Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F63BD70ADCA011EF9CB63C78762E951A.roa
File: F63BD70ADCA011EF9CB63C78762E951A.roa (raw, json)
Hash identifier: 4Yh/e0MCeidzRVYbuQmxx7HIFu8wNtl5a+xpFbTO3pk=
Subject key identifier: 86:2F:01:EB:18:D6:6B:C7:08:22:E6:66:C8:CC:EE:EE:D0:7D:96:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F63BD70ADCA011EF9CB63C78762E951A.roa
Signing time: Mon 27 Jan 2025 11:22:16 +0000
ROA not before: Mon 27 Jan 2025 11:21:49 +0000
ROA not after: Sat 08 Feb 2025 11:21:49 +0000
asID: 7018
IP address blocks: 154.195.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84945 (0x14bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:21:49 2025 GMT
Not After : Feb 8 11:21:49 2025 GMT
Subject: CN=67976c68-7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:0c:d3:0f:78:42:51:7e:53:d3:42:fd:49:
3d:0c:48:1f:0e:29:5b:21:ab:6b:d8:67:c0:69:5e:
c9:bf:d2:bd:3b:4f:90:3c:7c:3c:f0:e2:61:3f:b0:
89:41:c1:74:d3:72:54:d3:a2:84:2a:ae:97:6f:c4:
69:3a:0a:96:19:98:c9:53:7b:94:57:76:1c:1a:71:
79:d4:f2:61:76:83:7b:6c:85:9c:05:2d:56:76:ef:
5e:57:bf:b7:88:a0:65:1f:10:8c:b1:86:19:1d:f7:
94:95:11:71:c6:cc:6c:1a:67:34:7a:e5:5e:76:f9:
0c:1b:d7:13:f5:74:4d:58:57:79:c1:b9:b4:72:45:
c1:98:1b:09:da:b3:81:e3:71:a6:4f:4f:3d:fc:e7:
ce:2e:06:96:f4:10:69:86:ac:57:53:cf:55:c2:91:
11:b3:7e:30:17:d2:f7:27:fa:45:de:20:15:7c:a3:
6c:e7:75:a4:88:ca:72:e6:9b:ba:c8:d1:13:a7:92:
e6:1c:d5:3e:dd:ac:bb:a6:6c:6a:5e:c9:e4:1c:4e:
ec:6d:09:a0:1a:cc:e0:99:cc:87:4a:2f:49:3f:ca:
bb:c0:cd:5d:fb:d4:e9:ed:88:c0:87:30:44:89:c6:
b2:e3:c5:65:7d:87:be:d5:4d:1c:17:8b:59:26:b1:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2F:01:EB:18:D6:6B:C7:08:22:E6:66:C8:CC:EE:EE:D0:7D:96:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F63BD70ADCA011EF9CB63C78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:68:be:ca:b1:b2:f0:35:e8:1f:46:ad:12:95:19:df:23:8c:
83:4f:1d:54:99:08:5b:7f:08:ee:76:46:4f:85:9f:35:6f:0c:
f0:1d:1f:43:8a:01:df:52:a7:c7:82:f8:71:e1:c7:e1:66:9a:
33:f1:7c:14:9f:ef:68:77:90:c4:71:17:49:d5:8a:ee:02:22:
9b:c2:2b:87:66:fe:24:6f:51:a9:73:d6:25:e5:a8:c9:1c:47:
32:7e:66:7e:f6:d9:29:71:44:2a:1c:bf:0f:95:e1:65:75:f5:
96:ea:0b:ea:dc:dd:82:81:65:c2:50:b5:b3:a4:35:48:5d:73:
29:98:b0:cd:b2:3c:a0:93:8f:37:ab:3e:dc:27:fa:d6:e2:1a:
2a:89:6f:ee:98:73:b0:91:73:e1:43:9b:ff:3d:12:d5:6a:8d:
25:83:d7:48:f7:08:d3:78:01:a9:4d:64:88:af:42:d4:07:c2:
70:15:fb:34:9f:7a:1d:95:53:4d:23:a2:68:ef:1f:3a:0d:85:
2f:fb:5e:b6:06:43:57:5e:a1:d3:a6:3e:cc:c6:c9:80:33:c2:
9c:30:eb:ab:03:6e:31:ce:14:6f:d5:d5:40:38:dd:fb:bf:23:
db:87:2b:db:5a:f1:f7:74:25:4d:99:fc:76:d5:bb:e7:ce:5f:
28:e3:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:17:13 2025 by rpki-client