Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F66DDEC6CB11EFB885B7B2762E951A.roa
File: E3F66DDEC6CB11EFB885B7B2762E951A.roa (raw, json)
Hash identifier: crxqy2W2tZ7GIQPg6nGsQv4AseV/+EfjtK7GbSNQEq8=
Subject key identifier: B4:87:4A:B1:F6:5F:53:24:DE:79:67:16:D1:BA:AE:DA:59:8E:3D:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F66DDEC6CB11EFB885B7B2762E951A.roa
Signing time: Mon 30 Dec 2024 16:34:08 +0000
ROA not before: Mon 30 Dec 2024 16:34:04 +0000
ROA not after: Sun 02 Feb 2025 16:34:04 +0000
asID: 398823
IP address blocks: 154.209.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78048 (0x130e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:34:04 2024 GMT
Not After : Feb 2 16:34:04 2025 GMT
Subject: CN=6772cb80-4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:8f:7e:f0:f9:ad:11:46:95:75:fe:74:05:
ae:30:df:ed:7d:76:f5:72:0c:7f:06:d7:00:a0:d7:
8c:0f:b9:1c:cc:b1:d9:94:5e:47:5f:8c:de:fb:b0:
2f:b6:04:00:05:45:f3:ad:9b:63:6a:4c:15:c1:6e:
41:a7:22:5a:51:75:e7:cc:17:fc:94:37:f1:b4:da:
ba:47:59:91:3f:09:ff:f5:9f:97:57:cd:ce:21:5e:
ec:45:d9:f9:b5:40:13:2c:2a:e4:5f:6f:33:37:89:
68:43:f1:54:48:93:47:8c:de:e5:82:49:49:e7:07:
2b:29:8b:fa:a4:67:09:6a:da:bb:a6:2f:47:63:28:
8d:21:a3:1c:c8:37:c3:b4:ae:59:b2:05:16:32:31:
89:ff:50:5d:fd:94:38:c2:9c:1e:c6:44:cb:1a:ea:
ae:b8:12:3f:36:be:4c:aa:84:31:d2:38:fd:b1:9a:
c2:0b:d7:c7:06:42:6f:47:1a:27:51:35:09:91:85:
e9:f2:dd:f7:8c:8f:0f:bc:d4:3e:2a:2d:e3:be:c2:
94:c9:08:18:3d:4b:aa:1c:3b:08:12:d0:c1:88:54:
f1:c6:6c:d9:36:57:56:c7:09:5a:dc:22:4c:b0:4d:
d0:dc:2c:d6:2e:40:90:57:ae:32:30:af:0c:32:de:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:4A:B1:F6:5F:53:24:DE:79:67:16:D1:BA:AE:DA:59:8E:3D:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F66DDEC6CB11EFB885B7B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
25:55:a8:a6:93:86:70:d1:0a:cb:23:b1:ad:46:d3:6a:17:b9:
8d:d7:cf:40:ba:4f:57:a3:ab:d8:a3:f9:c2:80:27:ab:79:c1:
8a:f4:1e:b1:ec:b6:a0:d3:42:0d:df:6e:69:3e:72:cc:64:eb:
15:aa:8f:7a:b2:06:8d:54:df:70:7b:56:56:7e:7c:43:ca:12:
76:b0:43:88:c7:88:87:05:5f:3b:42:53:94:7c:08:a5:2a:21:
d1:e6:08:f3:b3:0c:f0:42:75:d7:09:fe:d7:92:b7:21:2c:f0:
a1:06:07:3d:8a:fb:11:34:e7:b7:b1:76:9e:15:c2:23:de:76:
26:4b:95:b1:2a:b8:05:01:4f:67:f2:41:c0:44:5b:c7:e2:06:
3d:32:fb:d8:00:33:c2:d0:c1:88:2c:9a:5b:0a:bf:01:26:bd:
d9:80:58:22:ea:a0:2f:89:10:c3:ef:0f:7f:5c:64:74:70:f5:
ec:da:08:6b:74:66:14:23:7e:77:99:07:d2:36:43:d0:19:06:
46:cc:44:2d:d2:fc:c1:50:f4:71:51:ea:6c:51:7a:a5:f5:89:
13:13:de:1a:39:c2:c3:f6:c8:3d:49:ed:a5:33:c6:76:dd:8b:
1c:88:04:52:97:89:6c:3d:6b:97:af:a6:e2:e0:ef:73:6a:4c:
d2:36:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:08 2025 by rpki-client