Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07FB6F8D8A311EF88926F8F762E951A.roa
File: E07FB6F8D8A311EF88926F8F762E951A.roa (raw, json)
Hash identifier: DYpCrICq7MdGZFMX4MxdlmW8Ks+KZvWrLwwww40rKcc=
Subject key identifier: 5D:1E:45:BD:04:F5:7A:D5:86:C6:59:0E:FD:B9:ED:4F:70:8D:8E:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07FB6F8D8A311EF88926F8F762E951A.roa
Signing time: Wed 22 Jan 2025 09:33:03 +0000
ROA not before: Wed 22 Jan 2025 09:32:59 +0000
ROA not after: Tue 04 Feb 2025 09:32:59 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81544 (0x13e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:32:59 2025 GMT
Not After : Feb 4 09:32:59 2025 GMT
Subject: CN=6790bb4f-2000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:db:cc:38:e3:dc:6c:60:ed:ab:20:be:c3:
05:fb:32:bd:9b:9d:5d:8f:6e:71:9c:2f:16:60:03:
c2:30:25:cc:35:c7:ed:c3:2e:58:7e:b7:97:3a:3e:
c6:77:60:3d:a1:23:8b:bc:b9:4d:ae:19:09:35:93:
a7:2d:f9:20:19:4e:e3:70:96:73:d6:b9:fc:75:6a:
18:3d:f7:b2:af:99:07:dd:6c:21:38:0d:e6:53:2b:
32:18:ee:3a:f3:15:fb:96:e1:32:f9:9a:30:58:00:
17:00:61:0e:2b:36:b0:80:2a:69:c1:58:55:a7:ac:
63:47:52:f5:bd:a6:e4:00:ac:1e:b9:5e:a9:50:07:
14:97:cc:b6:03:fb:2d:eb:e5:fc:d2:8f:1e:ac:08:
a7:24:d0:59:72:9d:ff:10:4f:48:03:10:1f:28:27:
b9:01:c1:4c:05:03:ae:b4:cb:34:6b:0e:5c:f5:9b:
49:7e:6d:e9:b6:85:f3:7b:22:2e:ed:4c:66:20:ad:
73:25:50:77:29:7b:dc:20:4d:48:ca:6b:aa:9b:8d:
db:8d:2e:1e:8d:88:36:02:18:6a:36:32:e2:f7:45:
8e:43:b7:3a:36:67:6a:f1:17:ad:76:85:2c:e6:cc:
7c:c4:ba:72:49:74:96:3c:6d:23:cd:ab:c5:3c:38:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:45:BD:04:F5:7A:D5:86:C6:59:0E:FD:B9:ED:4F:70:8D:8E:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E07FB6F8D8A311EF88926F8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
02:1c:bb:a5:41:e2:e5:59:9d:52:94:4b:0f:bd:d9:d1:bd:9b:
fe:1c:53:70:2d:ba:da:f9:0b:1d:40:2c:1a:f0:ae:41:64:da:
0a:ab:a3:0c:9b:a5:ca:55:7f:fb:62:9b:2c:df:89:94:35:d9:
e9:48:6a:f3:ba:b6:93:1c:eb:21:d0:4f:61:15:f7:a0:0c:f3:
0b:d7:0d:b6:5f:af:b2:68:48:81:ef:86:94:cd:5d:bf:3b:5a:
da:14:1f:3c:23:fb:cc:4c:c2:59:a1:c7:4e:72:c4:d1:7a:b9:
db:7d:12:ac:58:6c:b4:ca:86:62:5f:f2:8c:62:f6:87:d9:65:
34:e4:23:b1:e2:17:26:7c:c2:94:0f:ae:75:bc:9f:a2:4d:08:
0b:08:dc:01:e2:b6:c5:e5:ae:ef:df:fc:90:1d:2b:d0:68:05:
9e:9b:43:19:87:21:ee:7a:28:b5:46:04:db:c6:6a:b9:be:d0:
d3:07:90:12:38:bc:d8:27:a4:e2:86:7b:cc:21:da:89:d3:eb:
63:c0:c6:8a:47:5f:89:cb:b6:85:ff:94:03:2a:12:ef:77:e0:
a4:da:b3:d5:08:d3:76:95:2d:c8:f4:3e:7f:11:5a:86:88:75:
78:aa:fd:fa:1b:6e:f2:07:11:00:c9:ec:1d:6f:70:de:f2:0f:
72:99:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:45 2025 by rpki-client