Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84294E4CF2111EF9857844F762E951A.roa
File: F84294E4CF2111EF9857844F762E951A.roa (raw, json)
Hash identifier: Sas2291OtRlMMF8ITDFNjJFSpTPBHzwCnfrzLB2Tg98=
Subject key identifier: E3:45:8D:B8:B1:79:BE:56:0B:C5:A1:81:39:CC:59:00:0F:90:72:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01399D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84294E4CF2111EF9857844F762E951A.roa
Signing time: Fri 10 Jan 2025 07:10:28 +0000
ROA not before: Fri 10 Jan 2025 07:10:24 +0000
ROA not after: Fri 14 Feb 2025 07:10:24 +0000
asID: 203020
IP address blocks: 154.203.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80285 (0x1399d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:10:24 2025 GMT
Not After : Feb 14 07:10:24 2025 GMT
Subject: CN=6780c7e4-8b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:8d:34:97:d2:b7:ef:b6:27:29:4a:59:37:
0b:9a:fc:67:cc:70:26:e2:c7:cf:62:60:bb:26:86:
79:f2:96:99:70:a6:89:bc:8c:ff:08:f5:5d:0e:59:
c1:29:b1:4c:04:db:8b:a6:a8:e0:90:d5:93:ae:9f:
2e:45:ad:15:20:25:c5:bc:c9:7f:aa:70:6b:2e:28:
c1:0b:37:52:b6:63:1f:a8:f0:6a:5b:72:41:e1:2e:
00:2c:8b:e0:a7:2d:59:2f:f5:a4:0d:65:bc:bd:fa:
76:cb:91:60:98:5a:4d:50:74:12:39:92:44:90:82:
22:63:df:02:91:eb:c9:cf:7c:98:50:5a:22:6e:74:
64:de:15:61:47:58:8a:89:2a:16:4e:e5:e4:03:bb:
ea:89:40:45:e7:0e:5f:b8:b0:51:b6:8f:6f:ae:db:
00:35:41:a2:40:90:49:8e:f6:30:5d:f9:30:42:31:
b3:cf:14:77:e6:36:19:b9:79:21:a7:a6:7b:81:08:
43:ac:ad:d8:49:59:27:03:cf:3e:63:26:0b:99:48:
69:0d:8c:4d:2f:e7:c9:da:bb:27:22:43:bd:0f:0f:
b0:c9:d0:f6:ea:34:25:fd:f2:fa:da:33:53:9f:96:
2a:d2:3f:80:57:83:6b:e7:f7:33:35:05:e3:5d:1d:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:8D:B8:B1:79:BE:56:0B:C5:A1:81:39:CC:59:00:0F:90:72:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84294E4CF2111EF9857844F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.40.0/22
Signature Algorithm: sha256WithRSAEncryption
71:dc:79:d7:ac:75:36:93:a7:dd:6c:2d:f5:10:ce:a3:98:92:
3d:fb:78:87:9b:9b:0e:c3:19:58:13:63:fb:96:cc:a0:33:7a:
fe:8b:97:89:ad:9d:5c:80:b4:68:8d:9a:6d:2c:f0:c9:20:4a:
23:c0:5a:9d:89:73:a9:21:e8:dd:ae:69:58:a0:a2:be:ff:d1:
e3:96:28:22:7c:8e:f7:82:a2:43:aa:c4:62:33:e7:3d:39:8c:
d2:6c:94:e8:f3:0c:05:45:08:27:b5:e4:b5:7e:31:b5:88:42:
87:3c:6a:9f:66:f7:cc:f4:47:b6:da:d2:31:36:b9:1a:5b:f5:
b6:a1:fe:9d:be:05:e1:d8:7b:9d:bb:42:e1:1e:ef:f2:a2:4c:
75:74:6a:b7:7e:8a:b3:c0:a4:b6:90:81:62:58:ee:40:24:96:
b8:ec:33:50:07:11:5d:21:f1:da:d8:26:93:9a:15:77:bd:cb:
09:e9:6f:8a:c6:d2:ff:dc:41:59:5d:26:31:0b:13:9d:7c:7e:
f6:0f:16:69:a1:77:c2:68:66:61:64:19:31:89:d6:6c:41:90:
27:0c:b1:ae:b9:03:35:bd:75:45:e2:0f:cf:f3:79:29:2c:c4:
39:f1:37:a4:53:67:6e:e5:ab:d1:80:8e:ea:4d:3e:5e:28:79:
29:de:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:06 2025 by rpki-client