Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECE6F54CCC211EF9D3A0EA3762E951A.roa
File: 2ECE6F54CCC211EF9D3A0EA3762E951A.roa (raw, json)
Hash identifier: 59PgfCJGri1tCkPo/tAv2TygaBSmWMmG9cW5mbeSfRQ=
Subject key identifier: 96:54:B8:94:0D:80:D6:E5:EE:73:C0:6E:51:0B:C3:A9:A6:46:21:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013635
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECE6F54CCC211EF9D3A0EA3762E951A.roa
Signing time: Tue 07 Jan 2025 06:39:45 +0000
ROA not before: Tue 07 Jan 2025 06:39:42 +0000
ROA not after: Wed 12 Feb 2025 06:39:42 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79413 (0x13635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:39:42 2025 GMT
Not After : Feb 12 06:39:42 2025 GMT
Subject: CN=677ccc31-413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:fb:b1:e2:4a:f9:d3:c5:cb:31:73:55:18:
53:e2:54:eb:31:4f:cc:31:38:05:55:ea:a1:dc:c2:
63:a1:ea:4f:af:67:7e:11:76:d3:5e:04:c4:ed:a7:
24:c9:cc:46:60:4c:2b:be:fc:63:7b:db:58:51:d9:
26:89:08:27:ff:3e:9b:61:c2:8c:4b:23:86:ed:e9:
c2:37:0a:2d:f0:cb:9b:0a:91:47:cf:63:4e:8e:58:
9d:e5:ff:cb:3f:94:26:a4:19:97:ed:3e:71:9e:f4:
d2:f8:ed:3b:1d:c7:10:a2:0a:92:91:73:26:e1:5f:
85:42:48:9c:03:57:85:9e:31:4a:7c:ca:76:9b:60:
4b:ae:18:f7:ec:01:06:13:aa:22:dc:ee:be:9d:92:
ff:62:e6:86:8b:f6:a3:9f:4d:05:de:b4:70:fe:3c:
84:fa:90:3d:8c:1c:d8:1e:31:aa:71:4c:5e:e9:61:
ed:23:47:6b:af:c7:5c:6b:3d:a4:9e:f0:c9:90:94:
88:bf:dd:3b:32:fa:4f:ce:1e:70:cd:2c:f4:d8:eb:
77:37:13:83:f6:db:bf:23:a1:01:3b:59:9b:2e:da:
ef:02:b5:68:cf:48:f5:d8:a4:27:f4:82:45:ec:dd:
1b:13:d7:bc:06:88:d0:2e:da:f3:57:c9:a4:54:ad:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:B8:94:0D:80:D6:E5:EE:73:C0:6E:51:0B:C3:A9:A6:46:21:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECE6F54CCC211EF9D3A0EA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0/24
Signature Algorithm: sha256WithRSAEncryption
40:70:7d:46:fa:4e:68:a1:73:e0:c2:da:ec:97:be:69:02:6b:
22:e7:53:41:25:9b:22:33:a5:c7:f6:35:57:c8:f0:2c:9d:60:
d0:cb:ed:6f:52:b7:5b:49:86:cf:a3:9e:de:67:dd:49:bd:31:
ee:49:1f:ab:27:70:ec:75:b0:c4:a9:f0:4a:68:3c:57:41:a7:
ef:ad:3f:b5:d9:6f:9f:0b:cb:9d:18:fb:a8:b0:d4:1b:c0:5f:
65:cc:ff:7f:fa:bc:6b:23:d3:42:53:e4:ae:bf:66:80:f2:3a:
ce:1b:52:e9:71:29:b4:05:e5:33:c3:23:e0:11:58:54:91:a3:
7f:03:ee:ee:cf:f8:7d:88:de:eb:15:29:44:16:1b:fa:69:71:
7d:ee:98:60:67:4f:71:9c:d0:b3:f4:d2:14:fb:8e:00:0d:8f:
27:29:b7:07:b3:9d:79:8f:dd:a8:4e:d1:b2:0b:c7:48:61:f0:
fb:ac:be:3f:0e:fd:25:4e:76:6f:e2:a3:20:fd:a6:97:fe:99:
c9:14:eb:03:f5:f7:b4:5f:4b:2b:f9:41:88:b4:cd:04:b8:f3:
a4:3d:31:91:a9:8b:a9:7b:df:f3:db:58:57:a2:98:dc:fe:cc:
df:dc:00:d4:40:bd:eb:4b:41:28:60:ce:39:16:ef:83:75:49:
a0:95:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:34 2025 by rpki-client