Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F3F9430DCC111EF85674F4F762E951A.roa
File: 3F3F9430DCC111EF85674F4F762E951A.roa (raw, json)
Hash identifier: 1u1aQhnXekRgjatl74YlVEaZsQF71p0rZNrPKWlqnoQ=
Subject key identifier: B2:40:42:A3:F4:77:E1:68:8F:B0:CC:92:94:7F:AC:6D:35:09:0C:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F3F9430DCC111EF85674F4F762E951A.roa
Signing time: Mon 27 Jan 2025 15:13:22 +0000
ROA not before: Mon 27 Jan 2025 15:13:18 +0000
ROA not after: Sun 09 Feb 2025 15:13:18 +0000
asID: 5065
IP address blocks: 154.86.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85045 (0x14c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:13:18 2025 GMT
Not After : Feb 9 15:13:18 2025 GMT
Subject: CN=6797a292-685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:3d:f6:4a:95:fd:d8:12:54:fc:1e:24:c6:
90:d6:e4:19:dc:18:83:71:c2:10:11:1b:7c:24:1e:
fe:17:be:ad:4a:7a:75:08:c8:bc:be:ab:40:81:60:
07:27:49:d7:8e:27:f5:bf:e6:c4:00:8e:03:70:d9:
e9:1d:ce:06:53:d2:c6:48:23:45:3f:42:fe:c5:39:
d0:2e:15:1a:16:b9:74:5c:0f:27:ea:54:77:4a:93:
0b:9e:db:32:e5:c2:e1:dc:8f:41:75:68:39:0a:bd:
00:3d:51:5a:39:ba:85:35:12:aa:b4:64:9d:4c:1f:
9f:9e:a1:a0:66:cf:cb:99:17:fc:2b:50:7f:05:a0:
fd:c4:a8:ad:04:a5:59:01:a1:65:4d:50:99:62:40:
58:62:e0:30:98:7d:dc:1e:4c:e4:5a:eb:e2:74:cd:
cf:3c:59:5b:74:34:fa:2f:d1:d2:34:39:88:a9:08:
de:a9:c6:13:84:dc:d6:47:1a:0b:88:81:92:e5:20:
ec:90:74:ba:b5:03:1b:92:37:77:ed:cb:27:24:59:
ea:20:d3:60:3c:29:e6:d7:d8:88:39:cb:c7:47:60:
96:a8:33:e8:41:6b:37:54:84:2a:eb:bf:0b:5f:d1:
0a:01:65:2f:fc:65:95:44:ee:8d:95:0c:09:a9:a8:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:42:A3:F4:77:E1:68:8F:B0:CC:92:94:7F:AC:6D:35:09:0C:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F3F9430DCC111EF85674F4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.106.0/24
Signature Algorithm: sha256WithRSAEncryption
58:19:bf:cc:10:c3:5c:03:ca:58:8f:7d:91:f3:41:b4:75:aa:
98:13:c9:6c:8d:3f:1b:c0:10:e6:88:27:4e:8c:e3:2b:e5:4c:
22:d7:de:16:e2:79:e9:d8:cf:43:5e:5f:39:91:03:f0:63:aa:
bc:cf:e7:be:4a:48:6c:d0:3d:bc:6a:4c:4f:c3:3b:5d:6c:3a:
02:dc:7f:68:2a:bd:7f:22:60:d8:dd:c8:3c:69:3b:37:5c:4f:
c7:20:31:54:98:a3:2a:20:c1:4e:ed:01:0f:cc:cf:1b:9e:47:
9c:a9:60:65:04:7a:a2:8b:42:e5:7f:a1:ab:df:3b:90:b2:4f:
d0:15:99:69:61:53:90:73:0a:95:9a:7d:a0:62:90:dd:e1:2a:
5f:dc:72:1c:7e:93:24:cf:9c:9a:13:2c:39:9d:4d:de:a5:26:
4a:be:f0:43:9b:df:0c:67:20:3a:db:ad:40:00:3f:6e:80:60:
9a:0f:0d:e8:42:e4:df:cb:ca:eb:b2:de:0d:09:de:48:d7:c9:
5b:cc:26:2f:1e:c7:f9:99:ce:02:ed:31:83:12:d3:57:89:e4:
0e:1b:01:45:be:86:9a:0c:bf:9d:52:05:28:ec:b4:33:cd:a8:
ac:e0:b7:8d:59:43:5e:e5:69:2b:a7:0b:67:88:08:8d:9d:e3:
cc:da:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:22 2025 by rpki-client