Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D32B06D8E211EFA87FE2B0762E951A.roa
File: F8D32B06D8E211EFA87FE2B0762E951A.roa (raw, json)
Hash identifier: Ol64tArGDogoU2bcUwZ5u1qIPZP7AtyGlX3ob0hsemY=
Subject key identifier: 0E:76:E2:42:1F:CA:C0:4A:B1:93:70:FF:50:0E:FB:22:FB:DA:96:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D32B06D8E211EFA87FE2B0762E951A.roa
Signing time: Wed 22 Jan 2025 17:04:42 +0000
ROA not before: Wed 22 Jan 2025 17:04:38 +0000
ROA not after: Sat 15 Mar 2025 17:04:38 +0000
asID: 138915
IP address blocks: 154.206.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81918 (0x13ffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:04:38 2025 GMT
Not After : Mar 15 17:04:38 2025 GMT
Subject: CN=6791252a-8e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:ca:65:91:2e:73:14:fe:8c:67:d9:c8:72:
34:8f:18:c1:11:c3:1d:be:d4:ad:c5:1d:3e:c3:40:
d4:8d:2c:ac:e4:7e:f0:e3:2d:0a:c2:91:44:54:47:
d3:ac:cd:f0:69:13:64:c9:13:9b:ad:59:e2:a7:92:
ab:16:f3:e1:d8:78:8d:2e:b2:f7:dc:ee:96:40:4b:
39:19:c3:58:7a:56:91:bd:d5:99:6d:17:d1:74:ad:
2e:5d:9a:4e:f8:bf:c3:93:84:af:ff:a5:10:84:ba:
c9:d9:53:51:82:f4:dc:5a:6d:5d:4c:f0:ab:a4:78:
af:18:cf:24:d6:39:8c:18:cd:0b:48:f6:8f:09:64:
17:4e:af:65:b1:9a:df:52:fb:1e:fe:b6:ca:11:df:
4f:ce:21:5d:ef:f2:be:e1:89:18:fd:53:56:9f:4b:
2b:bf:e3:a7:bc:ff:26:67:b9:89:da:79:11:82:3a:
0e:97:3a:a1:d1:dd:28:b5:f1:d5:4b:56:ac:f5:2d:
52:fc:46:78:96:58:52:f0:f5:5f:69:cd:72:89:34:
6b:ae:cc:71:24:76:f1:eb:bd:9e:47:1a:d9:de:71:
6e:93:bc:43:a1:1d:5a:a3:bf:33:b4:55:f2:5f:6e:
f1:4b:b5:2c:16:4a:1c:be:bc:8c:67:04:84:4c:54:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:E2:42:1F:CA:C0:4A:B1:93:70:FF:50:0E:FB:22:FB:DA:96:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D32B06D8E211EFA87FE2B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:1b:6d:03:43:0d:3a:e3:45:e6:26:2e:84:68:f5:37:a9:90:
d8:3d:34:df:e9:a9:f8:1f:16:a1:02:c9:c5:a8:a0:be:5d:c5:
22:dd:59:81:7c:71:7a:ae:39:f7:df:1b:ea:40:8a:54:1e:6d:
40:b9:9f:ce:d0:e3:8b:bb:1b:49:88:f1:be:27:7d:d7:57:fc:
8c:10:b1:60:56:ef:d0:02:57:1b:07:79:fe:36:26:b8:8d:7a:
0f:65:a8:97:36:78:b3:d0:0c:ab:fb:f4:89:e1:6d:20:29:cd:
bc:43:0d:91:5d:e4:a9:46:e8:6f:54:03:62:83:ce:25:cf:af:
82:40:68:2f:6f:c1:45:23:d2:9a:8a:ee:11:de:d1:9a:2f:c3:
ac:29:0c:7b:77:bb:c4:b3:75:cc:29:08:5a:b2:b1:95:f2:02:
5b:c3:88:9b:cd:15:a5:90:2b:ed:8e:45:bc:48:34:84:9c:7e:
a1:4b:41:81:15:0e:02:fe:7b:89:e8:7c:ee:ce:ac:c4:df:85:
19:f1:b4:57:b6:37:93:c8:85:a9:0f:a7:0a:7d:90:6a:36:58:
36:c3:e5:b2:a5:cc:1c:42:f5:42:37:fa:db:1c:7a:fd:66:77:
e4:a5:16:1f:d7:b5:8f:d3:e0:47:aa:6d:ff:d8:70:29:88:66:
a4:d6:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:24:50 2025 by rpki-client