Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5A4C32CAD911EF8A8EE47B762E951A.roa
File: EB5A4C32CAD911EF8A8EE47B762E951A.roa (raw, json)
Hash identifier: bfWfxx4AgaTDQoZ2DcpFIiqnwI3TiVytevoVL04f5GY=
Subject key identifier: 73:A0:BB:BC:2D:F8:36:93:77:F7:14:DC:3E:C4:0D:D1:76:08:13:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013545
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5A4C32CAD911EF8A8EE47B762E951A.roa
Signing time: Sat 04 Jan 2025 20:24:38 +0000
ROA not before: Sun 05 Jan 2025 20:24:34 +0000
ROA not after: Sat 08 Feb 2025 20:24:34 +0000
asID: 203020
IP address blocks: 154.217.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79173 (0x13545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:24:34 2025 GMT
Not After : Feb 8 20:24:34 2025 GMT
Subject: CN=67799906-a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:29:40:92:a2:8d:69:ea:9c:d2:01:38:b6:
fe:d4:e6:49:28:36:44:01:7f:b8:61:02:83:b2:cc:
03:85:5b:f2:47:27:ce:a3:40:41:ff:19:1f:99:97:
7a:9a:0d:5d:ea:b5:22:1a:a4:a5:1a:b9:30:e2:f1:
bd:bf:df:30:c3:b5:87:fe:55:e5:9d:4a:db:77:50:
8d:cd:c5:1e:f8:5b:13:97:a1:5b:51:67:cd:f7:26:
c7:06:50:0e:c7:51:0f:e2:a9:51:34:51:dc:5d:c4:
b3:dd:b6:aa:f2:7d:4a:a0:72:af:05:29:6b:b6:c8:
0a:61:c8:2d:a6:a1:c5:ce:06:12:8e:0d:0e:d9:10:
d6:b7:8e:59:78:f4:cb:2f:6b:e4:0e:73:1b:1e:0c:
e9:ba:bd:f7:03:f9:96:4d:ac:a7:8b:89:a7:a4:18:
05:aa:ca:ec:3b:43:e4:de:87:50:1f:09:82:16:79:
2a:a4:7e:02:e7:c4:ba:be:b2:8b:c2:ba:e6:9f:24:
17:fd:b1:1d:0a:e8:72:7f:d2:0b:d0:a2:8c:c2:5f:
f2:33:38:c6:d0:45:3b:f6:77:23:62:5b:28:b4:6e:
d9:b3:db:3c:5e:84:11:38:73:dd:7f:2e:87:74:38:
0a:10:e0:b0:64:97:5b:90:f8:8d:cf:4b:5b:0f:58:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A0:BB:BC:2D:F8:36:93:77:F7:14:DC:3E:C4:0D:D1:76:08:13:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB5A4C32CAD911EF8A8EE47B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.140.0/22
Signature Algorithm: sha256WithRSAEncryption
86:30:46:a3:1f:ef:97:9b:59:a2:27:80:5b:58:2d:25:50:89:
95:80:df:62:b4:a0:37:b3:29:5d:6d:35:c7:22:29:11:bd:03:
31:b6:c3:80:07:f0:85:84:cb:93:f5:b1:f5:16:7f:84:d3:20:
d2:00:76:87:5c:d2:f3:4b:83:22:5a:1d:a1:72:07:94:bc:db:
ea:27:07:4d:2f:42:ed:49:ad:c0:c2:40:39:6e:5f:8c:17:68:
0d:d4:c5:52:6c:50:22:0d:b6:fa:5d:88:d3:c9:1b:f6:02:83:
e4:b8:54:9c:78:0e:52:bf:67:30:9b:aa:e9:d7:89:b7:80:b4:
b1:d5:ea:7f:ac:80:d5:f0:73:59:e6:80:42:3c:fa:b4:5a:f6:
d2:0f:d5:65:08:9c:9f:90:1a:f5:0b:30:05:95:4f:6f:4c:91:
5e:c5:e2:a8:72:74:83:81:ba:ab:8e:db:f2:98:b7:5b:d2:06:
22:1c:17:e7:72:4f:b0:64:b0:c7:93:96:c7:91:ff:33:c3:b7:
bb:39:87:24:17:f2:de:11:10:ab:26:25:a5:0f:75:b7:2d:f1:
33:d1:03:02:76:b5:50:3e:79:da:dc:b4:d7:76:a3:79:f8:1b:
94:49:e1:f6:48:94:c8:51:df:a3:6a:8e:52:8b:09:aa:e3:e6:
df:5e:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:40 2025 by rpki-client