Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B4F53CDE2211EFBDEC73A7762E951A.roa
File: F9B4F53CDE2211EFBDEC73A7762E951A.roa (raw, json)
Hash identifier: PxpjxGjRwejTKGCu6RNCacTofpO9B4hkJtRGfK8Q8Fk=
Subject key identifier: 68:26:59:D3:E9:52:1A:4E:11:28:4D:31:B7:C4:0B:2C:F3:AB:C4:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B4F53CDE2211EFBDEC73A7762E951A.roa
Signing time: Wed 29 Jan 2025 09:25:27 +0000
ROA not before: Wed 29 Jan 2025 09:25:23 +0000
ROA not after: Wed 05 Mar 2025 09:25:23 +0000
asID: 203020
IP address blocks: 154.207.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85342 (0x14d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:25:23 2025 GMT
Not After : Mar 5 09:25:23 2025 GMT
Subject: CN=6799f407-b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:80:52:9f:f0:77:83:76:24:1f:15:4f:6e:
fd:3f:e4:a8:30:a3:3f:2c:b3:58:2e:de:57:a1:49:
57:b4:4b:b9:55:21:7b:2a:3f:84:8b:c0:f7:52:80:
8c:ad:31:e4:c2:69:34:05:7f:98:06:09:9b:f9:15:
1b:e7:d7:01:37:7e:1c:48:d6:20:a3:8c:9c:5d:3f:
d5:47:28:10:89:b6:b2:42:ad:fd:af:f1:f8:a6:c1:
c4:12:0d:58:dc:60:d6:fe:45:8d:54:41:95:7d:60:
8a:81:4f:24:a5:01:73:0b:a1:76:d3:63:28:36:88:
a0:f9:ed:0a:7e:0b:e1:d3:ad:58:8c:2a:c7:99:3e:
62:cc:d1:45:1e:84:6e:e0:b2:d1:ec:dd:f0:20:f5:
a5:5c:3f:e0:20:5f:e6:56:ad:b1:f1:0e:d5:12:99:
36:f3:f7:22:5f:36:3d:81:39:32:ad:a1:7c:34:b8:
c3:dc:dd:34:0f:74:e9:5f:7b:fc:d5:94:fe:6d:d3:
41:bd:2d:d0:b1:80:de:21:f4:38:9c:24:50:8d:87:
c0:0e:07:e8:9f:d9:46:24:46:8c:a9:8e:ca:1f:36:
e3:8e:89:f3:b3:78:49:ce:ef:f7:4f:97:e6:72:83:
1e:14:b7:c9:7c:00:a5:7d:e9:6d:21:31:88:bc:a1:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:26:59:D3:E9:52:1A:4E:11:28:4D:31:B7:C4:0B:2C:F3:AB:C4:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9B4F53CDE2211EFBDEC73A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9b:70:49:39:6d:16:73:ee:1e:28:48:f0:0d:5f:fd:34:d3:
c4:de:79:0a:e3:66:ca:6a:fe:6e:da:82:08:6b:08:12:12:40:
45:66:e2:19:76:e7:81:b5:05:30:1f:00:b1:83:69:33:0d:72:
82:49:3e:d5:8b:4a:79:0f:da:ea:96:bf:03:53:20:c0:66:4c:
71:af:17:cb:cd:41:be:94:3d:54:64:f2:f7:0f:d9:15:3f:e3:
5a:32:54:ba:12:8a:a7:27:fa:e9:b3:bd:9e:e4:e3:a9:18:b0:
ca:e2:ae:40:33:98:94:9f:15:34:f5:6e:e2:95:a9:5f:0e:76:
ef:9f:78:f8:be:f3:b3:12:dd:3c:12:9b:43:8a:c0:83:60:8c:
83:bf:c5:4a:98:1d:f2:18:ca:1d:fe:00:df:af:ec:d8:0d:99:
e0:ab:a2:96:3d:98:07:6f:79:31:ea:c6:25:3c:96:dd:58:ba:
b0:51:b8:9e:12:09:a0:1f:6e:53:11:9b:29:41:52:00:14:de:
ab:e1:42:e0:a0:9a:59:ff:62:d6:f0:4a:54:e1:fd:7e:1f:60:
11:f8:64:c9:19:80:cd:32:b0:31:10:00:b0:f8:30:3b:6f:01:
60:8c:6a:2c:c2:ae:41:c5:da:e7:6a:2a:e5:cf:26:58:97:7b:
82:1d:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:38 2025 by rpki-client