Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6322502DCA111EFBDE3337E762E951A.roa
File: E6322502DCA111EFBDE3337E762E951A.roa (raw, json)
Hash identifier: UmaALcciG/yJd4c3Jbx8hFCi6swLospdbZtOkLfBzK8=
Subject key identifier: F4:4B:AF:B7:7E:03:9E:66:EF:55:71:D5:32:14:A5:77:1A:BD:91:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6322502DCA111EFBDE3337E762E951A.roa
Signing time: Mon 27 Jan 2025 11:28:59 +0000
ROA not before: Mon 27 Jan 2025 11:28:37 +0000
ROA not after: Sat 08 Feb 2025 11:28:37 +0000
asID: 7018
IP address blocks: 154.195.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84949 (0x14bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:28:37 2025 GMT
Not After : Feb 8 11:28:37 2025 GMT
Subject: CN=67976dfb-9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:af:ae:43:30:e9:36:c3:a6:a4:de:7f:4a:
4f:43:ad:9b:71:e0:5a:52:35:ef:c2:4e:84:60:eb:
8e:c7:1a:f2:64:b0:fc:3c:7f:c6:d6:5c:80:2a:1e:
28:62:cb:5e:cc:07:a6:f6:88:e2:23:e4:30:b5:03:
8f:85:49:2a:75:03:2b:be:8a:26:41:b3:62:4e:41:
2c:da:5b:08:ce:01:7e:87:aa:90:d2:74:a6:db:ca:
15:c6:be:c9:1b:ba:3e:16:b9:5d:d3:31:76:2d:27:
11:bf:de:f1:86:7f:32:c4:93:35:d6:19:8e:5b:c7:
a3:f7:b8:75:ed:0a:67:9d:43:f1:ba:f6:b0:c1:95:
a3:69:a6:5e:3b:62:c3:53:e8:51:30:71:f1:e6:37:
08:4c:48:c1:6e:b9:42:4f:06:a7:3f:50:ad:d8:76:
07:50:f0:65:31:28:51:35:60:f1:f2:cc:5a:e3:7d:
35:00:c7:63:99:96:5b:a5:2c:43:5e:11:b8:95:83:
2d:f9:de:a7:49:6a:1b:c5:20:7c:e3:fc:79:95:bf:
bf:83:6c:20:32:ff:1b:22:ca:b4:aa:c7:2d:72:7b:
8e:99:69:4f:08:02:e3:6d:22:18:fa:da:a9:7d:76:
34:2b:1c:67:5e:48:e9:a8:c5:19:5a:88:5d:33:95:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:AF:B7:7E:03:9E:66:EF:55:71:D5:32:14:A5:77:1A:BD:91:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6322502DCA111EFBDE3337E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:05:34:a9:36:39:4b:6a:6a:91:d6:74:fd:79:65:a2:69:bf:
db:ac:dd:e7:23:fc:f1:74:7e:ae:10:8f:08:ee:94:fa:8b:b7:
ca:28:b8:f9:3f:4d:b4:0a:d0:22:46:41:30:97:38:50:c8:ff:
cf:ff:c9:50:90:57:6c:b3:7d:52:54:44:c2:7a:f1:34:e4:dd:
f7:eb:3f:4b:a5:73:f4:f9:94:69:10:7d:7a:cf:9f:2d:52:ee:
06:fd:60:7c:46:69:7e:7e:53:09:ef:d4:26:5e:7b:c0:88:aa:
7d:7c:f2:f9:48:af:ff:62:04:3d:e1:8f:92:0a:72:bc:d2:8d:
6a:f2:31:6d:0f:73:de:2b:5c:c6:2f:8d:c7:e3:ae:1e:3e:76:
2b:1b:cc:ca:ec:09:f7:4d:93:47:a8:8b:64:76:7f:d4:a7:49:
15:6f:44:f1:ac:30:5c:79:97:a7:7e:94:3f:a9:42:8e:66:c2:
c5:d4:c9:96:eb:b1:80:23:6a:20:6d:d7:4f:79:c6:3c:c1:83:
fc:32:bd:9d:70:4c:6b:b7:c3:bb:5a:9c:87:df:01:a1:e9:26:
db:71:bd:e3:38:4d:82:07:f3:03:6e:93:d7:e1:c6:5c:52:2d:
e2:89:cc:79:28:0f:a7:2c:c0:a7:7f:6d:ea:af:c8:b1:36:42:
90:9c:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:15:18 2025 by rpki-client