Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39C6C6F6D15711EFAE5D62B7762E951A.roa
File: 39C6C6F6D15711EFAE5D62B7762E951A.roa (raw, json)
Hash identifier: ZwJ1KLT/Djlb8zAZaNQtg6AizSpFyeGLj0nxihj2b7s=
Subject key identifier: 81:2B:14:5B:CB:3C:96:13:67:0A:90:88:D0:9E:1F:E1:F0:EE:3C:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39C6C6F6D15711EFAE5D62B7762E951A.roa
Signing time: Mon 13 Jan 2025 02:36:44 +0000
ROA not before: Mon 13 Jan 2025 02:36:37 +0000
ROA not after: Thu 13 Mar 2025 02:36:37 +0000
asID: 17561
IP address blocks: 154.213.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80592 (0x13ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:36:37 2025 GMT
Not After : Mar 13 02:36:37 2025 GMT
Subject: CN=67847c3c-6e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:57:e4:52:f9:a2:69:41:9a:f7:ff:ef:96:
d9:93:81:96:e7:9f:05:fa:ea:30:1c:8c:f1:c3:47:
14:85:85:12:e7:eb:a4:8e:6d:1c:da:3e:18:c2:3f:
44:23:31:df:b8:24:33:3a:d3:8d:53:6a:46:42:00:
3d:f4:59:ca:81:ed:f8:49:bd:38:3a:57:aa:43:41:
de:a1:b2:4c:2b:b3:c0:1f:ef:48:a4:4b:c8:54:e3:
fb:0e:e9:31:b1:e5:ef:73:3b:9c:87:20:72:25:e5:
10:a8:06:d5:c0:76:80:09:d1:ba:03:12:2a:c8:1d:
f4:da:34:c0:42:93:50:d5:08:f7:b7:8a:fc:89:bc:
3d:fa:a1:3c:7f:70:eb:c5:ed:04:e3:3e:e1:1e:43:
8d:b0:fd:c0:3b:10:22:38:31:96:3f:41:b7:01:af:
ff:87:ab:dc:7d:6d:4f:ad:72:37:e6:f0:9e:d8:84:
b8:e3:8f:a4:8b:67:d1:b3:6a:f8:58:c0:66:bb:51:
eb:50:89:a4:a4:04:ea:ad:ab:cf:a6:e5:e2:02:88:
59:15:14:9d:34:c4:66:74:c6:41:ef:e9:66:c7:f5:
7c:40:01:9e:98:ed:77:b6:5c:d4:1d:b3:82:61:8a:
7d:2b:12:02:53:2c:94:78:dc:a4:da:cc:6f:92:53:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:14:5B:CB:3C:96:13:67:0A:90:88:D0:9E:1F:E1:F0:EE:3C:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39C6C6F6D15711EFAE5D62B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e1:aa:7f:0c:2c:f4:27:73:5c:23:9e:16:47:93:45:89:1d:
76:1d:e4:6e:08:c9:ed:86:25:5f:2a:6a:ef:a2:73:b2:0a:d2:
76:10:4a:6d:3a:c0:9b:10:bc:27:80:ba:eb:f3:5c:3c:31:26:
67:96:59:05:b8:55:a1:bd:b5:7d:bd:65:5f:23:33:e8:e0:39:
dc:0c:84:9a:77:8e:63:06:77:44:a4:e1:cb:91:06:ff:e6:d2:
64:03:50:95:58:a8:d2:1d:3c:47:64:48:31:0c:da:64:b4:80:
66:b4:ff:98:8d:d3:53:ea:35:97:ff:e4:fe:15:ae:a4:93:95:
29:dd:09:b9:cc:26:ac:24:27:a8:8d:e2:c6:5d:bd:38:2e:20:
36:d8:2d:fc:e6:94:3d:05:62:8d:bb:df:46:96:ad:47:0a:4a:
46:19:0a:a0:ea:6e:f2:cb:63:c5:51:45:a1:62:b4:e7:4a:29:
29:7b:27:89:9a:74:14:eb:c4:02:dc:f1:e8:f9:55:87:21:f8:
1e:fd:d8:b8:4f:5f:66:17:9c:c2:9b:9d:e2:50:4b:1f:c8:47:
52:7d:8c:c9:01:45:a1:c3:c0:d0:cf:1d:23:da:7a:fd:27:dd:
58:d5:e3:97:44:51:4d:90:25:a8:ac:07:ec:ed:ba:9c:c1:5e:
f9:f7:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:50 2025 by rpki-client