Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6C5894CC1511EF9AFC1B54762E951A.roa
File: 0B6C5894CC1511EF9AFC1B54762E951A.roa (raw, json)
Hash identifier: QktD0p6vS+dPX4/hnfbN6EbTzYV0y10FKjO4gH1eZAw=
Subject key identifier: C6:49:51:0F:D7:22:FF:81:54:CD:35:1D:D2:B6:15:40:F6:B1:1D:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6C5894CC1511EF9AFC1B54762E951A.roa
Signing time: Mon 06 Jan 2025 10:00:23 +0000
ROA not before: Mon 06 Jan 2025 10:00:19 +0000
ROA not after: Thu 06 Feb 2025 10:00:19 +0000
asID: 200373
IP address blocks: 154.213.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79296 (0x135c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 10:00:19 2025 GMT
Not After : Feb 6 10:00:19 2025 GMT
Subject: CN=677ba9b7-d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:c1:83:d4:2f:2f:8f:42:15:b0:02:f7:66:
0d:7b:a3:e8:33:45:8b:ce:34:97:8f:7a:9b:95:83:
4b:b5:35:39:4d:df:65:6c:df:f9:37:65:19:89:b3:
40:90:7e:82:b3:d3:a0:5e:81:73:9d:c2:1d:93:32:
89:5d:04:36:0f:92:76:41:04:9d:2e:12:1a:51:24:
f5:d4:67:85:39:f0:59:90:30:43:c9:66:45:28:cc:
44:77:34:e3:dd:b1:6f:20:f9:39:1b:b4:43:76:fe:
a8:52:14:50:af:e7:5f:d3:01:40:fe:1f:3d:65:9d:
b2:b2:40:8e:2a:20:45:3b:db:11:ad:72:85:fa:72:
50:eb:45:c6:98:83:fa:4b:b8:d5:bd:0a:0a:56:a0:
3e:77:52:cc:2a:90:70:ce:4f:30:a6:14:aa:70:47:
9c:2f:33:02:d5:37:67:14:1f:af:24:97:ad:4a:1f:
01:6b:5d:c0:20:c4:cb:63:1e:bc:ac:74:a3:c6:ae:
b8:cf:7a:0c:3a:30:16:d6:d0:9a:28:44:9e:30:53:
d2:64:50:8a:5e:4d:b2:ec:8e:8e:de:09:bc:04:53:
78:1f:91:79:ef:b7:77:4e:68:88:59:0c:fb:59:b9:
9a:5b:e3:c4:0c:b2:6c:1d:3e:62:d9:ee:f3:09:25:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:51:0F:D7:22:FF:81:54:CD:35:1D:D2:B6:15:40:F6:B1:1D:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6C5894CC1511EF9AFC1B54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:8a:f8:7e:74:c9:6d:54:c1:21:cc:53:db:09:15:1b:cf:17:
33:86:8d:93:ca:20:58:2f:0e:50:35:07:64:2a:cc:03:7a:a2:
19:0f:34:cb:8b:9f:5e:17:12:eb:94:88:41:93:ef:dc:87:f0:
88:6c:3d:97:34:3f:1d:52:49:78:e1:26:f1:7a:3f:37:43:bb:
fa:2d:cd:5b:97:c7:2d:08:c6:49:47:14:03:40:bc:48:76:5e:
7f:e2:0a:0f:4b:a9:87:94:6d:b7:ae:12:d6:cc:8c:a9:1e:5a:
99:09:da:0b:2e:b0:22:da:33:23:3d:da:ea:e5:db:ff:41:05:
03:e3:d3:60:48:07:e4:cf:cd:81:10:eb:19:2c:49:bd:86:29:
28:3e:b3:e2:1a:54:d9:71:e1:19:a9:a1:ff:c6:7d:30:2e:91:
f4:92:ba:52:da:4c:da:97:09:9f:75:4c:f5:96:8a:28:82:b2:
7e:00:da:7c:5e:13:84:a0:c4:c5:25:3a:df:3f:5b:07:53:ba:
90:9e:fa:11:fc:7e:bc:db:1c:67:44:ba:9b:89:e8:8d:03:cc:
dc:6e:34:43:8b:2b:0f:dc:f3:74:eb:cf:48:53:83:35:8b:fa:
f1:d2:44:38:a3:2e:d3:7b:ba:18:ab:2d:07:44:79:6f:c7:6e:
df:17:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:40 2025 by rpki-client