Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8A30A6DE2711EFA2EAE343762E951A.roa
File: 0C8A30A6DE2711EFA2EAE343762E951A.roa (raw, json)
Hash identifier: duok01t6iGs0uv0HkPqj7Hbchn3O2PSWwrxRDo77JYA=
Subject key identifier: D6:D5:88:F5:21:6B:B3:86:F0:BE:D1:27:83:0B:7F:34:DE:7B:E4:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8A30A6DE2711EFA2EAE343762E951A.roa
Signing time: Wed 29 Jan 2025 09:54:37 +0000
ROA not before: Wed 29 Jan 2025 09:54:33 +0000
ROA not after: Fri 28 Feb 2025 09:54:33 +0000
asID: 395793
IP address blocks: 154.193.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85372 (0x14d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:54:33 2025 GMT
Not After : Feb 28 09:54:33 2025 GMT
Subject: CN=6799fadd-838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:f3:23:0c:f9:a8:57:29:c4:48:9e:d0:5e:
e2:6b:61:34:05:bd:84:d1:25:d4:bf:50:94:c6:c6:
20:68:83:d7:2a:4b:7e:d2:b4:89:36:51:44:b9:a5:
f0:f1:51:9d:75:ca:41:2a:e9:04:41:15:bf:79:b4:
dc:ff:b8:4b:30:56:1c:d6:5c:32:54:6d:fc:0f:18:
ac:7b:67:c1:e3:29:1c:37:cf:67:8a:3d:82:c9:93:
b1:58:62:8c:fd:4e:6b:43:47:7f:be:c7:ee:d4:ad:
aa:50:34:dd:4b:30:86:ab:60:a4:54:ec:0a:d3:79:
60:4c:db:cb:c6:8d:91:dd:51:ef:fb:fc:fe:ef:c6:
ae:8a:f7:41:bc:49:9c:ed:48:00:b9:76:53:69:eb:
58:15:92:96:d6:ec:b7:e1:1a:45:f2:17:47:0e:7d:
66:57:a0:bc:27:66:f9:78:f8:00:6f:4d:db:95:1f:
6b:19:70:c9:a7:84:c2:8d:b9:5d:b2:d9:c2:bd:28:
1e:81:63:3f:b2:68:f9:af:01:1e:1e:52:25:21:0b:
d1:99:0d:3a:6f:6e:02:26:bf:95:78:ad:e7:dc:98:
3f:27:8f:94:4c:cc:16:73:b9:1d:ce:ed:24:7d:b2:
3b:a3:01:2a:a0:7c:9f:7f:68:e1:74:f2:94:bd:00:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:88:F5:21:6B:B3:86:F0:BE:D1:27:83:0B:7F:34:DE:7B:E4:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8A30A6DE2711EFA2EAE343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fb:9b:f5:81:75:93:0a:26:f2:fd:d3:be:23:59:da:0c:a3:
15:53:3f:28:20:ed:25:13:51:99:bd:08:b9:5b:2c:37:66:b3:
38:64:cc:0c:29:ef:e5:36:fc:7a:c8:a7:43:ca:64:17:2a:0b:
1d:d4:60:39:e1:58:26:24:46:e7:cd:8d:29:06:b0:7d:e8:cf:
e2:d2:0b:f9:eb:56:2f:0f:bb:eb:b0:95:95:e9:54:85:99:46:
5b:c2:97:16:a6:35:0b:e4:52:99:ca:58:42:15:9a:f0:f1:cd:
0e:3a:69:e5:00:07:02:19:96:3e:75:48:45:d5:11:7d:d0:63:
ea:d4:77:8b:a2:cc:96:62:98:5c:33:e1:91:e2:4f:88:2a:57:
ce:74:69:2e:bf:1d:4d:43:82:a6:38:a6:32:48:79:9c:72:83:
d1:7a:e8:5f:79:a0:4a:ff:db:96:9d:ed:63:01:7d:32:37:03:
9f:c6:21:c6:6f:41:5d:db:b5:92:68:90:95:70:f1:6a:e1:f1:
5a:74:2d:54:7d:4f:39:ed:13:c4:cb:f2:7a:41:82:98:c9:08:
54:ef:d9:d8:2e:5a:26:15:ad:29:27:14:a7:8f:33:10:90:84:
a1:53:5d:45:a2:d8:00:6d:fa:36:a5:6d:07:76:20:d1:75:e0:
b5:70:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:53 2025 by rpki-client