Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF8A4F8DB2211EF87AA4A62762E951A.roa
File: 2AF8A4F8DB2211EF87AA4A62762E951A.roa (raw, json)
Hash identifier: rcvyPJ4vFSMaQk+Kg+jYRfZEz+P/Q7JrvuloRDsyE5I=
Subject key identifier: 70:6B:1B:B1:2B:EE:22:48:D2:FB:69:03:92:D8:6E:F9:69:23:D7:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01499E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF8A4F8DB2211EF87AA4A62762E951A.roa
Signing time: Sat 25 Jan 2025 13:42:07 +0000
ROA not before: Sat 25 Jan 2025 13:42:03 +0000
ROA not after: Tue 04 Feb 2025 13:42:03 +0000
asID: 395793
IP address blocks: 154.193.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84382 (0x1499e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:42:03 2025 GMT
Not After : Feb 4 13:42:03 2025 GMT
Subject: CN=6794ea2f-bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:67:da:08:0e:99:c6:0e:39:17:29:2b:ac:
30:c9:15:5e:80:4e:00:7b:d1:89:e0:de:d1:cd:02:
1f:76:83:d2:b0:bc:11:db:e6:9c:0b:70:83:32:9d:
b9:ab:5b:99:7f:18:c6:fd:e8:35:bd:67:0c:d5:04:
bd:62:5a:74:e7:e7:cd:d9:b6:8c:98:a8:37:b2:45:
2b:5f:49:f0:97:d3:1a:50:a5:40:a1:11:71:ce:88:
52:6b:5e:a4:e3:6f:b6:fa:33:63:47:34:e0:72:2f:
42:dd:49:7c:b3:4b:94:93:8d:78:d3:61:3e:bf:39:
76:24:4a:fe:6a:63:e9:c4:3d:ab:65:84:ab:7e:aa:
92:a3:c2:ca:6a:d5:8f:b8:c5:54:bc:66:0c:4a:f5:
9b:61:84:70:b2:5c:57:6d:d0:2e:72:84:b9:b7:12:
c7:bf:ef:49:6a:94:c7:8a:ca:dd:a4:c5:ee:81:cb:
1a:76:b7:30:9a:1e:49:38:dd:7a:a2:75:33:73:ba:
51:06:f2:a2:c7:62:44:75:87:bc:38:a2:33:11:f5:
b7:82:f0:3f:e5:fb:61:35:1d:d3:15:2e:21:23:57:
db:93:43:47:d5:e8:6e:2c:c7:8a:f6:b7:bf:48:90:
28:d2:d4:1c:e7:50:6d:85:29:63:7a:68:36:a9:1d:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:1B:B1:2B:EE:22:48:D2:FB:69:03:92:D8:6E:F9:69:23:D7:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF8A4F8DB2211EF87AA4A62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:36:05:c0:e7:79:2a:a3:c9:38:30:97:16:3a:ed:a9:66:0b:
d3:c6:72:6c:5f:b6:15:7e:ff:68:94:4a:9d:f4:14:4d:a4:2d:
95:09:29:ae:b2:21:ac:76:90:c9:f2:c3:eb:8a:08:0b:2d:52:
8a:ec:3f:43:72:d3:09:16:f8:c9:b0:67:d8:14:68:1d:35:d7:
53:69:7c:83:17:6e:2f:d3:dc:95:bb:99:dc:39:d2:ad:47:7a:
71:29:31:18:8b:55:2f:b7:e5:61:0b:c5:21:6e:1d:5e:f8:f1:
80:b9:e6:d0:ba:14:b6:bd:e8:69:af:76:6a:8c:35:0e:88:b7:
fa:1a:54:9a:68:91:f7:1c:1b:46:87:c6:a9:8f:f1:64:8a:73:
8f:4b:77:06:43:c4:27:c1:08:af:88:f1:8a:fe:f4:11:18:91:
ab:66:d4:88:81:d0:f3:62:77:6a:60:49:12:f4:51:9f:e5:2e:
c8:38:d7:22:3f:3e:16:1a:a8:b4:de:b0:9b:b8:9d:8a:2e:e3:
62:8b:2a:55:8e:6c:26:b3:05:07:f3:52:35:72:94:2d:4b:7a:
60:bc:98:30:f5:4a:8f:7e:13:83:7e:60:48:05:04:a5:11:2f:
32:e0:a3:ab:39:a9:03:b7:fc:49:2a:ed:63:12:a2:23:ac:39:
fd:f8:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:10:37 2025 by rpki-client