Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/350E2E9CDB2011EFBDC75C56762E951A.roa
File: 350E2E9CDB2011EFBDC75C56762E951A.roa (raw, json)
Hash identifier: 2Nxs6Wlm8fFvkBM/eydrIDxsA3cc/l4s9BVbNToRdiY=
Subject key identifier: 83:E5:52:7C:A5:34:BF:7D:0C:29:61:D9:D0:34:BA:CC:2E:05:B7:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014984
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/350E2E9CDB2011EFBDC75C56762E951A.roa
Signing time: Sat 25 Jan 2025 13:28:05 +0000
ROA not before: Sat 25 Jan 2025 13:28:01 +0000
ROA not after: Tue 04 Feb 2025 13:28:01 +0000
asID: 395793
IP address blocks: 154.193.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84356 (0x14984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:28:01 2025 GMT
Not After : Feb 4 13:28:01 2025 GMT
Subject: CN=6794e6e5-2459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:33:4b:77:58:7c:50:36:2a:24:a2:32:30:
12:ee:4f:3f:33:92:e8:23:3a:c6:49:69:3b:bc:48:
5e:71:42:26:d8:cc:4a:51:8a:e4:16:7e:33:7f:7b:
91:e7:86:32:75:ed:2c:50:d7:a2:51:21:d8:92:a1:
82:2f:0e:00:54:b0:a5:e6:56:7a:fa:4a:14:ef:1e:
56:dd:71:e5:fe:20:ce:24:d0:a7:6e:04:b9:1f:16:
03:9f:93:95:d7:5e:c0:fb:63:94:4e:eb:40:32:fc:
42:07:61:5f:30:5c:e3:79:02:23:d6:a2:b3:ad:db:
d7:18:d3:6a:1b:57:54:d3:18:54:f2:90:3e:ed:fb:
ca:c1:0d:12:db:3f:03:38:18:46:7c:a2:c5:42:3d:
73:85:f7:9a:38:03:70:ed:ff:fa:6a:37:bf:85:a3:
94:9d:7e:84:2d:8a:93:a6:a0:b1:74:1d:9f:5c:3f:
7c:94:a1:4d:45:8d:ec:0a:6d:8a:03:5d:86:55:77:
b7:e5:21:ed:0e:7f:f7:b3:68:a5:bb:57:13:65:fc:
bd:e7:f7:5d:e1:ca:7e:23:c5:3e:44:19:ce:92:33:
26:9c:3f:8d:0f:97:80:ba:1f:3a:cf:4f:9e:bb:91:
90:f3:4c:d0:86:85:c0:11:01:64:42:20:a3:3f:65:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:52:7C:A5:34:BF:7D:0C:29:61:D9:D0:34:BA:CC:2E:05:B7:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/350E2E9CDB2011EFBDC75C56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:6d:90:16:eb:71:d9:c3:b2:19:2d:9e:6f:9b:6b:41:01:84:
88:b9:18:11:8e:3e:24:da:35:ad:7d:25:a3:db:9f:49:5b:83:
ad:b7:4b:32:c3:7b:26:ad:15:88:78:79:4b:5a:fb:01:84:da:
7f:23:41:b2:0a:7e:9b:d5:6c:23:e8:dc:b9:d6:e0:f2:a9:3e:
6c:21:f8:0c:37:26:34:6d:b7:2f:1e:d0:48:72:87:05:a8:a1:
1a:fd:f2:8e:53:02:15:72:ef:31:53:1d:2d:56:cb:1c:b3:7c:
41:78:83:24:da:0e:bf:69:56:99:fe:2f:af:17:83:d7:c4:a8:
e8:92:ab:5b:12:a1:f9:35:f4:a1:40:3e:df:ea:1f:32:3e:3e:
dd:9c:ce:46:66:33:b3:b2:0c:bc:a4:4c:2e:6c:7b:b8:34:a5:
a0:20:a5:fd:06:df:c8:95:23:af:6f:aa:6a:8f:0c:37:1c:eb:
6d:d9:35:85:73:45:8b:84:4f:e3:7e:2e:2c:c2:42:47:c4:55:
6b:61:7e:09:54:03:ee:4e:a2:28:de:2a:02:8c:52:ff:c7:ea:
a8:71:ec:c4:bb:59:49:a7:1b:b7:0d:c7:3f:77:b1:df:b3:97:
b4:1e:42:15:70:fc:11:f0:6c:65:35:3d:c3:3f:c6:b8:6c:fd:
97:c1:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:57 2025 by rpki-client