Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4663466C9C811EF8ABA8546762E951A.roa
File: E4663466C9C811EF8ABA8546762E951A.roa (raw, json)
Hash identifier: CcB4RmQeM36W8NtwiT6BF2WA9zNOCTnzRVcE4AYXrnI=
Subject key identifier: 83:2A:D3:66:AC:28:C4:C5:88:4E:46:EB:CF:6D:83:AC:A8:42:F2:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4663466C9C811EF8ABA8546762E951A.roa
Signing time: Fri 03 Jan 2025 11:50:13 +0000
ROA not before: Fri 03 Jan 2025 11:50:10 +0000
ROA not after: Tue 04 Feb 2025 11:50:10 +0000
asID: 203020
IP address blocks: 154.205.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79034 (0x134ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:50:10 2025 GMT
Not After : Feb 4 11:50:10 2025 GMT
Subject: CN=6777cef5-87c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:18:f4:e0:b4:0b:ff:1b:9f:84:1f:32:de:
d2:9a:71:b5:82:4a:77:4a:89:8c:f0:d3:22:bd:a4:
8f:c0:e1:a2:18:0e:3e:0d:5a:3e:9a:fd:08:86:62:
dc:fa:aa:2b:19:33:d8:2b:3f:04:68:e7:35:a7:fa:
c6:cc:e2:e5:46:70:bd:51:67:e1:c2:50:70:60:a3:
f5:44:a1:54:c5:2b:cf:45:73:19:6a:a5:a0:a1:35:
6b:19:22:74:a0:10:34:9d:e7:67:a6:d6:c4:1f:8d:
53:94:4e:7e:d1:dc:c3:8b:c1:70:b2:1d:6e:77:f6:
8c:2b:22:41:1a:ac:c9:76:10:22:0a:cf:3c:c9:2e:
27:d1:3d:38:13:81:b9:9d:d2:cb:89:af:d0:d0:34:
7b:3f:64:b1:26:c6:64:d1:32:3c:c5:cb:6d:4f:dd:
a1:0d:89:15:73:50:08:23:76:2b:d0:e6:d5:42:b6:
46:28:a7:0f:ab:a8:b6:96:0c:b4:d9:4d:fd:e6:c7:
42:a3:e5:f2:e9:61:dd:e3:a5:99:07:8e:1a:af:59:
78:76:32:20:9c:dc:7d:14:45:a3:05:7a:62:08:66:
e0:37:a9:5a:3b:04:63:22:b8:d7:33:6c:24:df:fd:
8f:de:20:e8:9c:b5:ba:5c:17:46:09:c1:aa:83:d7:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2A:D3:66:AC:28:C4:C5:88:4E:46:EB:CF:6D:83:AC:A8:42:F2:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4663466C9C811EF8ABA8546762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f4:9b:5a:af:ef:35:84:42:7b:27:1c:a5:3d:19:f6:02:ec:
90:39:2a:5b:26:08:1b:b6:b4:e6:33:bd:7b:ba:5a:8f:a4:04:
4a:e5:7b:83:83:75:4f:67:ba:5e:55:bb:b3:9c:1e:a0:06:63:
ba:4d:17:92:e3:9b:e4:5c:2f:ca:fe:80:f4:41:45:6b:d4:61:
5b:2f:d5:34:d7:3f:b8:c4:cf:fa:86:8d:62:15:e1:76:35:51:
68:c4:ab:a6:20:1b:c0:e0:9c:9d:39:1c:c4:ed:17:16:d6:71:
d0:09:3e:0f:4e:c5:12:48:be:c1:ce:09:7c:9a:85:c2:a5:1c:
9d:52:78:c3:4d:23:f0:10:a6:5b:38:f9:8f:00:3a:9d:f2:5a:
f5:9d:aa:fc:24:93:91:7e:61:27:48:2e:d0:c7:08:be:b6:79:
5c:99:0d:f0:02:6b:bc:2b:77:54:06:08:27:89:88:6a:f0:ae:
8b:78:e7:f5:b9:63:22:c4:6e:07:03:3a:61:60:f4:9d:bb:a0:
05:31:97:46:a8:b2:b4:09:0a:f8:21:b4:14:ae:4f:74:f9:65:
09:f7:c9:bf:f5:23:88:c8:1b:c6:cf:01:2d:92:78:b1:4d:6c:
27:74:31:37:14:5b:8c:36:de:11:d1:9d:ce:66:b5:e9:62:ee:
89:10:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:42 2025 by rpki-client