Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3681914D56F11EF9D21A295762E951A.roa
File: E3681914D56F11EF9D21A295762E951A.roa (raw, json)
Hash identifier: mQswLf7bA1tB//NcgkrvZ2SrI+00bVeBtyPDdf28NM0=
Subject key identifier: 0E:54:C8:23:70:68:45:7A:53:E0:FD:3A:EB:86:4F:BB:57:13:A3:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3681914D56F11EF9D21A295762E951A.roa
Signing time: Sat 18 Jan 2025 07:43:20 +0000
ROA not before: Sat 18 Jan 2025 07:43:17 +0000
ROA not after: Sat 22 Feb 2025 07:43:17 +0000
asID: 55020
IP address blocks: 154.217.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81314 (0x13da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:43:17 2025 GMT
Not After : Feb 22 07:43:17 2025 GMT
Subject: CN=678b5b98-1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:ae:90:9b:c7:a3:6b:2e:99:31:8f:da:5c:
25:db:ac:57:f6:d3:1c:b5:5b:d7:75:69:b4:df:66:
c5:cf:97:6b:0f:fb:52:bf:74:40:dd:99:7e:c7:fb:
3a:84:3e:31:df:ec:63:4e:42:b0:cf:89:fe:f2:59:
2e:60:e5:77:8d:32:fc:6d:01:76:ef:3c:3d:a2:41:
d6:15:99:d0:ed:ca:f1:df:ef:57:2d:84:29:c9:52:
90:49:cd:ad:7a:46:d6:38:08:16:58:87:19:3b:e8:
89:23:08:85:4e:4c:a6:d2:82:8e:d6:92:3e:2a:40:
19:63:1d:75:2e:29:af:5d:54:fd:1d:3d:d9:8b:85:
ec:db:b8:fa:8a:ce:d3:c9:6a:01:b4:a6:7a:48:dc:
62:20:a1:2d:5d:55:c9:08:7f:bc:5a:27:b5:56:41:
d3:f6:89:80:17:90:f9:46:7d:c7:a6:23:90:50:26:
a3:e7:d8:9a:90:f0:ba:e1:73:87:4a:db:79:b3:96:
e8:4e:d1:4f:24:da:32:df:5c:74:10:14:77:38:7e:
d9:31:89:fb:f6:ed:35:02:e6:19:50:04:9a:4a:43:
9b:22:3c:13:6e:de:fa:82:33:91:e3:f8:0e:63:b6:
0e:8f:eb:47:fa:d6:65:25:20:69:b6:c3:04:e8:28:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:C8:23:70:68:45:7A:53:E0:FD:3A:EB:86:4F:BB:57:13:A3:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3681914D56F11EF9D21A295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:08:f1:10:6d:84:bd:8f:12:ab:89:97:dc:6f:10:8c:0a:71:
91:90:d2:38:24:01:49:47:1f:39:30:b0:6c:d5:d1:b8:ed:9e:
15:93:29:09:9b:dd:37:67:50:06:d0:f1:ed:56:13:7a:a5:d1:
88:89:ba:a0:ad:c5:26:95:4d:3a:8e:b1:4a:08:b8:24:b9:82:
e1:f8:92:ce:63:ab:c0:7a:f5:82:44:2b:d3:76:2c:10:20:ea:
8f:d2:c8:d0:fb:93:f9:e4:c6:cf:19:ba:76:a8:4b:22:73:eb:
79:bd:f1:fd:11:d8:1b:00:fe:09:80:9d:e5:51:13:b9:e2:74:
c6:4f:cd:6a:ca:be:46:a1:c9:25:a3:30:f0:ec:85:72:a2:fe:
35:b5:20:a0:33:cc:0a:40:e6:46:f0:1f:dc:8e:07:0c:45:d8:
1c:0b:0f:03:f2:8e:72:ee:71:33:bb:19:31:51:4a:90:88:67:
30:83:d1:40:73:fa:42:a9:81:58:6b:ec:1e:1f:81:c8:e4:e8:
f2:c4:ff:f3:26:08:5f:02:25:97:e8:db:f5:7e:00:ff:93:a7:
09:c6:54:63:09:26:49:0e:04:30:f9:09:3e:10:f9:11:8c:dd:
05:68:4a:e0:fb:88:86:37:e3:b7:69:55:1e:1c:09:e8:60:68:
0a:71:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:38 2025 by rpki-client