Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E4726E6DE1511EF84D9A94F762E951A.roa
File: 4E4726E6DE1511EF84D9A94F762E951A.roa (raw, json)
Hash identifier: S9QGcVICaFERcW43BAxP311PUZ9vv2xDng+eJIDfArc=
Subject key identifier: 74:D3:19:FC:45:FD:89:C7:92:54:37:94:C2:94:0B:C1:EE:7F:25:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E4726E6DE1511EF84D9A94F762E951A.roa
Signing time: Wed 29 Jan 2025 07:47:36 +0000
ROA not before: Wed 29 Jan 2025 07:47:32 +0000
ROA not after: Sat 29 Jan 2028 07:47:32 +0000
asID: 35916
IP address blocks: 154.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85297 (0x14d31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 29 07:47:32 2025 GMT
Not After : Jan 29 07:47:32 2028 GMT
Subject: CN=6799dd18-9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:1d:30:68:1e:8b:98:b7:d2:98:cc:10:83:
63:72:e3:94:7d:57:17:6a:9b:60:ed:a6:4c:00:1c:
2d:d7:3d:a6:8d:9d:63:66:30:dd:ca:af:c0:d2:18:
c1:7f:27:45:fb:ab:e1:87:7e:ac:26:94:48:73:ae:
00:ef:e9:ca:c7:e5:8a:cb:e5:68:d5:df:6a:b3:7c:
f7:47:0c:43:5e:c6:0d:d8:f2:54:9c:47:26:ec:ec:
c6:20:d3:56:a8:45:1b:bf:89:08:95:67:b1:63:33:
55:73:77:5a:39:31:80:05:fd:f0:77:dd:fb:c9:4c:
3c:5a:9a:4e:fe:72:f4:4d:92:be:72:a0:ce:78:a1:
7d:98:79:32:25:a6:82:ef:ca:4a:42:fc:93:ef:7f:
35:bc:f3:9b:95:14:61:53:82:3a:9c:4b:c0:d5:f6:
a7:d0:3a:77:d0:0d:4e:ef:07:7a:d7:dc:06:35:e4:
9d:bf:5c:7a:55:88:c4:24:19:52:bb:55:6a:50:88:
28:d3:d4:a3:04:a5:51:4d:78:e3:93:ef:44:68:be:
e2:e9:be:73:11:7a:09:90:c2:7c:c1:23:ad:91:19:
07:0b:42:5d:cb:04:96:a8:3b:f1:48:25:86:9a:05:
c4:07:ae:4a:d4:99:18:96:b0:bd:8a:3c:55:98:cd:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:19:FC:45:FD:89:C7:92:54:37:94:C2:94:0B:C1:EE:7F:25:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E4726E6DE1511EF84D9A94F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:af:56:35:6e:4e:ca:54:a7:34:0a:86:cb:15:0d:d5:7d:1e:
10:0e:6c:5b:8d:be:04:ca:a6:7e:07:19:48:75:56:0e:61:fa:
86:08:cb:f1:ae:27:b4:d9:7e:c7:5f:97:79:01:d1:84:59:86:
5a:05:eb:24:9a:d2:30:63:72:c7:af:57:c9:55:e1:94:f5:94:
8a:69:c3:3b:8b:87:7f:12:51:98:34:a0:2b:03:3a:4d:30:8f:
5d:f6:1d:18:44:1c:0b:a6:96:3e:ec:a1:27:a5:01:df:b3:c7:
bd:e0:35:71:e4:ba:52:3d:0f:dd:35:f7:9b:7a:a1:c6:bd:e8:
20:a4:ac:12:5d:66:e8:25:a6:a8:73:c8:ac:2e:ec:d6:5a:df:
62:7d:36:9f:2e:17:03:3e:b9:7e:f2:a0:b2:51:2a:3d:86:14:
3b:0e:8c:d6:a5:a6:4f:7c:ed:67:39:9c:46:ef:09:53:db:e9:
93:a4:69:80:af:f4:d5:d8:78:73:a2:90:86:55:e6:c1:b7:61:
7f:92:4b:ff:ef:eb:f7:5d:b8:5a:86:36:81:d4:ae:45:ec:fe:
04:fa:55:39:60:28:69:d8:ff:bd:aa:54:8d:b5:fa:c6:c8:6b:
98:8d:c9:7d:95:e0:69:27:64:cd:15:e9:6c:d5:ea:c6:5b:69:
28:1e:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:06 2025 by rpki-client