Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20794EB2DA0311EFBBA1FD4F762E951A.roa
File: 20794EB2DA0311EFBBA1FD4F762E951A.roa (raw, json)
Hash identifier: t5oPg/wsUIYvq4DItueJVipG2FYcoHDLipJBcmnZgoA=
Subject key identifier: 71:54:22:F7:81:33:6E:63:84:78:20:84:71:50:CA:41:82:35:C8:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01438A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20794EB2DA0311EFBBA1FD4F762E951A.roa
Signing time: Fri 24 Jan 2025 03:27:24 +0000
ROA not before: Fri 24 Jan 2025 03:27:20 +0000
ROA not after: Sat 01 Mar 2025 03:27:20 +0000
asID: 44559
IP address blocks: 154.205.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82826 (0x1438a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:27:20 2025 GMT
Not After : Mar 1 03:27:20 2025 GMT
Subject: CN=6793089c-7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:8f:55:e9:20:03:40:65:54:f3:c1:63:fc:
38:17:74:4c:cb:81:67:36:16:72:ed:cc:7c:e1:4c:
28:35:88:c2:c2:aa:66:3c:dd:5c:a6:f0:dc:ba:53:
71:32:28:0d:f0:43:fd:ff:fe:84:fb:be:53:48:04:
6c:de:28:8e:a7:4f:bc:1e:fe:ff:d1:9f:80:e4:b7:
14:ba:f3:57:85:57:b7:9a:be:56:e2:4f:f5:67:e8:
43:22:06:86:da:6c:dd:ee:13:ab:d5:45:58:cc:6f:
2e:33:bb:a0:a4:3c:00:9f:d2:f0:67:bb:82:34:ed:
e5:e9:15:7b:d0:3a:bb:69:a6:0e:e5:78:29:93:0e:
9b:b4:8c:7a:66:c7:e8:9c:f6:c5:fc:a1:92:8e:85:
b7:4b:44:66:fd:0e:b0:72:79:fd:fd:a6:fd:ca:09:
43:8e:74:55:f0:68:35:b3:da:cf:b9:09:55:8f:59:
63:12:af:69:54:44:60:a9:0d:2f:d3:56:41:66:f7:
16:87:d3:79:88:93:84:12:6e:b3:61:62:82:bf:53:
cf:d4:8d:ca:df:80:06:7a:ea:5d:57:86:50:69:ee:
b8:b3:f8:5e:e9:ce:ef:57:85:49:ec:79:26:9e:8e:
f1:a8:97:ae:3d:c5:b6:a5:a2:16:fc:4a:b7:93:c5:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:22:F7:81:33:6E:63:84:78:20:84:71:50:CA:41:82:35:C8:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20794EB2DA0311EFBBA1FD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:88:90:af:05:3c:f0:f8:a0:60:96:04:25:87:36:ce:79:24:
f6:56:82:ea:2e:9b:3d:cb:fd:b7:0d:b9:2e:b0:63:99:c3:f3:
29:c3:83:94:4a:86:a1:96:da:46:26:3b:67:9a:6e:ed:01:77:
3d:8c:5a:21:ce:32:41:77:b7:48:00:c7:5e:2b:3c:a6:50:0e:
19:66:6b:a5:d1:ab:37:6d:66:b1:3f:fa:19:05:df:28:64:01:
e3:0a:81:9f:c6:16:b0:18:5a:64:fe:d1:07:92:44:df:ef:21:
2f:3f:be:63:8a:27:60:af:17:67:9e:75:9d:76:45:08:e9:11:
04:ee:3d:ae:54:f7:29:b1:94:51:b1:b7:0f:4b:f1:82:b1:e1:
fe:72:63:73:8d:0d:91:19:8f:c4:44:e0:9f:3e:b8:16:10:80:
0c:15:18:63:d7:ad:af:e1:51:f3:c6:ed:e6:04:31:41:3a:6f:
fa:a1:d4:8b:fd:00:62:21:26:d2:07:31:09:70:52:9c:43:1b:
a9:1c:f4:b0:c8:29:10:2f:e8:29:1e:2b:81:49:76:c3:3f:b2:
b0:de:0d:83:b4:05:30:4c:34:5f:7d:aa:a3:0c:08:25:e3:93:
b9:f3:5d:cc:a3:dd:90:29:58:76:92:aa:1a:a3:70:ef:6b:c0:
46:3d:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:49 2025 by rpki-client