Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003DF060DB2711EF80057183762E951A.roa
File: 003DF060DB2711EF80057183762E951A.roa (raw, json)
Hash identifier: 0m/uQis2pXbO57DZUZOAVnthN8gF34nc9bJ/QtKAukg=
Subject key identifier: E3:86:5A:78:A5:7A:E0:20:D8:22:93:97:97:F2:A1:99:C5:C9:73:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003DF060DB2711EF80057183762E951A.roa
Signing time: Sat 25 Jan 2025 14:16:43 +0000
ROA not before: Sat 25 Jan 2025 14:16:39 +0000
ROA not after: Tue 04 Feb 2025 14:16:39 +0000
asID: 5065
IP address blocks: 154.207.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84431 (0x149cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:16:39 2025 GMT
Not After : Feb 4 14:16:39 2025 GMT
Subject: CN=6794f24a-b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:b1:6a:e2:a3:db:1f:a3:69:b7:85:d1:5f:
af:aa:e7:8f:d8:fd:c9:c6:9e:56:da:8b:84:76:c6:
5c:66:34:af:99:8f:99:04:f6:0b:38:14:ac:36:db:
6d:d0:b1:06:30:7a:95:6e:d3:ec:46:8f:60:98:fe:
80:d0:d2:12:84:f9:8e:4c:99:8e:7f:0e:6f:3b:33:
52:db:00:3e:eb:70:1f:8a:1d:10:a5:f8:78:cc:92:
f5:cf:98:04:1e:9f:4d:57:b8:18:df:d8:e0:96:31:
ba:e9:0c:f1:67:43:d3:da:87:1a:fc:25:9b:e7:52:
e1:08:46:06:5b:e7:8a:6f:8d:d6:39:ca:09:52:5f:
e1:0c:45:b4:2a:63:83:cb:40:f9:74:e8:00:41:5f:
bc:ad:88:17:3c:92:8a:af:2e:67:db:e0:b2:e9:dd:
5a:e4:05:60:10:9b:87:1c:c0:7a:2d:48:a3:cd:26:
a9:6f:ca:28:8c:fb:ba:5d:a2:4e:3d:83:cf:17:8c:
2c:a9:64:15:c9:18:ef:a8:7d:dc:c3:89:c3:0d:bd:
59:42:8e:e1:ab:d0:a2:76:bd:4d:b0:69:cf:d2:b4:
a9:07:83:1f:a0:96:83:e0:08:41:65:d6:07:d6:b8:
8d:cc:41:fd:e4:33:92:5c:13:f5:03:9d:3a:2c:3b:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:5A:78:A5:7A:E0:20:D8:22:93:97:97:F2:A1:99:C5:C9:73:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003DF060DB2711EF80057183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.146.0/24
Signature Algorithm: sha256WithRSAEncryption
89:89:9a:a1:67:be:55:5a:cf:8d:3f:b2:82:73:f6:06:04:80:
7c:73:7c:b8:4b:29:02:c8:de:fb:3d:8f:a9:f0:a0:ee:55:5f:
3e:55:e0:d3:3a:62:19:28:b9:50:2c:06:73:ca:42:73:4d:cf:
7f:b3:53:db:91:be:44:52:fa:c0:66:4b:15:f3:ff:85:85:d5:
a1:88:b0:2d:16:c5:49:8e:33:cd:1c:b3:0b:f4:d0:65:a9:2a:
e6:4a:64:44:f7:d9:61:d7:33:a3:1b:ab:53:48:66:bc:84:6b:
2b:3b:78:40:ca:2a:94:27:c0:aa:3b:01:fe:1f:19:d6:20:6b:
1c:ac:e4:45:5c:f6:d2:34:c6:ae:cf:ce:21:25:82:67:87:30:
cc:90:f5:d3:7c:24:ae:ba:25:84:e2:e5:06:bb:4f:5d:e1:d6:
9e:6f:bd:70:48:7f:7b:8a:04:dd:be:cf:d2:6a:dd:03:6e:82:
71:c7:44:ef:bc:fc:c2:76:19:b6:f4:c3:9b:e8:27:89:fb:0f:
78:20:5d:7c:d5:08:a1:6a:ef:71:56:eb:10:07:13:e9:30:ad:
1c:8a:da:53:3d:f1:84:84:24:43:98:77:1b:26:3f:7c:8b:12:
ca:65:83:e7:f9:25:61:d3:ed:fa:8b:6b:09:3d:96:b5:ad:4c:
6e:70:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:55 2025 by rpki-client