Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F92F364D8B011EF9E1E3961762E951A.roa
File: 4F92F364D8B011EF9E1E3961762E951A.roa (raw, json)
Hash identifier: 7Yg56S4Qkglv/R0jgl7eqRVI4ofGGZX2FpapRP3VUB8=
Subject key identifier: C6:FA:FD:4E:6F:B0:59:1F:E6:04:EA:8B:57:B4:5B:D7:C7:4C:48:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F92F364D8B011EF9E1E3961762E951A.roa
Signing time: Wed 22 Jan 2025 11:02:03 +0000
ROA not before: Wed 22 Jan 2025 11:02:00 +0000
ROA not after: Sat 08 Feb 2025 11:02:00 +0000
asID: 150008
IP address blocks: 154.206.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81638 (0x13ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:02:00 2025 GMT
Not After : Feb 8 11:02:00 2025 GMT
Subject: CN=6790d02b-3d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:e1:8c:0d:84:a1:1e:51:47:43:7f:21:99:
24:72:3c:83:dc:1e:89:51:d6:64:8d:93:5e:98:89:
b0:05:b9:df:11:8c:06:6f:e0:95:e4:b8:5d:3a:28:
79:1b:ac:a8:f0:21:59:08:75:17:f5:a7:79:84:a1:
17:a6:b8:b0:bb:fe:0b:ce:0f:29:ba:bf:60:9b:cd:
a5:a8:e0:81:cb:8d:d3:fe:c7:23:6a:f3:02:5f:6a:
db:d0:02:cf:1d:b4:f1:2a:15:a2:3c:55:66:99:a6:
e1:13:17:2e:d2:67:a3:a6:67:fa:a9:48:e2:cc:5f:
25:2c:93:01:d6:96:82:26:89:41:fa:87:73:e4:4b:
85:c5:d0:79:41:61:06:50:9c:31:ca:ae:da:2d:15:
37:50:e4:18:21:81:97:9c:2f:f6:cf:c5:2d:fa:28:
37:a8:46:60:16:42:ec:ed:00:dc:57:a5:66:46:91:
d3:ca:c0:a0:e5:51:af:51:5f:a2:d3:ef:bd:97:dd:
80:de:76:dc:86:06:85:41:e5:42:b8:a4:db:79:1e:
3f:fa:7c:50:0f:36:bf:b2:f5:9d:59:aa:37:56:98:
cd:6b:b7:29:b5:3d:da:60:f6:77:52:97:02:10:7d:
ae:9b:16:13:6b:c0:0f:42:87:e6:f4:2f:12:3c:df:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:FD:4E:6F:B0:59:1F:E6:04:EA:8B:57:B4:5B:D7:C7:4C:48:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F92F364D8B011EF9E1E3961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:13:b0:2a:bf:96:dd:00:75:d8:e5:28:59:c3:61:7d:80:46:
4d:ed:63:b8:a6:07:2d:b0:64:dc:9e:c0:cc:e2:95:7b:5e:46:
81:18:2d:f1:7e:74:31:86:66:6a:6e:21:c6:c4:90:8c:56:db:
4a:a1:dc:d7:5d:4e:59:1a:16:49:c5:6c:0c:75:05:f4:a2:5b:
cb:fb:29:21:97:b0:6a:6d:92:ec:06:af:c6:26:7d:7d:41:10:
cd:9f:97:6c:c5:fd:34:90:c2:d5:c4:e3:c5:dd:62:7b:86:43:
68:eb:42:46:72:b6:d5:b7:cf:1d:81:c7:c5:28:5a:8f:2e:7d:
cc:ee:5f:ce:09:db:71:75:61:49:68:34:91:0f:d5:69:29:e8:
59:ce:c8:93:58:2e:c7:f5:0b:08:02:aa:5c:f7:e6:0d:9d:c0:
09:28:db:dd:fa:f4:f3:57:7b:ed:85:33:06:d6:10:d0:a3:d1:
b8:d0:54:47:2b:49:d5:f5:16:50:81:4e:23:b8:a9:42:15:ef:
c2:b1:1d:b1:ff:6b:50:c3:ad:f8:eb:b0:cd:04:77:a8:ef:8c:
cb:f5:b2:e5:3a:f0:fc:6b:66:3d:6f:91:71:73:b0:0e:bf:69:
f6:a6:4e:4d:98:fc:0c:6b:f5:2c:e7:1b:01:73:ec:32:e0:00:
78:27:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:06:04 2025 by rpki-client