Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C734E2DC9C11EFB5F56D5D762E951A.roa
File: F2C734E2DC9C11EFB5F56D5D762E951A.roa (raw, json)
Hash identifier: PybLIeEi/OkaejLtCy+LUodOnotQ3+HBVA6ljseZgHg=
Subject key identifier: B5:47:D7:30:A8:CC:EA:73:A8:A4:50:21:B1:53:D1:28:C3:49:BF:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C734E2DC9C11EFB5F56D5D762E951A.roa
Signing time: Mon 27 Jan 2025 10:53:32 +0000
ROA not before: Mon 27 Jan 2025 10:53:27 +0000
ROA not after: Sat 08 Feb 2025 10:53:27 +0000
asID: 22773
IP address blocks: 154.85.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84923 (0x14bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:53:27 2025 GMT
Not After : Feb 8 10:53:27 2025 GMT
Subject: CN=679765ac-5a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:87:27:ac:55:3d:0b:67:0f:67:15:d8:c8:
b6:f0:2f:3f:9d:53:cd:46:7e:da:18:9c:bb:c7:b4:
7f:03:4b:e4:fe:00:b0:19:6d:b7:b6:18:85:8d:41:
61:47:11:7d:f2:87:ce:41:c3:10:cc:76:a6:d5:57:
b0:69:9b:07:5d:6e:bd:f2:5b:73:6f:c9:96:ea:b5:
58:4e:91:ed:ad:3f:6b:24:3d:7a:86:2c:98:1c:17:
c3:b3:64:e9:28:39:a1:6a:99:e6:03:9e:0d:28:04:
42:01:9a:e5:54:b1:2a:5f:ee:4c:dc:ad:7e:c1:31:
f4:ec:21:d4:63:96:f9:b0:5d:10:5f:a8:cd:02:7b:
64:cb:09:d9:ed:06:92:59:e8:ad:b0:70:34:f3:a2:
7d:b6:39:36:91:66:0e:d3:9c:97:d9:d5:16:fe:af:
87:bf:4f:73:a6:84:c9:88:ef:fb:2c:af:5c:e3:0c:
bd:4f:73:c5:d0:71:c1:40:9f:8e:7c:85:a4:0d:76:
ee:71:00:8f:cd:2f:85:48:57:43:f3:eb:e7:a0:2f:
8e:8e:d4:8f:9c:49:ad:9f:c1:d3:97:cd:11:41:c3:
5a:4a:5a:c4:ed:3d:90:c6:e5:af:35:b5:b0:b6:57:
28:e9:4c:c7:33:82:26:ea:12:4b:cd:72:3f:36:cc:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:D7:30:A8:CC:EA:73:A8:A4:50:21:B1:53:D1:28:C3:49:BF:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2C734E2DC9C11EFB5F56D5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d6:02:96:ae:5f:8d:a3:8f:e3:83:7f:dc:87:56:e5:0f:0d:
2b:e2:cb:50:98:20:8f:b7:b8:ab:47:3a:f4:f8:bb:f1:2e:ee:
e4:e6:74:f1:67:d3:fb:d5:60:8c:73:d2:ce:b4:08:65:6e:b8:
de:bd:d6:aa:8f:f6:c8:71:20:bd:eb:1e:c2:07:7f:5d:4d:67:
a4:a2:c1:53:fd:52:dd:71:04:e0:7c:ba:22:39:50:fb:f5:78:
77:2c:25:a6:08:fd:5b:2f:a7:a1:9c:92:3c:4a:4c:cc:2f:a2:
f3:8f:86:eb:fb:a2:e9:fc:71:e0:ae:fe:d0:91:96:cb:b7:91:
8e:72:8e:f3:f1:c8:2c:22:82:7c:71:41:cb:85:e3:fc:c8:df:
07:b2:86:4c:4c:9c:fe:24:5d:81:5b:53:7b:28:12:49:78:4f:
cd:6c:68:98:01:30:c4:bb:e1:0a:69:92:88:1d:4e:b0:7a:7e:
a9:a0:30:65:38:d5:3d:88:09:04:e8:3d:e8:66:00:cc:49:1d:
d2:c9:4c:ee:e1:65:c4:3f:3c:05:63:13:ac:5c:e4:49:a4:4e:
26:7c:e4:d7:d3:42:77:85:33:28:c4:de:c6:e8:b8:46:fd:d7:
2f:d6:f8:25:43:ed:5a:e4:c1:85:f5:05:69:75:63:50:04:0a:
f6:80:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:36 2025 by rpki-client