Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B03528D56311EFA9E1A746762E951A.roa
File: 77B03528D56311EFA9E1A746762E951A.roa (raw, json)
Hash identifier: tsiPycRLSvUxUsd/or/dWL/RNivvxG2mYvkqXeOel0Y=
Subject key identifier: 30:11:E3:35:74:86:10:E0:29:1A:86:F5:F5:95:7D:36:07:A3:C1:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B03528D56311EFA9E1A746762E951A.roa
Signing time: Sat 18 Jan 2025 06:14:26 +0000
ROA not before: Sat 18 Jan 2025 06:14:22 +0000
ROA not after: Sat 22 Feb 2025 06:14:22 +0000
asID: 395886
IP address blocks: 154.202.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81260 (0x13d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 06:14:22 2025 GMT
Not After : Feb 22 06:14:22 2025 GMT
Subject: CN=678b46c2-6223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:eb:31:d2:f7:ff:19:3c:af:c1:f3:2e:f0:
70:aa:5b:36:b4:2f:1b:97:3f:b9:1d:3a:98:62:da:
bf:07:3f:d4:00:4a:c7:c4:b2:54:cf:fb:58:68:01:
3d:77:03:e6:fd:5c:32:c0:39:fa:8f:8a:b3:5e:18:
94:66:90:98:56:6d:60:42:e5:8b:1e:26:02:66:63:
14:b6:59:64:f0:00:7e:a6:29:60:f7:01:42:20:94:
cb:dc:2d:87:e9:3a:ab:6d:74:e3:e1:62:f4:d3:6b:
d4:1c:e5:3f:48:6e:35:fb:e6:e3:1f:71:f6:0e:eb:
d8:3e:2e:8b:89:28:eb:0d:81:4e:db:d9:7d:ba:10:
f3:56:72:b9:67:15:9a:09:14:db:62:b7:0e:d5:ac:
9f:c3:6b:9d:0f:d4:24:f0:d0:9d:eb:3c:fb:40:29:
2b:c6:1d:56:f3:9c:0b:d5:46:9a:cc:fd:7b:17:58:
7b:b9:9b:dc:fb:a1:e3:50:8a:8b:48:60:0f:d4:c7:
c6:f0:14:08:cf:b4:1c:fe:c4:c0:43:43:12:36:ce:
5d:1d:7e:c4:a5:b4:c4:c0:fb:57:c0:d7:25:ff:a7:
55:d6:e5:44:f0:cd:a0:38:97:f9:14:4d:cb:b0:33:
1e:d5:d4:b8:92:01:9f:32:97:1d:4c:ca:f8:d3:33:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:E3:35:74:86:10:E0:29:1A:86:F5:F5:95:7D:36:07:A3:C1:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77B03528D56311EFA9E1A746762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
Signature Algorithm: sha256WithRSAEncryption
26:4d:90:0b:a6:03:ec:d5:c3:f8:19:84:4b:4d:9c:32:95:5d:
94:03:05:77:e7:40:69:04:42:b8:25:eb:1f:31:b4:a0:d2:28:
49:f3:cf:85:76:d0:e9:49:8e:f3:b3:0a:3b:44:e4:f6:cd:4d:
82:e7:7b:34:3d:d4:70:f2:60:b1:22:a6:8f:7e:1a:fa:73:03:
f8:d1:d9:5f:73:c2:d0:f6:36:08:b6:6f:af:ce:c1:b5:b9:09:
2c:5f:03:72:18:d4:6f:fd:3d:c7:0e:89:5a:9a:4a:7a:4e:a1:
85:99:43:49:81:fc:10:35:80:60:46:19:3e:2d:b1:a2:7c:be:
17:6b:7a:24:2a:c7:a7:42:4d:97:8b:1e:44:d9:9d:64:62:1f:
ac:0c:dd:75:b7:e1:1e:eb:50:39:7b:72:50:0c:f2:f7:77:35:
de:ad:4c:30:bc:1d:c0:ed:15:fd:8f:cc:32:e8:b7:c6:8f:34:
2a:d0:bc:2e:4e:0f:5e:91:a6:c3:da:a2:12:e6:ff:03:a0:81:
79:f3:c4:21:1e:79:96:92:29:47:37:11:58:b6:f6:84:81:cb:
b4:cb:31:7f:d1:35:58:36:63:03:ff:e3:d3:96:72:92:49:f9:
63:31:38:65:81:c8:a3:06:49:a4:b0:5b:a3:ed:1c:97:7c:81:
2e:c3:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:23 2025 by rpki-client