Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E266E2FCD0BA11EFB14E715D762E951A.roa
File: E266E2FCD0BA11EFB14E715D762E951A.roa (raw, json)
Hash identifier: EeXh4rbjWWvkgAp6HozyCSfu369BdLtU70pqXyH3MxE=
Subject key identifier: B1:A8:6C:51:05:F6:20:68:1F:1E:C6:2C:AE:93:77:4F:DD:91:7F:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E266E2FCD0BA11EFB14E715D762E951A.roa
Signing time: Sun 12 Jan 2025 07:57:35 +0000
ROA not before: Sun 12 Jan 2025 07:57:32 +0000
ROA not after: Fri 14 Feb 2025 07:57:32 +0000
asID: 137899
IP address blocks: 154.222.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80550 (0x13aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 07:57:32 2025 GMT
Not After : Feb 14 07:57:32 2025 GMT
Subject: CN=678375ef-5d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:5d:7d:b4:99:db:b8:b0:0d:04:3e:07:5e:
a7:32:5d:a6:b5:30:ee:56:5e:a8:6d:48:24:01:d8:
17:d0:f6:55:be:77:73:ed:6b:3b:87:97:a5:90:9b:
b7:15:7f:a0:33:60:50:78:3e:a1:bb:2b:49:ac:a7:
10:4f:72:1a:99:2d:b8:ec:90:b3:54:10:2e:c4:c2:
88:e3:c0:1e:f0:c5:66:ce:5a:4f:db:b7:8b:d8:2a:
c4:73:55:00:eb:f1:eb:0f:be:56:ab:0b:fa:52:96:
0b:f1:a0:fb:c4:4c:11:75:5a:a8:a7:42:5d:4e:02:
e0:a6:a0:22:2e:53:61:d9:eb:39:9b:73:30:9e:71:
94:7e:c8:9a:f5:f3:93:db:47:55:c1:37:3a:d2:7b:
84:5e:02:9c:0e:41:c7:2c:7b:6d:b6:52:ad:4f:ca:
d4:20:46:ed:27:96:97:c6:bd:58:e7:fa:14:f0:7b:
b6:04:fe:4a:75:e8:53:9a:41:35:d9:e6:4d:28:ca:
04:84:ec:26:cb:0f:a5:0b:be:1f:09:2f:f5:f5:17:
c2:82:ae:a6:b7:34:dd:01:91:49:be:00:05:b4:3a:
c3:ce:c6:85:9d:e5:1a:0a:7f:c3:59:a9:9b:ed:f2:
ce:4b:ef:ea:2f:6d:a3:bc:b4:c7:10:47:9e:0a:dd:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:6C:51:05:F6:20:68:1F:1E:C6:2C:AE:93:77:4F:DD:91:7F:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E266E2FCD0BA11EFB14E715D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:27:a7:92:4e:eb:b9:96:28:fb:5b:56:b9:5f:ce:89:11:de:
08:18:f1:d7:d9:16:9d:82:41:f8:05:e1:ef:9d:c6:a5:39:ca:
9a:8c:56:07:91:de:ff:a2:14:1f:09:16:ea:ac:b1:c9:f4:c2:
52:c4:69:c6:0e:ff:22:fd:d2:02:12:6f:7e:4c:93:fe:6e:4e:
60:64:b9:d7:0d:e5:b1:eb:b9:01:d8:91:94:0b:e3:35:7f:8b:
f4:33:47:4f:87:da:d7:32:82:d3:00:d2:be:5d:18:c9:22:bc:
45:74:9b:b8:b9:01:2c:d4:5b:99:2a:e7:db:65:d8:47:db:95:
ac:f6:ad:88:6e:98:ff:d8:87:d4:f4:ad:40:7f:23:e9:b7:48:
1f:a2:88:be:78:01:bd:bd:3a:e6:10:01:d2:1b:b7:06:5a:0b:
54:a7:1d:59:43:ff:4b:7d:c8:b0:e8:09:bf:04:11:a7:a0:11:
5a:cb:5d:5e:f6:bb:07:03:db:36:c8:51:68:27:7b:d8:32:0c:
ea:c3:44:88:e0:ca:38:2c:fc:0a:0c:19:33:a3:96:8e:08:af:
7d:90:b2:c9:65:2e:c8:c5:e2:a3:02:57:c9:3c:e7:d3:bc:a2:
0a:a1:65:ad:8c:64:9c:ae:64:f1:32:9e:2e:29:ea:01:95:6a:
00:ec:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:33 2025 by rpki-client