Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD4F1040DD5C11EF8A1BF26D762E951A.roa
File: FD4F1040DD5C11EF8A1BF26D762E951A.roa (raw, json)
Hash identifier: HiqjfC7YcL7F7u5n+vXM3BcqLxQa3uYvdExCJ0FxFGc=
Subject key identifier: 0B:23:6A:44:36:CD:EF:AC:AC:D6:87:05:F4:08:5D:95:C1:90:14:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD4F1040DD5C11EF8A1BF26D762E951A.roa
Signing time: Tue 28 Jan 2025 09:48:13 +0000
ROA not before: Tue 28 Jan 2025 09:48:09 +0000
ROA not after: Tue 04 Feb 2025 09:48:09 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85164 (0x14cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:48:09 2025 GMT
Not After : Feb 4 09:48:09 2025 GMT
Subject: CN=6798a7dd-37ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:e9:a6:f7:17:90:fc:07:59:49:e3:0e:e8:
84:54:c4:a3:c0:f0:67:08:29:cf:76:2a:cd:b1:9c:
da:d8:15:24:2c:9c:8e:88:ad:96:c8:2b:00:69:fa:
e5:1f:8e:91:1e:c1:f9:91:ff:7b:8b:6e:cf:97:7d:
e9:f1:fa:1f:0f:81:54:0b:68:8d:29:2c:e5:87:6d:
29:6f:8a:60:bd:db:f0:19:e2:ba:71:c9:93:68:c6:
63:88:8d:ff:85:d7:18:1a:58:89:97:11:47:89:49:
0d:fc:fb:e1:4d:24:3b:e7:af:28:2c:99:19:1d:b6:
af:78:a0:d8:86:af:8a:7d:11:cb:33:9f:c5:ee:a8:
cc:a4:9e:01:52:c1:d7:b2:66:ad:c0:61:96:5b:de:
bf:b9:96:6d:b4:fd:d0:03:c3:4a:0e:d0:82:d0:59:
4d:7c:cd:26:2a:d5:31:f0:2b:61:23:f5:bc:b5:60:
33:95:4f:89:0f:1f:25:ae:2d:90:fb:50:c2:50:e3:
a2:25:bd:4e:a1:a2:5e:bc:c1:47:29:b0:7b:90:2e:
d9:35:83:6a:ed:0d:4e:4a:97:4f:d7:4a:86:01:5b:
09:75:a7:96:9b:7b:7f:2e:5a:54:21:c7:ba:d9:de:
2e:f8:ca:06:f0:69:83:83:26:e0:59:d6:bd:24:59:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:23:6A:44:36:CD:EF:AC:AC:D6:87:05:F4:08:5D:95:C1:90:14:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD4F1040DD5C11EF8A1BF26D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
98:7a:22:c0:fd:84:35:56:a7:91:51:d6:ed:8d:87:53:b5:cd:
60:99:44:a8:1b:bf:fe:03:42:91:67:ec:60:20:a1:c9:6a:92:
70:63:e1:ae:3d:7f:4a:de:49:c1:d5:62:83:2d:f5:00:29:03:
68:93:da:57:8c:b1:91:e6:cf:92:dc:51:d5:99:e4:af:71:19:
03:b3:ff:92:3e:61:3c:2e:32:22:a5:49:cf:25:4d:02:8c:28:
27:55:ed:be:3d:c2:8a:f6:ce:72:0f:bd:e6:8e:a6:34:c5:48:
5c:14:60:cc:0f:ed:1b:2a:53:a9:39:17:98:db:5d:ab:0a:e9:
31:0e:b1:94:86:48:16:96:ae:46:a5:44:1f:e1:4b:1f:8c:2a:
d1:d4:99:25:3e:25:5f:47:75:29:d0:92:9e:00:bb:87:60:c7:
f1:71:8d:da:d3:16:a6:cd:fe:5a:d4:4d:a1:29:26:32:9d:1d:
20:95:f2:20:44:28:8b:2e:20:05:e6:01:19:33:b8:81:15:72:
80:f3:79:b8:81:87:2f:2e:5d:40:1f:96:3f:0b:2c:85:73:71:
78:7f:18:f0:99:4e:4e:34:21:f9:63:33:ed:7e:d7:17:a6:16:
92:1e:54:52:9b:b3:c3:5c:10:c4:1f:fd:ee:07:a9:bd:b1:7c:
13:0e:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:53 2025 by rpki-client