Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3700804D51411EF8BB32AB1762E951A.roa
File: F3700804D51411EF8BB32AB1762E951A.roa (raw, json)
Hash identifier: 0J4sdpMKynZW67yx6qZIdgwuUoLbJGU2h033UEE2bP4=
Subject key identifier: 8B:0A:54:1F:EA:19:B1:86:43:42:1B:DB:4F:51:71:43:16:37:84:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3700804D51411EF8BB32AB1762E951A.roa
Signing time: Fri 17 Jan 2025 20:52:23 +0000
ROA not before: Fri 17 Jan 2025 20:52:20 +0000
ROA not after: Sat 01 Feb 2025 20:52:20 +0000
asID: 141883
IP address blocks: 154.214.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81221 (0x13d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 20:52:20 2025 GMT
Not After : Feb 1 20:52:20 2025 GMT
Subject: CN=678ac307-af3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:71:ce:af:79:85:93:c1:81:7d:f9:18:bb:
1b:fe:2f:c9:75:31:c5:e5:49:1d:21:77:fb:67:fa:
bb:26:6e:11:3b:2b:ba:16:42:90:00:7a:18:bd:2b:
7e:b4:cf:b3:19:94:d1:f5:66:15:a5:0a:eb:f2:53:
3e:e0:07:bb:97:d4:05:f5:ef:9d:1d:7c:4d:b7:db:
00:3c:cb:7e:e9:3e:03:3b:4b:6f:d3:39:c1:56:15:
b9:ec:ab:a6:ab:74:02:16:fa:c3:ef:41:93:4d:2f:
50:34:0f:95:37:b6:34:ca:99:67:ac:a0:a6:7b:ff:
af:80:73:12:f4:1b:aa:87:d4:bb:7d:05:c2:c0:bf:
b2:05:4b:44:e1:be:44:4a:51:55:32:56:3f:5f:36:
85:df:4f:64:dd:ae:84:aa:56:2c:36:57:5c:a8:72:
c0:c8:a8:fc:13:1d:80:16:4d:10:bd:14:77:11:d8:
35:51:a9:5e:bb:b5:63:fd:7b:95:02:5a:56:be:10:
52:17:8c:ce:a5:a8:da:aa:10:e3:e9:c0:09:39:ab:
c1:f2:7b:79:3a:d3:b3:c7:2c:cd:4f:df:08:d1:3c:
ff:11:5d:3e:66:68:91:c1:47:4e:6e:99:e2:1f:c0:
5d:f3:de:8b:8f:9d:d3:ff:24:de:8d:65:74:96:1b:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0A:54:1F:EA:19:B1:86:43:42:1B:DB:4F:51:71:43:16:37:84:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3700804D51411EF8BB32AB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
79:71:4a:a9:1f:1e:d8:46:a6:08:83:5c:b6:28:cb:41:5c:d1:
d0:c3:a2:ca:64:02:f1:9a:f6:15:78:56:4c:74:1b:db:72:87:
68:a8:fc:41:7c:69:10:dc:79:bc:62:a0:18:39:7d:5c:37:2a:
6f:38:c1:0c:de:23:d4:f6:ef:23:eb:df:b2:9e:57:51:ab:83:
ee:57:b4:47:c5:44:98:46:a5:85:6b:d2:52:f8:45:ea:6c:70:
65:70:ae:84:8e:7c:57:d3:8f:0c:01:c0:40:93:ce:5b:2e:82:
2e:ec:39:6f:51:47:28:d1:69:c6:99:ab:d5:78:5e:0f:4e:4f:
0d:94:24:90:5f:f1:e7:b3:f1:e4:58:a2:e0:0b:3c:c1:b7:2a:
48:2f:69:bb:aa:1f:3c:17:0b:91:bd:6d:9c:0f:1c:04:a7:a1:
cd:15:ac:e1:2f:07:b4:b6:4c:0d:03:1c:60:92:09:36:23:7c:
cf:6d:81:d2:9c:7e:b8:6b:91:c2:6f:26:fc:de:0b:c8:66:e1:
99:ca:cb:28:0e:56:64:7c:f9:0c:7f:32:ff:f2:f4:34:09:f1:
e1:99:c9:a0:69:00:65:70:39:8a:87:8d:87:8e:1c:6d:e9:68:
1e:9e:75:c3:c1:6b:22:d0:23:4c:98:40:69:ce:40:42:89:e6:
19:1d:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:34 2025 by rpki-client