Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AA953CADD5C11EFADD93569762E951A.roa
File: 3AA953CADD5C11EFADD93569762E951A.roa (raw, json)
Hash identifier: BBBpyC+DxkQBkWArvTN6poE4Z/4WE92yvVNvVKjToPQ=
Subject key identifier: 83:B6:BD:E1:D5:80:86:D4:9E:7C:C1:7B:BE:38:32:36:25:84:6E:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AA953CADD5C11EFADD93569762E951A.roa
Signing time: Tue 28 Jan 2025 09:42:46 +0000
ROA not before: Tue 28 Jan 2025 09:42:43 +0000
ROA not after: Tue 04 Feb 2025 09:42:43 +0000
asID: 5065
IP address blocks: 154.206.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85160 (0x14ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:42:43 2025 GMT
Not After : Feb 4 09:42:43 2025 GMT
Subject: CN=6798a696-31a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:93:58:6d:d1:60:96:47:a6:83:06:5f:1f:
f5:09:49:c3:34:cc:21:6b:2b:70:ef:bd:b4:f8:83:
94:1b:ab:1e:e6:5b:a9:dd:a2:1e:54:a2:dd:0a:10:
e3:ad:78:9c:8c:25:49:c3:75:86:cc:8b:84:30:9a:
06:be:39:2c:86:f2:47:61:7c:5f:9a:c7:05:1a:c5:
8f:6e:44:dc:00:87:09:75:3d:58:75:18:b5:a2:be:
16:3f:7f:0b:e2:68:92:5a:60:f0:71:bf:d0:fe:98:
41:b3:dc:85:77:28:3f:c9:9b:a4:4b:df:86:c6:0e:
b8:aa:e2:92:a9:18:5f:fc:e7:49:ba:9d:9c:73:22:
bd:3b:bc:8a:d0:d9:42:31:cc:50:20:9d:9b:58:3d:
63:ec:bc:a2:b5:21:ce:7e:01:66:54:97:ee:55:6d:
ef:39:16:8c:7f:25:3b:9b:2f:29:95:e1:27:3b:87:
b6:56:a5:12:01:d7:cb:14:a8:1d:42:ef:be:1b:14:
31:df:39:08:f5:8f:28:ff:db:7f:f6:a3:af:53:2c:
f2:8f:47:c3:b6:02:d4:9b:51:97:1f:f4:73:ad:9f:
ff:8c:45:87:21:ff:11:16:97:e8:ce:db:bb:64:c5:
43:91:25:56:62:22:2c:5a:ca:35:54:44:aa:16:bb:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:BD:E1:D5:80:86:D4:9E:7C:C1:7B:BE:38:32:36:25:84:6E:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AA953CADD5C11EFADD93569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9b:54:f3:43:5d:6d:18:4f:0a:aa:b8:f6:cc:ca:0d:a6:27:
95:63:21:95:19:ab:a7:6f:19:b6:3e:92:69:90:ef:25:32:88:
a7:34:ce:45:ee:ab:75:b2:61:f8:b6:7b:c1:95:aa:90:70:f0:
37:fb:1d:cd:63:c8:15:26:af:04:f9:76:e2:43:32:25:6d:64:
57:8d:61:7b:13:17:48:0b:81:1a:fc:ad:2e:bd:c5:78:1e:0b:
b9:26:41:e9:eb:37:be:82:3a:fc:57:8e:3a:8f:4a:44:68:93:
fc:d3:d1:e0:ac:a8:f1:14:7f:8b:82:2d:54:8b:54:f3:5a:70:
d0:73:0e:64:72:0b:3e:79:6b:e3:a4:b9:83:2c:46:88:a2:2e:
95:b2:8e:84:75:93:52:c4:28:c0:0d:e9:3c:85:70:04:59:88:
69:05:cb:2c:6c:9e:94:2e:97:ef:99:11:b5:7c:9a:db:a2:c7:
29:aa:4c:84:1a:05:d8:6c:d4:42:05:9f:6d:02:93:e3:98:e1:
b5:ec:12:d2:4a:cb:cf:21:80:6c:f8:f2:68:43:67:e4:11:3a:
a5:6f:45:f7:5f:1d:2f:86:ae:4b:b8:da:15:67:9c:7d:ce:14:
50:d6:63:ff:26:3d:d4:e0:77:c2:96:e5:ba:a5:21:91:eb:d6:
41:1a:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:51 2025 by rpki-client