Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4F71CCDFE811EF8AD8AC90762E951A.roa
File: 1D4F71CCDFE811EF8AD8AC90762E951A.roa (raw, json)
Hash identifier: s4ZHMQbWqq+vFkJoqnwTSYUs0B3vPD7yP8BAlDgYzIA=
Subject key identifier: C1:ED:D7:C9:E0:0D:6A:AA:ED:CB:0D:F1:AC:DE:8C:10:5C:7A:BD:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4F71CCDFE811EF8AD8AC90762E951A.roa
Signing time: Fri 31 Jan 2025 15:29:09 +0000
ROA not before: Fri 31 Jan 2025 15:29:05 +0000
ROA not after: Sat 03 Jan 2026 15:29:05 +0000
asID: 40065
IP address blocks: 154.84.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85475 (0x14de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:29:05 2025 GMT
Not After : Jan 3 15:29:05 2026 GMT
Subject: CN=679cec45-ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:d7:f7:fa:72:d0:61:ba:4b:28:95:df:58:
4f:64:fa:0d:0a:b6:bb:fd:45:8a:b4:5d:8f:68:aa:
98:58:de:05:55:5f:f0:4e:f3:ba:01:6c:c0:a2:7c:
90:18:03:2b:8b:79:50:1e:ec:72:68:5e:85:9e:50:
d4:01:fc:a0:21:0a:89:ae:27:1a:68:78:75:60:54:
fc:59:56:52:26:c7:87:0f:7c:7e:6e:70:fb:4c:34:
ad:f6:d1:92:77:5e:7a:24:7e:6d:bf:8c:b1:85:01:
0c:95:39:35:d4:d6:0b:e5:51:6a:5b:a7:74:b0:b6:
98:bf:8b:11:61:af:a6:4f:41:ce:99:73:0a:ee:53:
2e:fa:60:0b:ac:2f:13:ea:52:b5:75:a0:6e:5d:cf:
22:21:c7:37:52:eb:2d:80:9c:cb:3e:14:7a:40:ea:
cd:37:0b:58:a2:3b:8f:3a:aa:a2:8a:43:40:d7:8d:
fb:be:4f:a2:92:12:16:2e:62:c8:b5:e2:23:1f:43:
44:69:9a:e6:e2:47:57:99:09:e2:78:a1:31:e3:5b:
ed:76:e4:4c:a2:ed:d2:f6:d6:fd:45:98:99:37:f5:
e8:0c:c2:86:68:c9:ae:32:44:e7:d4:65:ef:10:7c:
6e:6f:4c:38:07:14:2c:f4:c0:77:ce:9f:5b:1c:89:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:D7:C9:E0:0D:6A:AA:ED:CB:0D:F1:AC:DE:8C:10:5C:7A:BD:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D4F71CCDFE811EF8AD8AC90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.4.0/22
Signature Algorithm: sha256WithRSAEncryption
80:c9:bd:cf:d5:d0:a2:1b:26:7e:7e:43:f8:86:41:4b:f5:d2:
ef:f3:b3:8e:e5:b2:45:d8:db:39:de:f8:4a:37:df:76:12:b5:
ed:bf:5c:c1:be:04:8e:78:93:63:f7:d8:68:db:f7:90:96:d5:
ab:ee:e2:f1:9e:d7:bc:dd:a5:3a:61:5c:68:d0:de:b3:50:1a:
4b:9f:ee:5c:fa:32:de:d8:da:8a:f5:fb:62:9d:e1:d0:d7:0e:
59:0e:7b:66:19:1c:60:45:e4:86:7f:78:d4:51:19:de:0d:8d:
69:7d:f0:db:23:77:cc:f5:52:bb:29:41:12:3d:21:4f:a2:76:
e5:dc:6b:63:b3:a1:7c:d3:e6:92:72:a7:5c:9e:06:0e:6d:06:
d0:5e:11:ee:ad:b9:c8:06:96:74:d8:92:b3:92:db:dc:99:b4:
3b:a0:2f:b8:79:38:91:fb:f8:05:ac:60:c1:ae:ee:bd:11:30:
c1:83:58:29:f2:16:55:b6:5d:c1:53:af:83:8a:4e:ee:38:f4:
3e:9b:57:76:64:43:55:33:75:47:9b:cc:08:41:f5:32:a4:58:
23:30:fb:6f:76:bb:ec:ab:f3:04:7a:6d:35:90:93:c7:3b:40:
2d:2c:ef:7c:f3:ac:10:cf:f4:bf:b5:f9:57:69:11:23:1d:21:
c2:77:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:58 2025 by rpki-client