Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CC3C86CCC511EFBE4F60B9762E951A.roa
File: E7CC3C86CCC511EFBE4F60B9762E951A.roa (raw, json)
Hash identifier: agPr8xu2xRf5J5SVXXsA083POssz4xlcyeC4FqeRixw=
Subject key identifier: EA:AF:A3:C7:F9:4A:FE:7F:CA:82:F2:F5:A6:C0:B1:F5:9A:0F:79:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013643
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CC3C86CCC511EFBE4F60B9762E951A.roa
Signing time: Tue 07 Jan 2025 07:06:24 +0000
ROA not before: Tue 07 Jan 2025 07:06:20 +0000
ROA not after: Wed 12 Feb 2025 07:06:20 +0000
asID: 397630
IP address blocks: 154.84.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79427 (0x13643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:06:20 2025 GMT
Not After : Feb 12 07:06:20 2025 GMT
Subject: CN=677cd270-55f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:93:7b:4a:72:0d:50:b0:ab:2b:f7:17:2a:
87:53:bf:bb:69:b7:db:78:63:54:5a:19:22:06:79:
af:1e:c8:a3:29:64:22:2a:a8:8a:9a:ac:c9:f6:23:
0f:89:bf:b3:60:1e:58:1c:96:da:93:92:65:b3:21:
9f:10:cf:db:7a:af:da:fc:3e:96:8d:65:ec:10:e5:
4d:2b:25:f6:c1:64:b2:8d:ef:dd:8c:4c:4f:87:e4:
55:fb:46:23:e3:9f:dd:ba:7c:8c:93:c4:3a:f8:c5:
38:15:3a:26:d0:ca:b3:1d:17:4e:a5:df:bb:01:4c:
9e:92:ad:34:71:1f:e1:2b:26:e7:c5:12:05:8b:9a:
8b:5a:34:de:75:e3:11:19:9d:88:01:cd:83:05:ed:
54:be:93:60:64:6e:bb:80:3f:9d:45:79:bb:c4:c8:
cf:6d:f1:89:c6:c0:16:d9:5c:50:80:44:36:e0:56:
3c:0d:e1:55:94:af:c2:92:ab:89:02:e2:96:4f:c0:
51:e7:dc:c1:65:dc:ca:fb:f9:75:6d:62:b5:14:bc:
11:5a:ee:7c:6d:84:2e:4b:20:b3:71:53:51:13:cc:
17:df:e5:28:cc:78:e6:5a:bb:18:3f:02:06:bf:8b:
c9:79:ce:d0:b0:94:94:a0:75:c2:d4:bd:83:3a:e8:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:A3:C7:F9:4A:FE:7F:CA:82:F2:F5:A6:C0:B1:F5:9A:0F:79:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CC3C86CCC511EFBE4F60B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.132.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0c:11:3f:40:47:fe:70:a7:30:b3:a3:91:71:c8:51:3d:aa:
a2:b2:5a:51:bb:5e:82:41:81:6b:d6:14:0b:29:a8:ef:ae:a2:
e0:7c:d0:f0:b0:3b:20:26:ec:3d:cc:82:0d:bc:34:ae:54:cf:
22:62:5e:75:d8:f8:3c:a6:54:e9:18:5c:b3:40:b9:89:a8:ca:
86:6a:ea:ed:62:1a:14:e0:d5:52:6b:ec:ee:0a:5e:b6:07:42:
2b:69:0c:07:04:cc:41:5c:f4:8d:e1:26:36:2c:4e:16:66:6b:
16:4f:42:3e:f7:76:de:ff:9e:ec:77:aa:cf:7f:7a:64:25:f5:
f5:08:34:5c:c1:30:18:83:60:69:06:4a:d7:70:d3:01:c1:21:
76:4e:f1:ad:25:71:9d:42:86:04:f2:de:70:a7:22:10:54:69:
26:95:86:32:a5:0e:68:27:08:ec:d3:4f:93:2a:02:41:0c:f9:
d7:37:df:d2:f3:e7:e4:6a:25:27:4b:9b:ec:87:0f:d1:f2:4e:
ed:82:22:3d:4e:16:fb:3a:ec:b8:2e:aa:f7:ab:e9:5c:84:d1:
92:ca:d1:05:9d:1a:2e:91:0e:0e:9d:7b:d9:28:00:9e:cd:03:
c6:40:b7:44:5c:eb:00:d5:1f:7e:66:73:92:8d:7c:8e:51:20:
e8:4e:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:22:35 2025 by rpki-client