Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FED84E6C2A511EF87F3CA5D762E951A.roa
File: 2FED84E6C2A511EF87F3CA5D762E951A.roa (raw, json)
Hash identifier: 8P7UYmWDx94FfcNpNt1ta5GcRtJBZYh2GUdVPayP9rY=
Subject key identifier: AC:D1:7F:C1:3A:2E:9A:66:84:D3:38:BB:5C:20:AD:2D:6D:B9:5D:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FED84E6C2A511EF87F3CA5D762E951A.roa
Signing time: Wed 25 Dec 2024 09:47:00 +0000
ROA not before: Wed 25 Dec 2024 09:46:56 +0000
ROA not after: Sat 15 Feb 2025 09:46:56 +0000
asID: 138915
IP address blocks: 154.206.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75094 (0x12556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:46:56 2024 GMT
Not After : Feb 15 09:46:56 2025 GMT
Subject: CN=676bd494-3f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:54:b0:5c:58:50:02:13:17:f3:31:71:33:
36:01:48:43:a4:7c:bc:c7:e2:e3:f7:09:ef:50:c4:
56:fe:77:84:6e:4b:8c:14:47:54:83:47:f4:11:b0:
68:22:94:e8:ed:de:cf:0a:c4:ba:08:5a:c7:d1:e2:
9d:e3:c9:5d:d4:b3:6c:6c:85:fe:ac:4f:17:a7:36:
72:ce:aa:b9:d6:66:be:53:5e:cc:3b:d8:00:f7:4a:
32:aa:d1:ac:3e:cf:94:5f:b4:30:44:6a:8e:b6:00:
4b:56:d8:6d:38:6e:2e:51:59:f8:22:e1:0f:b8:54:
99:3d:af:cc:4f:ea:3c:c2:7f:e1:85:c7:84:74:fd:
82:cd:33:c4:e2:ca:fb:a0:75:13:4c:b3:3d:ee:88:
7e:93:b1:40:4f:a2:cd:9b:33:e7:a6:70:c4:a0:de:
51:bc:3a:45:39:24:bf:a1:ea:25:1b:fb:46:fb:e7:
d4:c0:18:69:ac:a6:81:a9:35:f7:7b:a7:58:47:26:
d1:2e:a7:eb:cb:3d:f0:da:36:76:30:30:69:e0:9d:
36:25:4e:a8:5f:e9:0a:95:a6:e3:17:06:e8:f4:4a:
97:78:1f:a1:2a:03:4a:2f:23:ec:43:63:60:30:c8:
f1:ee:3b:56:e2:00:c5:49:a6:30:de:7b:e8:58:0f:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:7F:C1:3A:2E:9A:66:84:D3:38:BB:5C:20:AD:2D:6D:B9:5D:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FED84E6C2A511EF87F3CA5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
Signature Algorithm: sha256WithRSAEncryption
77:fc:c3:bc:5b:0d:b3:b0:54:09:c3:ee:87:65:17:9a:5f:5a:
92:1a:2f:6d:0e:ad:fd:5a:79:9b:21:c3:5a:d1:5a:be:db:ef:
1c:2c:6d:e6:67:4f:09:ba:07:38:4d:1c:46:29:02:a4:43:60:
e0:d6:80:85:4b:3e:2a:f3:4b:5a:4a:83:b5:e2:58:bd:9f:27:
1a:57:49:aa:9b:7d:c5:31:56:84:c0:39:19:42:81:64:be:ef:
77:1d:54:5d:d9:b1:a8:11:03:1c:61:1a:34:d2:ae:19:fb:0f:
87:1f:86:cc:cf:b5:b0:6d:78:61:15:a0:02:f3:43:0f:3b:83:
6a:c2:b3:b3:6f:20:0f:c0:80:90:88:db:d3:0c:5c:7c:cb:83:
74:43:7e:1d:b1:a3:d7:fc:19:13:94:75:c5:0b:2e:e3:00:c1:
60:6a:f1:10:bf:d2:04:57:b6:db:58:ba:64:58:03:b8:55:2b:
54:bf:16:c0:44:dc:0e:03:a9:30:38:45:29:28:6f:86:62:bf:
dc:43:74:c6:88:64:25:94:d3:84:cd:23:25:cc:f3:74:bb:4f:
07:ff:de:76:49:a9:bd:00:1a:69:33:8c:32:77:b3:e6:9f:be:
1b:3d:c8:42:4b:bb:66:5b:e9:c3:78:68:64:7a:16:f8:32:c6:
81:e3:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:11 2025 by rpki-client