Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075FA9C0D57211EFA349DFA2762E951A.roa
File: 075FA9C0D57211EFA349DFA2762E951A.roa (raw, json)
Hash identifier: ktCDSEPTXHv2x8LpsMZW7qmIwweBVvJTwewnsqSNpBw=
Subject key identifier: FB:DE:D1:00:FC:DA:11:78:15:FE:33:B5:01:FB:63:83:0C:A9:ED:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075FA9C0D57211EFA349DFA2762E951A.roa
Signing time: Sat 18 Jan 2025 07:58:40 +0000
ROA not before: Sat 18 Jan 2025 07:58:36 +0000
ROA not after: Sat 22 Feb 2025 07:58:36 +0000
asID: 400619
IP address blocks: 154.202.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81330 (0x13db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 07:58:36 2025 GMT
Not After : Feb 22 07:58:36 2025 GMT
Subject: CN=678b5f30-36ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:29:08:8f:79:81:f0:12:00:62:67:d0:92:7f:
1d:9f:43:4c:38:ab:93:cb:dd:66:0e:f4:a1:bb:c5:
5f:37:d7:b1:8e:95:0c:d2:0e:1f:af:01:16:39:81:
7d:79:b7:5d:e7:e6:18:68:a5:85:b2:34:a7:e5:de:
3a:09:66:1d:fc:6e:9f:4a:22:e4:c1:06:a9:ec:17:
40:5e:01:ff:c7:c2:72:77:96:8d:81:32:47:fe:1d:
ec:4a:bf:59:1d:31:5f:5c:e6:05:0e:4a:ba:cb:27:
3d:75:60:fa:c9:ea:60:77:88:61:4d:bd:95:0b:b8:
17:d6:22:08:3b:cb:54:9d:4d:f0:eb:0f:44:bf:0d:
4a:1a:6b:01:0d:ee:2b:a4:23:d1:f6:6e:0a:6e:d2:
d1:6e:db:3b:22:a9:74:3e:6d:57:fa:2e:8c:f1:3d:
83:d3:18:14:55:b8:88:a2:12:0c:f9:96:89:58:06:
6f:25:be:73:30:24:b9:1f:d3:4d:1c:b3:c8:bc:f4:
9a:4b:51:26:a2:7c:a1:9a:d3:07:fe:6e:34:d2:cd:
bd:59:b6:62:95:f4:91:9f:06:4b:bb:f8:e0:3a:18:
8e:18:cd:03:fa:26:15:96:ef:1a:d4:d7:cb:0c:e5:
bc:60:38:3b:0a:58:e0:17:36:0a:ed:43:6e:60:43:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:D1:00:FC:DA:11:78:15:FE:33:B5:01:FB:63:83:0C:A9:ED:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075FA9C0D57211EFA349DFA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
Signature Algorithm: sha256WithRSAEncryption
52:1b:61:b8:e8:6e:65:b6:e6:d2:fe:81:21:ec:99:9b:62:f4:
96:60:54:f3:e1:c9:4b:6b:31:d8:24:ca:ee:94:bb:20:66:48:
35:0f:ae:23:4c:d8:67:af:5c:44:c7:12:15:74:3b:c7:8e:43:
9d:29:76:9d:1f:72:b3:5a:77:8c:c3:12:1f:4c:77:ab:3e:df:
9a:cd:dc:a3:f1:21:d3:2b:ff:5c:0f:48:43:cc:7e:a0:72:ae:
0e:ad:b0:f2:c9:b2:2d:02:b6:18:bf:28:5c:ac:5f:46:d0:b6:
41:0c:33:19:07:c8:8c:8b:f4:9d:3d:8a:d8:98:26:26:f0:c3:
5d:26:df:ef:22:cc:0c:a6:5b:3e:48:d8:f9:19:ac:12:8f:71:
ba:f2:a6:1e:16:82:18:4d:e9:80:62:e3:59:49:42:5c:7e:ed:
bd:55:17:7b:5b:aa:0a:bb:86:43:c3:3b:fc:a2:21:f2:70:ad:
2b:a3:32:e0:9c:f7:fb:a6:52:6b:4a:f4:c7:81:c5:ee:b4:fa:
cd:43:54:d1:d0:9c:80:fe:50:8a:83:c9:ee:56:ee:6d:e7:73:
fd:46:af:04:cc:97:ef:4f:23:fc:db:ab:e5:23:95:53:6e:dd:
32:26:b0:10:03:08:99:c8:81:f7:2a:c8:40:67:11:7a:1d:13:
2e:c1:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:02 2025 by rpki-client