Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0560607ADCA611EFA35A5999762E951A.roa
File: 0560607ADCA611EFA35A5999762E951A.roa (raw, json)
Hash identifier: ODLc+6/CqOHLtzpb0vOZ+q6M9E40dMfpwWwzgDR3Sjs=
Subject key identifier: 2A:18:F7:E4:DE:CE:84:F6:C9:ED:AE:76:B2:46:34:98:B9:E0:27:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0560607ADCA611EFA35A5999762E951A.roa
Signing time: Mon 27 Jan 2025 11:58:28 +0000
ROA not before: Mon 27 Jan 2025 11:58:25 +0000
ROA not after: Sat 08 Feb 2025 11:58:25 +0000
asID: 212238
IP address blocks: 154.202.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84973 (0x14bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:58:25 2025 GMT
Not After : Feb 8 11:58:25 2025 GMT
Subject: CN=679774e4-322e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:0e:3b:a2:0a:a1:27:93:59:99:52:7f:7e:
8e:09:ec:a1:5e:56:27:10:fd:be:05:c8:16:83:4a:
65:91:82:e1:09:6e:24:a1:ed:7e:5d:61:f4:bb:ef:
71:f8:08:75:06:14:54:0c:a7:7c:5d:38:63:42:28:
6f:73:8f:45:3f:05:f7:c1:78:da:73:03:97:da:ed:
16:56:d4:d1:3b:1f:ec:b0:24:6d:04:fe:7d:d6:71:
56:3f:9c:d6:d6:47:f6:79:ca:6b:04:7e:f2:ad:27:
47:bb:1b:64:f4:69:6b:b2:1d:6b:98:7d:4d:e8:a7:
85:27:b5:b8:6a:70:fa:af:5f:13:32:9b:54:8d:6f:
f3:67:be:a5:31:65:b3:a1:24:93:8c:5b:26:cd:91:
42:c7:3b:b4:fb:8d:87:01:fe:48:76:d8:d0:88:24:
69:a9:86:4d:d6:df:d7:8f:c9:77:03:82:e0:be:5d:
a0:e8:29:62:cd:a9:95:a5:91:68:ad:cb:e7:fb:bd:
f4:82:e7:bf:98:bf:35:07:f0:59:f2:c0:44:05:86:
80:9b:89:eb:0d:b7:d7:76:cf:97:2f:b9:98:79:93:
75:58:59:fc:24:e0:3f:02:3c:eb:83:e3:39:21:03:
55:b5:59:65:14:cf:e6:af:cc:00:b7:a7:1d:d6:2f:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:F7:E4:DE:CE:84:F6:C9:ED:AE:76:B2:46:34:98:B9:E0:27:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0560607ADCA611EFA35A5999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.27.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e2:f3:bb:e0:4a:19:2d:90:74:7b:48:ce:bc:30:a2:7b:bb:
4c:aa:34:4d:a7:f5:4d:83:c5:e0:28:69:e5:82:ea:2c:bd:b3:
c5:41:42:d6:9a:66:05:33:b4:8c:9b:ea:10:d4:55:c7:4d:d8:
35:ef:8b:fe:47:82:5c:09:a2:d5:40:a2:a4:ad:fa:77:fc:bb:
07:b2:13:8b:97:46:36:11:12:27:4b:26:6e:10:ff:8a:1c:98:
20:ec:66:19:c6:d7:9d:57:e1:b6:a1:8d:3d:d6:02:78:1b:b6:
89:12:9a:57:1a:8a:62:c5:b7:86:25:8a:06:7a:c9:57:bf:28:
1b:91:e9:47:0d:7b:94:80:d9:0f:33:f5:b1:18:0c:80:f8:76:
89:ab:2a:d2:94:6e:9f:f5:22:2f:4f:cc:f8:be:2b:01:fe:ff:
af:96:04:53:f6:86:ff:d9:90:bd:d1:54:b9:92:3c:c0:52:e4:
59:ae:31:55:8e:74:90:79:86:28:0b:45:d1:1d:8b:cc:b3:d6:
1f:c8:96:df:30:54:d5:a9:f0:26:fc:19:57:d7:5d:84:18:40:
cb:e2:fd:a1:97:c4:af:a0:26:e2:92:34:14:76:26:c0:2c:a7:
11:55:a5:61:59:ab:3f:46:79:6c:05:fe:1c:b4:21:e8:90:6e:
fc:e8:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:08:03 2025 by rpki-client