Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35AB07AC9C711EFBC6455BE762E951A.roa
File: E35AB07AC9C711EFBC6455BE762E951A.roa (raw, json)
Hash identifier: JWOpJw/BsRxJ6lrg+1vI0IeGCsMRxyNqYLYfYGKWUP0=
Subject key identifier: BE:42:D4:36:5B:F5:FF:EC:6D:58:54:F8:F5:37:97:AE:04:01:EA:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35AB07AC9C711EFBC6455BE762E951A.roa
Signing time: Fri 03 Jan 2025 11:43:02 +0000
ROA not before: Fri 03 Jan 2025 11:42:59 +0000
ROA not after: Tue 04 Feb 2025 11:42:59 +0000
asID: 203020
IP address blocks: 154.207.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79026 (0x134b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:42:59 2025 GMT
Not After : Feb 4 11:42:59 2025 GMT
Subject: CN=6777cd46-9ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:ed:9c:58:89:da:96:6f:50:22:82:98:c7:
1b:00:a7:ea:ce:e1:22:97:b1:84:ea:e6:1c:73:cd:
37:5d:8e:2a:dc:40:df:9b:98:9f:ba:8c:fe:25:a7:
0e:6d:8c:18:87:ae:c6:03:b3:01:26:bb:9f:26:25:
c7:1c:97:f2:1d:69:af:61:9e:96:23:7b:b2:e3:e3:
b4:e3:65:18:5b:36:e7:52:9f:83:06:a1:46:c3:04:
38:6c:2f:51:c7:3d:43:90:c9:ec:aa:9c:33:0a:96:
69:b6:11:f6:74:60:39:e9:27:6a:25:b2:bc:22:c9:
98:92:89:3b:73:bc:54:be:b4:63:76:41:fc:f2:4c:
26:f9:c9:19:f9:cb:7c:c6:94:e6:08:fe:f1:ce:a4:
9c:07:63:3b:ec:30:dc:af:63:a4:81:91:ba:1a:d8:
3e:49:e7:10:8c:f2:82:c1:98:01:7c:07:a1:b6:3b:
50:de:00:d0:2c:bf:0f:8e:9b:78:ee:b7:44:ed:cd:
fa:ac:a6:d8:f8:92:d6:f6:eb:8d:9b:28:36:3c:97:
e7:25:5d:50:70:b8:47:a8:7b:79:29:25:1a:ca:d5:
e5:f8:b0:4b:a4:90:f1:3d:55:ab:ec:96:0e:0e:5b:
09:d3:8f:1d:cb:34:18:bb:fd:e7:7f:7d:fd:66:29:
3b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:D4:36:5B:F5:FF:EC:6D:58:54:F8:F5:37:97:AE:04:01:EA:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35AB07AC9C711EFBC6455BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.228.0/22
Signature Algorithm: sha256WithRSAEncryption
27:41:f9:fb:48:a3:89:63:ab:26:54:6a:fd:17:4e:d3:31:26:
9d:93:50:f8:d7:b2:0e:7b:30:a6:98:ea:ab:df:1f:ca:32:24:
74:1c:8f:f3:b4:af:44:0e:11:16:f8:fb:d4:c1:40:fc:6b:c8:
22:63:db:1a:ea:4a:53:13:59:4b:fc:15:e0:55:7f:8a:2f:0f:
60:36:e4:e1:94:a5:f7:46:87:7b:9d:a4:84:1b:63:15:ad:bf:
59:d3:29:8a:fc:cb:fb:3b:f2:0c:95:8a:ad:f6:b0:49:86:2a:
c8:31:5c:31:2f:25:dc:86:3a:1b:38:51:d9:1e:74:d7:a2:d1:
86:f0:f3:67:41:d3:5a:2b:8b:34:32:ed:56:de:72:94:14:19:
a4:76:29:f6:bc:4e:30:66:d6:b0:a5:91:03:1a:97:36:5c:57:
c1:c1:cd:a2:e3:2f:ad:d7:5a:bb:8d:19:27:4d:35:82:93:b9:
ab:a6:e9:14:1b:96:22:5d:58:9b:ba:db:5b:bb:7e:ff:f2:05:
89:51:31:12:23:fb:de:0c:a0:98:96:64:85:fe:bb:91:c4:0c:
df:52:a0:b9:69:14:54:3a:f7:d8:35:9a:0b:e6:6e:b2:ca:39:
6f:9b:61:1e:be:bf:a7:69:ee:a2:0e:4a:97:ab:9d:7d:75:e3:
83:e9:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:38:14 2025 by rpki-client