Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260F8A22DCC311EFAD16CA5A762E951A.roa
File: 260F8A22DCC311EFAD16CA5A762E951A.roa (raw, json)
Hash identifier: VulSLhThi+HoONpKNtGCKW3iLk1iyHCPGnY1ImN3l/Q=
Subject key identifier: 1B:41:82:74:59:B1:1E:6C:72:C7:5B:F7:3D:EC:B5:10:CB:73:82:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260F8A22DCC311EFAD16CA5A762E951A.roa
Signing time: Mon 27 Jan 2025 15:26:59 +0000
ROA not before: Mon 27 Jan 2025 15:26:55 +0000
ROA not after: Tue 11 Feb 2025 15:26:55 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85057 (0x14c41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:26:55 2025 GMT
Not After : Feb 11 15:26:55 2025 GMT
Subject: CN=6797a5c3-4ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:91:42:73:e3:dd:8e:78:0b:12:f1:66:88:
33:e2:d5:86:e9:87:8e:b5:64:b4:f5:e4:c0:a0:bc:
34:09:c6:b0:08:35:80:06:af:b0:5f:94:69:17:a2:
93:10:a7:4d:15:cb:8b:dd:74:19:f8:6c:ef:13:a9:
c3:e6:82:f5:61:4b:cc:fa:8b:68:da:df:ff:8d:39:
cd:d3:f2:71:32:7a:e5:fe:78:92:be:da:fe:0f:83:
ee:87:57:1d:1d:bc:7f:78:6c:cb:af:b8:4c:96:3d:
16:f5:fa:a4:9c:81:20:b0:77:73:64:ad:f1:ac:1c:
12:1b:e9:aa:b4:47:e7:64:e8:7e:42:cd:89:80:35:
e3:01:c2:f3:e8:91:0e:dd:c4:8c:2b:fd:e1:74:85:
18:bf:8c:75:80:d4:42:4c:67:8d:5d:45:88:fe:58:
62:0c:4e:0d:31:45:ef:07:c5:c6:f7:63:c9:37:5d:
77:3f:91:dd:11:e6:39:db:16:46:64:c9:b8:5e:07:
91:f4:09:60:86:cf:63:e7:0a:f0:09:42:3a:b5:a3:
2f:ef:4c:91:5d:fd:76:0d:31:30:a2:5d:84:bc:49:
0f:cb:9b:1d:8a:cf:dc:54:9b:5a:9d:a9:75:84:ad:
c7:fd:20:ce:c5:83:a4:9e:67:56:08:0a:3b:9a:a1:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:82:74:59:B1:1E:6C:72:C7:5B:F7:3D:EC:B5:10:CB:73:82:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260F8A22DCC311EFAD16CA5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:9b:be:e9:72:49:01:83:cf:04:da:f5:7e:36:01:eb:10:a3:
0f:99:47:f0:01:27:a2:8b:17:20:4e:5f:ef:5d:db:87:3f:40:
cb:14:f1:d4:dd:69:b6:4e:5e:29:cb:31:97:f6:e0:bd:e7:47:
06:d4:ae:da:f6:c1:ca:1a:b4:17:93:2e:d9:3a:71:46:36:c2:
a4:7d:8e:8e:4e:ab:ab:37:1a:0f:5d:95:2a:22:a3:6b:00:e4:
01:3b:c5:5a:ca:f4:44:10:b3:f7:c3:89:a4:5b:e1:b2:91:45:
41:1f:85:de:76:c9:09:d1:98:e3:09:9e:8a:ef:a6:91:a8:e5:
ab:3e:cd:13:9e:05:75:14:65:12:8c:16:cb:21:aa:f4:c7:14:
3c:90:c7:f3:e4:9e:32:5d:9b:eb:78:96:b7:47:c7:df:ff:09:
a5:ed:64:fe:7c:5c:60:23:e4:9c:20:ba:4d:ee:6f:e3:c7:1f:
2c:1b:01:c4:f6:af:dc:8e:40:3d:7a:81:f1:b3:5b:34:92:1f:
fe:ff:e9:1d:01:28:ea:de:6e:6e:ca:55:91:89:02:63:3c:6f:
eb:54:b7:10:f8:a4:9a:99:2d:c6:15:b8:e8:04:37:10:ab:66:
4e:23:b4:b4:51:df:d7:44:bd:bd:77:0c:d0:eb:90:59:66:6c:
14:74:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:29 2025 by rpki-client