Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2534AE44D8B211EF8E4DFD6D762E951A.roa
File: 2534AE44D8B211EF8E4DFD6D762E951A.roa (raw, json)
Hash identifier: MSsHrJF4cGMxyIrHdvHncxNcDp7sLms8CfnnoRAGOHg=
Subject key identifier: DB:93:4B:B1:84:F5:DE:D1:67:6C:A3:F3:8E:F4:50:16:E5:CD:D0:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2534AE44D8B211EF8E4DFD6D762E951A.roa
Signing time: Wed 22 Jan 2025 11:15:11 +0000
ROA not before: Wed 22 Jan 2025 11:14:59 +0000
ROA not after: Sat 08 Feb 2025 11:14:59 +0000
asID: 18229
IP address blocks: 154.206.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81652 (0x13ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:14:59 2025 GMT
Not After : Feb 8 11:14:59 2025 GMT
Subject: CN=6790d33f-b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:67:a8:68:a7:4d:08:f7:d6:7f:59:79:e1:
1b:5c:7e:4a:01:37:c4:fc:be:88:0d:9e:37:bd:00:
1f:87:13:0f:85:fb:2c:50:2e:cb:78:4f:08:04:ed:
d3:f3:5d:f8:b4:fd:ec:62:b1:83:89:69:c2:09:0c:
fa:7c:92:ee:18:1d:56:22:0b:71:96:c9:f6:74:06:
0c:c4:64:73:1c:10:af:ee:4d:bc:c3:47:1b:0f:b6:
6f:8b:ab:f1:6d:1b:90:84:cc:a8:08:54:88:8e:f9:
94:70:66:21:f1:06:91:11:24:47:a8:aa:0d:f5:ed:
0d:15:87:df:61:18:ad:e2:8c:81:b8:6c:4b:a1:99:
f3:9c:46:dc:e5:d3:16:e5:5d:7d:82:91:5f:6b:d3:
c9:4a:66:47:e2:0b:3a:bb:ce:7d:7b:36:44:4c:76:
62:06:e6:86:3c:b8:75:4f:a4:d9:95:d1:55:3d:2a:
4f:14:f9:6f:eb:01:bd:4d:5c:07:26:7b:b6:0e:68:
d7:37:ef:d6:a0:15:58:79:08:4c:62:0a:29:c5:39:
ce:d0:a5:3d:07:a0:51:96:2a:13:0e:b3:37:b7:b8:
83:ed:62:af:66:ff:36:66:7f:ee:86:6d:da:09:a2:
0f:be:99:21:2a:72:d7:13:5f:6e:20:f6:cb:b8:71:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:4B:B1:84:F5:DE:D1:67:6C:A3:F3:8E:F4:50:16:E5:CD:D0:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2534AE44D8B211EF8E4DFD6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b5:2d:66:02:fc:fd:fa:bd:e8:8f:57:a7:9e:36:b5:0d:76:
a6:ed:c1:d3:48:70:bf:08:24:6f:bb:b8:0b:3b:21:70:6e:ab:
96:62:d8:af:c1:6c:8f:17:fc:62:b8:03:ef:d7:1f:8b:db:2f:
64:a6:b7:4e:fa:cb:0c:52:91:84:48:1a:4a:ae:7d:b1:34:10:
21:f3:77:e6:a6:81:af:3a:21:c4:61:6f:a5:90:9a:68:85:3d:
b4:f9:df:fa:5b:f3:a8:3b:ea:18:8f:bf:4a:ab:52:fb:dc:86:
fe:96:1e:8f:f3:de:ab:ea:65:7b:c7:d8:a3:80:b3:d0:8f:a3:
29:06:e8:ac:2f:50:09:48:2e:82:a5:dc:12:af:4d:2d:b4:28:
47:9e:4e:ec:f3:43:ef:3b:70:9a:94:00:f9:3c:3f:d7:f5:c4:
b9:7f:a6:47:c4:1f:0d:dc:fb:9e:e7:b0:7e:8f:ea:77:af:10:
c3:e4:b5:2b:2e:c8:7c:d6:38:3c:19:ab:21:f5:37:a8:48:18:
20:9b:53:f6:cf:1e:51:ac:25:45:f9:2c:e5:42:2c:e6:5e:65:
26:70:bf:15:a2:3d:40:4f:24:37:11:c8:19:5f:73:e7:10:fa:
1c:3f:69:61:06:b6:b6:ef:c0:49:a6:af:3e:96:6e:02:4d:c3:
de:11:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:58 2025 by rpki-client