Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C7ED4CAD511EF84444264762E951A.roa
File: F78C7ED4CAD511EF84444264762E951A.roa (raw, json)
Hash identifier: EB7Ahj2qKlNcQeae1JaY3/HHnfAVuR3xQRG5M+zo+fg=
Subject key identifier: 3B:9D:C9:86:0C:BC:1C:25:96:37:38:E4:AE:97:36:24:B8:97:44:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C7ED4CAD511EF84444264762E951A.roa
Signing time: Sat 04 Jan 2025 19:56:20 +0000
ROA not before: Sun 05 Jan 2025 19:56:17 +0000
ROA not after: Sat 08 Feb 2025 19:56:17 +0000
asID: 203020
IP address blocks: 154.217.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79157 (0x13535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:56:17 2025 GMT
Not After : Feb 8 19:56:17 2025 GMT
Subject: CN=67799264-a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:d9:15:c4:6f:18:75:b3:8f:b4:03:1b:cf:
9e:c2:cf:bd:90:8f:db:01:98:ed:fb:6c:e8:fe:3e:
e6:29:76:1d:cb:ee:3a:e8:dd:7e:0f:4f:e0:65:56:
33:e7:ed:d7:24:f1:32:91:0d:40:46:3b:d1:be:6c:
5e:38:8a:b7:7d:12:79:fa:92:a3:a3:62:52:53:fa:
20:e5:49:b3:78:f3:a2:d1:39:96:e6:2e:1a:8e:a1:
eb:e3:16:93:05:77:9d:2d:5a:f1:82:7d:54:1b:55:
4d:a1:f4:80:c4:0a:99:0c:2b:49:4f:f5:d5:e2:06:
72:93:bc:c3:48:69:67:50:0c:aa:dd:bf:b5:94:97:
34:94:6f:de:ba:fd:6c:ac:4b:36:f0:d4:ae:34:e1:
43:da:bc:2a:1f:53:66:2e:6e:a0:3f:05:0d:84:56:
75:d5:06:51:7d:86:79:0b:87:31:5a:f0:1d:05:c9:
4d:1d:45:fa:2d:f1:9c:b2:e0:3d:85:97:3c:dd:b4:
ed:71:6f:6b:9a:22:e9:2f:d2:40:cc:fe:49:3f:aa:
ef:4a:ca:1b:e6:d6:70:8e:09:36:9e:3c:ec:c1:8d:
51:77:58:bd:20:62:ae:21:48:b1:bf:cd:29:a7:f1:
79:e3:0a:18:9f:ea:7d:62:ed:3c:6b:77:37:eb:c6:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:C9:86:0C:BC:1C:25:96:37:38:E4:AE:97:36:24:B8:97:44:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F78C7ED4CAD511EF84444264762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.8.0/21
Signature Algorithm: sha256WithRSAEncryption
76:83:8d:80:7c:df:a4:0f:e0:42:39:60:67:74:28:d0:70:7f:
0f:eb:79:61:da:07:0f:8c:b7:0f:8a:85:cb:fe:1f:75:26:60:
ce:9c:5e:d6:72:1d:2f:93:cb:64:1a:f4:0c:4c:da:d6:18:47:
e1:a9:d0:da:9c:c8:76:cc:27:81:48:04:17:d0:cd:2c:17:8f:
a1:90:23:35:14:54:c1:f7:9f:fd:10:8b:d5:1c:15:53:89:78:
10:0e:4f:8a:78:b9:52:69:ad:01:0f:45:ba:c0:a7:a4:73:11:
50:be:d7:7d:5f:8c:e4:7f:91:29:14:cc:7c:76:ce:cf:55:27:
f6:47:ac:95:38:bb:a2:75:41:2b:71:3d:e9:aa:7a:cd:a6:e4:
e3:a1:90:94:80:35:1c:2f:ce:5f:c7:46:f3:8e:94:56:73:b4:
9d:aa:c2:61:71:cb:f2:9d:4f:be:5a:ec:35:0b:1c:b9:ab:0f:
85:66:df:75:5c:ba:7c:48:6e:54:f6:a5:82:4c:c3:04:3f:52:
6b:75:25:6c:dd:d1:63:92:69:23:d7:00:2a:46:85:d8:e7:b0:
b5:ba:8d:ba:41:29:72:f0:94:f4:24:9c:14:27:a8:80:2e:05:
71:ed:74:75:84:81:50:56:e8:86:85:9d:06:b9:31:b1:fb:b6:
7c:19:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:29 2025 by rpki-client