Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687CF2/43F7457EEEB211EFB8B6489E762E951A/8814C808EEBC11EF839E9D5F762E951A.roa
File: 8814C808EEBC11EF839E9D5F762E951A.roa (raw, json)
Hash identifier: +tXfAvSf4FLZvDRchpWxr2wVbp1cRWh4b2+6t7uxs9k=
Subject key identifier: DF:3C:B8:6C:84:23:59:6F:1C:BF:AB:0C:25:86:79:9F:BD:58:59:E4
Certificate issuer: /CN=F3687CF2AF/serialNumber=A05F84ABF0669EE0D07FC8DA367D816FAFF06704
Certificate serial: 0A
Authority key identifier: A0:5F:84:AB:F0:66:9E:E0:D0:7F:C8:DA:36:7D:81:6F:AF:F0:67:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oF-Eq_BmnuDQf8jaNn2Bb6_wZwQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687CF2/43F7457EEEB211EFB8B6489E762E951A/8814C808EEBC11EF839E9D5F762E951A.roa
Signing time: Wed 19 Feb 2025 12:24:58 +0000
ROA not before: Wed 19 Feb 2025 12:24:54 +0000
ROA not after: Mon 31 Dec 2035 12:24:54 +0000
asID: 37649
IP address blocks: 154.65.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687CF2AF
Validity
Not Before: Feb 19 12:24:54 2025 GMT
Not After : Dec 31 12:24:54 2035 GMT
Subject: CN=67b5cd9a-772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:bd:04:03:76:34:7f:13:12:1c:8c:f4:34:
99:b8:16:d6:b1:d1:dd:be:3a:0e:55:f0:b1:92:7f:
1d:b9:4d:81:67:2a:80:ff:25:dd:f0:23:84:4f:42:
8c:f5:e0:18:01:e7:8f:35:dc:e9:60:3a:53:90:25:
9b:9d:8c:51:4a:fd:62:a1:25:d8:5b:b0:1b:a8:7b:
6f:8b:e9:06:5f:54:4b:97:10:d6:de:1a:dd:ad:33:
43:89:fd:12:09:8a:18:cc:5c:5a:9b:b9:8e:59:0a:
93:9c:0b:84:c2:20:fb:f7:a4:22:70:6b:a1:bc:08:
6a:12:0d:c0:7d:ca:6e:2d:be:4c:de:86:93:d8:e3:
d5:c2:a0:25:1e:7e:8e:54:9a:08:96:76:5e:bb:7b:
0c:a1:8d:dd:27:c7:eb:d4:f4:39:cf:12:5e:86:a2:
aa:50:54:e8:7c:b8:79:bf:75:7c:53:25:77:f5:68:
2d:e7:83:42:c9:19:90:c2:3a:3f:a1:cc:7c:5a:c8:
0a:77:9b:db:1f:38:ab:4d:ee:d5:f7:e3:38:f9:51:
d5:2a:52:ff:e2:e7:29:1e:51:7f:6b:4f:42:43:da:
35:c8:f2:6c:6e:cd:0c:68:1c:e7:11:8c:45:22:13:
e4:d7:dd:b7:6a:e5:ac:dd:2a:08:4c:5e:e4:9e:f8:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:B8:6C:84:23:59:6F:1C:BF:AB:0C:25:86:79:9F:BD:58:59:E4
X509v3 Authority Key Identifier:
keyid:A0:5F:84:AB:F0:66:9E:E0:D0:7F:C8:DA:36:7D:81:6F:AF:F0:67:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687CF2/43F7457EEEB211EFB8B6489E762E951A/oF-Eq_BmnuDQf8jaNn2Bb6_wZwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oF-Eq_BmnuDQf8jaNn2Bb6_wZwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687CF2/43F7457EEEB211EFB8B6489E762E951A/8814C808EEBC11EF839E9D5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.32.0/21
Signature Algorithm: sha256WithRSAEncryption
87:be:88:fe:6c:2e:da:d1:74:88:e4:44:b5:0c:49:95:67:e4:
c5:9f:33:0c:81:8c:de:0c:73:8e:a1:4d:87:70:00:d0:59:55:
eb:84:89:89:59:8b:bc:fc:26:86:09:bc:bd:9d:c2:b3:42:20:
c1:89:13:47:36:5c:f3:fb:2d:69:a0:36:27:27:15:e8:7b:b2:
dc:a2:26:bd:b0:2a:b4:43:f2:9d:bb:59:1b:b3:7a:84:0d:63:
c3:31:15:bd:f0:49:e3:0d:ca:fe:9b:af:f3:2b:cd:00:69:1a:
7f:f0:88:2b:a2:d3:e4:8c:57:35:6f:bf:cf:cb:55:28:d3:5a:
76:60:4d:70:94:8d:cd:8f:71:df:a9:96:79:9f:aa:59:5b:f9:
90:3e:b4:1a:1c:ef:d9:ae:9a:8b:43:be:a7:b0:8d:c1:4d:7d:
47:15:d2:d5:fb:1a:2a:25:ec:d1:37:81:e2:bb:90:d3:ef:c5:
75:d8:ef:6a:c2:86:b4:20:8a:cd:d6:cb:0a:f5:5b:5f:be:fb:
d7:42:0d:a0:df:55:46:77:4e:97:2c:f0:4c:b5:55:cb:93:a8:
ae:f0:a7:e2:2e:1b:a9:2b:18:e2:df:dc:92:24:95:4a:b9:72:
82:46:e7:f9:b4:a4:9d:05:70:35:0a:3a:79:b8:4a:2f:3f:f4:
c8:80:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:01 2025 by rpki-client