Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55CE9EAD8E711EFB33A6952762E951A.roa
File: E55CE9EAD8E711EFB33A6952762E951A.roa (raw, json)
Hash identifier: FjmVEwTAgelB+Cc78ABsTJLiWJbUDl/LY0YeqouaYus=
Subject key identifier: 1E:C5:0A:D5:14:07:2E:50:67:C6:A0:07:5E:8A:3F:95:BE:B6:8C:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01401A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55CE9EAD8E711EFB33A6952762E951A.roa
Signing time: Wed 22 Jan 2025 17:39:57 +0000
ROA not before: Wed 22 Jan 2025 17:39:53 +0000
ROA not after: Sat 15 Mar 2025 17:39:53 +0000
asID: 138915
IP address blocks: 154.206.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81946 (0x1401a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:39:53 2025 GMT
Not After : Mar 15 17:39:53 2025 GMT
Subject: CN=67912d6d-3081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:ae:24:ab:32:18:b8:1e:9a:00:ed:29:ef:
90:23:53:94:2b:db:88:d4:f2:47:4b:b2:89:2b:3c:
a9:58:1e:8a:9f:63:32:3d:8f:c7:f2:10:83:32:2a:
47:fd:ef:ce:01:d7:f7:99:f2:59:a2:c5:63:63:92:
9d:dc:06:dc:fd:34:e7:3d:73:84:ac:c4:cc:90:25:
07:8d:2b:a5:52:ed:6d:79:6d:ab:47:ae:49:34:e7:
06:5f:ad:4f:e4:21:1f:73:51:84:93:6a:91:04:92:
fd:61:45:5f:7f:7e:6e:af:b6:62:70:f2:c7:d5:ab:
06:46:50:2d:4c:27:6b:e7:c9:ae:d4:2f:eb:e2:73:
f4:fe:64:0a:96:39:89:22:b4:4e:57:10:56:f9:23:
55:dd:d1:3f:a4:24:72:9b:c9:65:1b:a3:8f:5c:5e:
59:fd:88:53:e9:e3:93:4e:d5:77:10:0d:a0:c9:26:
fc:75:5f:86:4d:46:e4:b5:9e:04:a8:74:05:e4:13:
78:5a:54:39:f5:90:20:9f:87:31:bd:19:ed:80:54:
91:da:7b:16:9e:43:19:23:c7:8f:cb:62:97:f3:dc:
a9:17:47:b1:be:3e:d1:e0:26:64:c7:27:e0:ab:8f:
08:fe:aa:18:3d:37:9b:2a:73:b3:d8:89:16:09:eb:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:0A:D5:14:07:2E:50:67:C6:A0:07:5E:8A:3F:95:BE:B6:8C:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E55CE9EAD8E711EFB33A6952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.100.0/23
Signature Algorithm: sha256WithRSAEncryption
62:c2:a1:1c:77:58:1c:3d:3f:a5:8b:71:5f:65:c6:65:03:f8:
ac:a6:de:c4:14:0f:83:2f:4a:8a:c7:b9:e3:30:f9:c0:98:74:
90:e6:91:16:82:a7:10:8e:85:3a:a2:54:a2:86:fb:ef:69:31:
d6:6d:a4:7f:35:d3:e3:5d:ad:25:18:f3:5f:b7:12:96:dd:5c:
98:c4:3d:fd:5e:30:0f:7e:1b:96:2c:28:f6:19:a4:a7:47:d3:
ea:4e:3a:34:96:8b:4c:50:2d:e7:15:41:98:74:d2:46:fe:05:
39:5a:41:af:ae:30:1c:b8:f7:d1:ba:3b:13:be:df:73:2c:1e:
93:96:63:f5:53:5e:56:02:67:e9:8d:1a:16:a8:71:7e:f6:2d:
43:7c:32:d7:8b:b9:c4:a0:d4:08:17:b3:81:7a:16:9c:18:45:
cb:67:aa:36:82:ce:6b:3f:d7:8f:a4:e9:6d:b5:4a:42:90:f5:
f1:ef:1b:cb:75:e6:de:70:21:2d:98:15:c1:27:4a:93:ed:05:
8a:41:17:98:44:06:b3:be:a9:32:96:55:61:72:70:ab:74:8a:
6c:42:67:89:94:fd:d1:24:b4:fd:69:ae:46:4a:a7:7b:82:aa:
5f:5a:be:80:d2:8a:9a:89:80:bd:0e:d0:57:82:b6:b3:70:dd:
1d:f6:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:04 2025 by rpki-client