed:
e6:b8:67:49:a1:b6:e6:b4:95:39:5e:8f:23:fd:28:
f0:2b:6f:eb:66:66:0f:10:74:d8:c8:ce:46:a5:2c:
7a:1d:e1:6b:fd:7b:b3:dd:5c:54:40:b6:d0:3a:30:
91:7b:fb:88:75:1a:75:01:bc:c9:86:29:48:6d:76:
df:07:8d:f3:e0:6a:2c:d2:da:77:c3:66:a2:07:57:
c4:21:5f:b5:39:83:b8:52:d4:8e:7c:a1:cc:13:3a:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:EC:25:60:27:AC:7E:8A:34:B9:F0:99:7E:A7:F1:06:13:AD:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF34F868D8A211EF88BF1687762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:f6:4d:25:3d:b0:2c:e7:f5:e7:85:37:ce:e5:83:3e:ad:97:
63:e3:88:03:59:ac:7f:66:55:26:da:e6:86:f1:d3:81:98:9c:
92:85:39:ae:8f:b5:08:71:6c:ea:e8:9c:f2:7e:71:fc:16:0a:
38:74:31:ad:86:1b:37:36:61:05:be:91:41:8b:0b:6e:9e:07:
5b:15:a1:20:d6:a5:a6:03:74:a6:53:9f:2c:93:8b:a0:df:a3:
57:a0:1c:65:83:26:5a:c8:81:50:b5:6e:62:86:13:6b:d5:a9:
8c:3f:fc:63:ca:4b:9c:4a:67:65:b9:4c:df:ae:2a:af:bf:a3:
2b:a4:ec:32:41:ae:77:37:8c:ee:72:53:0e:f1:ba:ed:8c:de:
51:a3:ea:78:b2:51:c0:d0:05:ae:b4:e0:33:c5:5e:20:5a:26:
d3:77:8c:51:dd:ea:ed:85:02:ed:57:82:ab:f9:c3:53:63:fa:
7e:e9:69:5b:3b:99:a9:2e:d4:54:36:15:ec:87:99:cf:01:5d:
7d:93:84:93:ae:d9:5d:c8:a3:2e:52:48:3a:eb:8d:d8:a0:35:
4a:96:21:7f:e0:29:e2:d7:38:8d:19:d7:2a:fc:43:95:cd:74:
5f:3f:53:f7:e8:3b:47:18:0e:0c:ae:04:f6:29:75:3b:56:56:
ab:10:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:05 2025 by rpki-client