Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5ECB0EDE1711EFA655AC59762E951A.roa
File: 0E5ECB0EDE1711EFA655AC59762E951A.roa (raw, json)
Hash identifier: cVf87q84k6S31S7x8gsrU6Qh7/78CiKW4Yt4zOLXgrU=
Subject key identifier: 1E:81:48:E2:5D:6D:05:B6:0A:E1:18:5E:40:02:CD:68:06:BF:46:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5ECB0EDE1711EFA655AC59762E951A.roa
Signing time: Wed 29 Jan 2025 08:00:08 +0000
ROA not before: Wed 29 Jan 2025 08:00:04 +0000
ROA not after: Wed 05 Mar 2025 08:00:04 +0000
asID: 203020
IP address blocks: 154.204.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85310 (0x14d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 08:00:04 2025 GMT
Not After : Mar 5 08:00:04 2025 GMT
Subject: CN=6799e008-7ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:79:5f:bb:7a:f5:33:69:3f:5b:70:aa:fd:
c2:e1:fe:af:7f:1b:9c:c0:e0:60:90:23:6c:a3:8b:
b9:27:f9:98:05:0f:ae:3a:f9:d3:8f:a1:af:c7:7f:
4f:4c:bb:22:a7:9f:49:80:7f:80:76:67:1d:4c:60:
d4:c4:93:45:ac:55:d2:83:63:88:ed:f9:54:da:16:
d2:0a:e9:7c:e0:5d:bf:dc:e9:87:2b:2a:0a:94:09:
83:13:83:31:70:d7:55:03:6d:57:90:94:a4:b3:dd:
3c:d1:4d:e4:3c:14:c6:c6:fe:40:72:2b:e9:72:76:
2e:bb:da:a3:eb:17:3f:1f:21:e5:a0:d0:66:25:59:
07:b6:24:4d:7a:d5:eb:73:a3:fd:94:3c:d4:44:17:
37:b6:ab:0f:02:23:c3:fb:91:5a:a1:2f:bb:da:c4:
87:73:ce:21:dc:75:9f:a5:27:e1:3c:3f:2e:b2:4f:
9f:17:60:1d:b0:01:0e:b8:4d:9b:9a:98:a4:11:8b:
98:45:91:da:f6:24:20:5d:20:9b:ad:f3:1d:43:73:
9c:57:c7:b5:2b:46:8c:ea:00:29:ec:36:b8:d9:d3:
de:a2:14:ee:3e:26:8e:ba:6a:f8:05:89:f1:a2:28:
20:f9:f9:01:b8:c2:80:16:db:52:5b:ac:59:d8:1e:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:48:E2:5D:6D:05:B6:0A:E1:18:5E:40:02:CD:68:06:BF:46:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5ECB0EDE1711EFA655AC59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5e:fe:b8:8c:ac:24:f0:70:82:ad:39:85:69:16:1b:a7:5d:
77:0f:8b:c1:25:91:f0:b5:fc:08:58:eb:11:ae:4c:d3:e3:bf:
e2:a0:7c:2b:28:b8:2c:30:4b:83:52:5d:07:f8:92:55:e5:86:
3e:45:a9:50:9f:cd:52:74:3f:cf:31:c9:63:59:72:b8:bb:e0:
3c:a5:fe:5a:04:40:dc:f6:9c:39:00:26:5a:00:ea:d0:cd:2e:
6c:4a:cc:c0:6f:aa:03:a9:47:4d:cf:80:a4:cc:4a:36:3b:92:
6a:12:77:62:5c:05:63:9b:16:e9:24:a6:62:45:d3:19:52:91:
5f:7d:f9:e4:df:d2:35:3c:94:f0:ab:e1:eb:b5:48:4a:0b:96:
0a:55:0a:1d:08:5f:80:c4:f9:f8:90:3a:64:80:73:ee:e0:63:
38:91:68:83:6a:7d:8e:9c:40:25:a0:36:e1:35:28:13:66:5d:
63:fa:4a:3f:3b:61:e1:47:5d:0c:c5:a9:b5:69:d2:68:97:dc:
5c:47:e2:02:88:34:09:10:62:c2:d4:6f:a7:c4:68:47:57:a9:
70:db:b5:20:33:22:60:86:af:d2:a7:02:de:df:79:82:ef:ff:
03:d3:f3:d5:c8:94:82:05:af:2d:d0:be:03:bf:90:21:8e:b7:
87:2b:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:49 2025 by rpki-client