Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21DDA8D2D73511EFA1B978A6762E951A.roa
File: 21DDA8D2D73511EFA1B978A6762E951A.roa (raw, json)
Hash identifier: Cwxz3FvLPfILKOr+dQdPHPNo2c08RiV9mxguCjk7iBY=
Subject key identifier: C7:19:D8:F5:BD:9F:15:0A:D5:DF:F7:ED:AA:53:F7:53:BB:54:AC:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21DDA8D2D73511EFA1B978A6762E951A.roa
Signing time: Mon 20 Jan 2025 13:47:47 +0000
ROA not before: Mon 20 Jan 2025 13:47:43 +0000
ROA not after: Wed 05 Feb 2025 13:47:43 +0000
asID: 135097
IP address blocks: 154.91.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81504 (0x13e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:47:43 2025 GMT
Not After : Feb 5 13:47:43 2025 GMT
Subject: CN=678e5403-9b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:2d:0f:87:22:e9:ec:7a:40:22:ba:44:e3:
bc:99:13:f9:9f:74:be:b0:fe:1f:e6:da:35:20:ca:
78:b5:0d:c3:f0:2e:b5:68:d1:d6:b7:74:3d:a4:e1:
31:72:bd:65:44:a6:26:94:d3:9b:66:a8:b1:68:b4:
10:60:15:ab:88:7a:22:87:a1:1b:b9:f5:b4:fe:f1:
e2:09:d7:67:75:cb:30:37:28:5e:fc:cf:50:09:20:
4f:4b:1e:03:ee:5b:b1:3a:2f:47:6d:f7:b9:84:6e:
e7:84:28:70:39:82:67:11:69:ec:d0:ed:d1:03:ee:
66:38:cb:0c:08:43:43:38:48:ef:58:82:79:be:e0:
de:d0:5f:12:b6:fe:fa:8f:1d:26:f9:72:df:4a:d6:
e7:65:9e:40:f6:b2:96:1c:d2:5c:07:cf:a0:bd:95:
a0:6c:17:9c:8b:ad:ea:97:67:ca:fb:61:19:d3:da:
0f:86:cf:9e:c7:fb:75:65:2d:c4:c3:5b:a7:40:7f:
24:13:a1:ff:1b:72:83:d8:b2:7e:6a:d0:8d:28:cb:
51:5f:d6:f1:35:12:82:29:53:38:77:d8:77:51:90:
a4:ad:20:51:8b:35:04:81:21:9f:7c:34:d8:41:a8:
68:d2:a0:7a:25:36:34:8b:64:fe:31:70:27:89:12:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:D8:F5:BD:9F:15:0A:D5:DF:F7:ED:AA:53:F7:53:BB:54:AC:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21DDA8D2D73511EFA1B978A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:cb:51:2d:a2:0e:fc:e7:ec:59:2f:f9:5b:85:f2:4d:06:67:
bf:31:37:4e:bf:8c:de:36:6a:8d:75:36:76:91:51:24:6a:da:
9a:ad:9c:3b:d1:df:54:71:db:41:98:81:6e:82:cf:31:10:97:
ff:c5:35:28:f3:b7:c1:80:91:63:19:b6:53:f1:d0:c5:55:09:
5d:b0:20:13:68:52:77:d9:8a:cd:0c:2b:4f:b0:07:26:ee:aa:
69:e0:79:c5:b8:55:de:59:74:bb:23:63:8f:a0:a2:00:f2:51:
98:aa:00:3d:d6:4d:7b:8b:77:ef:b7:97:14:05:b0:44:83:80:
6d:04:93:0a:ad:0d:7a:b0:f8:1d:ce:ea:ea:f8:43:67:db:0c:
d4:96:c5:b3:28:96:88:30:ec:f5:c2:1e:ab:f3:21:bf:5f:e6:
34:e5:59:0c:ab:e0:c1:9b:b9:dd:32:95:93:71:97:f5:a6:42:
7c:ca:64:af:3e:cc:5c:4b:1e:6f:be:ca:47:77:b4:0a:ea:b4:
6c:7d:af:16:03:a4:3c:ba:93:69:7c:01:ed:fc:7f:ca:29:55:
84:02:06:c0:c2:d5:ee:5a:69:5c:f6:98:3b:ac:21:cd:4a:0c:
96:b9:2c:21:3c:ba:72:b8:a6:b6:04:a1:09:d9:c0:b1:60:a4:
c3:9e:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:53 2025 by rpki-client