Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8F9C26DE2611EFB4D553BD762E951A.roa
File: 1C8F9C26DE2611EFB4D553BD762E951A.roa (raw, json)
Hash identifier: Y6mBEnaTjCCvZbDDIOjuqzZuOQXDobyES8QSL0auYbM=
Subject key identifier: B1:CB:61:F8:81:3F:7B:F3:03:24:83:96:1B:A3:10:50:9D:C1:8D:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8F9C26DE2611EFB4D553BD762E951A.roa
Signing time: Wed 29 Jan 2025 09:47:54 +0000
ROA not before: Wed 29 Jan 2025 09:47:50 +0000
ROA not after: Fri 28 Feb 2025 09:47:50 +0000
asID: 395793
IP address blocks: 154.193.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85366 (0x14d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:47:50 2025 GMT
Not After : Feb 28 09:47:50 2025 GMT
Subject: CN=6799f94a-1acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b9:db:86:68:4f:fc:96:84:c8:41:d4:dc:f2:
19:44:93:20:61:52:38:e9:95:01:17:90:23:f8:83:
b2:1b:71:59:02:6d:a1:a1:26:38:a2:14:1d:94:65:
3c:6a:af:6b:cd:27:86:0f:d0:67:66:9f:7e:bb:46:
07:63:de:36:d1:b8:eb:29:2c:e2:58:54:59:6e:2c:
eb:d2:32:56:7e:b9:06:8d:2a:1d:f1:85:50:f3:59:
e7:4c:f0:de:c4:14:fc:dc:d2:a3:85:e2:76:37:b2:
61:b1:09:f6:25:ed:54:ec:0f:f2:59:3b:da:9c:d2:
78:20:8b:25:bf:7e:19:52:31:d3:93:87:a1:c4:10:
5e:65:3b:f5:22:f7:5d:3e:1b:d9:65:77:35:dc:96:
75:4e:83:23:d6:5e:9f:a2:4c:59:56:e8:c7:00:55:
ad:5e:b1:de:97:78:65:56:f2:5f:9f:06:26:35:1e:
48:52:24:26:d8:e5:2f:e6:ef:80:de:7b:fe:c7:3a:
5b:8f:b7:b8:82:e8:fe:57:f3:00:0c:50:72:32:bd:
f0:f3:aa:45:b3:3f:29:12:3f:7a:9b:71:67:ba:94:
4f:f8:aa:7c:23:55:dd:22:a3:29:fd:1f:42:83:f4:
dc:8c:40:f9:37:69:c4:9d:35:82:1c:40:39:7d:6a:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CB:61:F8:81:3F:7B:F3:03:24:83:96:1B:A3:10:50:9D:C1:8D:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8F9C26DE2611EFB4D553BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.107.0/24
Signature Algorithm: sha256WithRSAEncryption
28:44:07:fe:a3:e6:16:ac:ec:65:3d:54:03:20:8a:db:84:ce:
b3:df:b9:06:9c:3a:34:40:5d:dd:f1:2b:58:5b:78:d4:3d:c5:
55:8d:fe:a9:f2:ab:0a:29:d3:78:27:23:a1:4e:19:b4:b8:1b:
19:af:0f:66:c6:86:da:51:23:23:10:98:c5:b2:ae:ff:c6:69:
59:d7:31:6d:44:19:c9:55:fc:c4:83:97:c8:ef:5f:e9:1f:7a:
fd:75:a7:c9:66:0e:e2:d3:f5:13:2d:6c:6d:4c:b6:14:16:7c:
13:9a:3f:83:c5:eb:dc:fc:24:86:9b:44:42:6e:08:7f:5d:9e:
04:71:f3:b6:62:6e:a1:6e:d0:83:51:fb:01:3b:36:aa:e8:c0:
db:54:f0:57:b9:df:4c:a3:1d:0f:b2:86:32:6e:79:ec:d1:ab:
c5:20:f1:56:1c:aa:5b:52:4a:2c:54:f0:ca:78:32:bc:1d:27:
48:e0:77:c8:87:2f:78:d6:55:66:ac:76:f9:92:6e:bc:33:c7:
99:ff:94:d3:fa:1f:34:b6:92:48:57:eb:bc:04:20:c4:c6:98:
2e:df:f2:56:0a:cd:1d:44:65:c6:7b:c6:7b:da:ea:16:4d:c7:
6a:d0:95:ce:45:4a:9e:9d:71:9d:d6:a0:ae:98:da:13:3c:6e:
f5:04:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:59 2025 by rpki-client