Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED5B2FAD3FE11EFB690F496762E951A.roa
File: 0ED5B2FAD3FE11EFB690F496762E951A.roa (raw, json)
Hash identifier: kdVnWcsjROi/emXUoy/VpyjQpn8B+l9GpjLUSpUfErM=
Subject key identifier: 8F:B1:B9:69:E6:91:2F:DE:C8:19:1F:F8:B0:5C:3D:4F:11:E8:2F:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED5B2FAD3FE11EFB690F496762E951A.roa
Signing time: Thu 16 Jan 2025 11:36:00 +0000
ROA not before: Thu 16 Jan 2025 11:35:56 +0000
ROA not after: Sun 16 Mar 2025 11:35:56 +0000
asID: 17561
IP address blocks: 154.206.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80892 (0x13bfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:35:56 2025 GMT
Not After : Mar 16 11:35:56 2025 GMT
Subject: CN=6788ef1f-13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:be:13:12:a7:75:cd:8a:6f:8d:c8:d1:9e:
c1:9f:8b:cd:b4:20:cf:75:74:c5:0b:8b:f6:53:ca:
d2:e9:08:27:02:18:62:7b:44:25:6e:f5:71:dd:40:
71:d1:74:9f:88:f3:1e:1e:45:00:f0:9b:87:a1:9b:
93:9b:a1:7f:31:b1:25:59:1c:0c:95:39:1c:44:0e:
12:6d:63:db:86:8b:c1:43:32:8f:72:53:ea:62:ae:
17:2a:d8:55:a5:da:70:2d:0b:fd:70:c3:71:e4:44:
8e:e2:1c:af:f7:74:d7:f6:e4:d6:8c:dd:87:7b:90:
0f:90:ec:f6:66:9f:05:74:c2:54:4a:8e:ed:84:6d:
30:70:88:bb:93:d7:8d:06:58:9d:e8:f7:7a:7a:e0:
49:c8:4d:71:4e:68:2d:43:a9:82:c0:c9:5a:ef:5e:
55:51:06:52:8f:be:9c:7c:d6:0b:d5:2d:19:9a:2d:
0d:91:25:bf:0c:77:92:cd:a8:48:5f:fb:21:44:e8:
40:c5:b7:ea:2e:04:cc:91:49:fc:be:b2:b4:37:6c:
51:ea:c3:b8:1c:d4:88:96:3e:a9:5d:0f:f5:d4:0e:
70:bb:f4:bd:e2:87:c3:b9:20:77:4a:02:c3:57:33:
3c:80:89:02:dc:59:ca:59:5a:6c:0c:5c:2e:73:97:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:B9:69:E6:91:2F:DE:C8:19:1F:F8:B0:5C:3D:4F:11:E8:2F:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED5B2FAD3FE11EFB690F496762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:bf:48:7c:9a:eb:f5:62:ff:b8:b7:4b:9d:35:a7:42:01:02:
99:91:bf:8c:4c:d5:9a:4f:6c:34:e0:93:d8:a3:09:4a:79:69:
d7:8b:ba:d0:d6:88:e9:be:55:71:89:d5:59:ff:9c:c4:96:a7:
28:88:e4:21:fa:db:27:c2:19:b0:8a:4d:66:9a:01:39:05:32:
80:14:df:b2:b5:79:13:2f:9c:92:f2:58:e4:32:7a:09:44:b3:
0e:dd:e5:d7:59:05:0e:00:d7:f2:5f:42:e1:33:a6:9e:41:a5:
28:79:46:f0:c9:ee:00:7c:0a:e7:97:1c:ec:2b:dd:4c:95:06:
1e:bc:19:ea:f8:73:39:2d:9c:ce:bb:a4:63:12:dd:ba:99:46:
da:3d:36:c6:7d:43:58:68:4e:b9:48:5d:ce:a6:98:ae:29:a9:
85:44:af:da:30:75:17:41:25:21:61:b9:f6:5e:b3:49:6f:aa:
ea:5c:d5:76:0c:29:fa:45:5c:fc:2f:62:a4:70:44:e8:3e:ae:
c4:d6:77:1f:bb:ba:b3:3b:a9:ef:db:32:3c:6e:f8:8c:7a:99:
da:b4:e5:a6:e0:58:eb:51:c0:10:d9:16:94:bc:bb:93:bf:ec:
ad:92:5c:c5:6b:8a:73:60:74:70:4f:2a:cd:85:57:1a:e5:1c:
46:29:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:51 2025 by rpki-client