Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FEA1954D8E311EFA7F822B3762E951A.roa
File: 4FEA1954D8E311EFA7F822B3762E951A.roa (raw, json)
Hash identifier: Y7seozpOY3dBZ0sPzBNgbJjr8XM3Pug+xxbHkvsXwF4=
Subject key identifier: E1:AB:BC:66:9A:C9:6F:5F:9A:B1:4D:84:DE:A4:1D:6A:A5:2E:C0:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014000
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FEA1954D8E311EFA7F822B3762E951A.roa
Signing time: Wed 22 Jan 2025 17:07:08 +0000
ROA not before: Wed 22 Jan 2025 17:07:04 +0000
ROA not after: Sat 15 Mar 2025 17:07:04 +0000
asID: 138915
IP address blocks: 154.206.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81920 (0x14000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:07:04 2025 GMT
Not After : Mar 15 17:07:04 2025 GMT
Subject: CN=679125bc-b944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:ea:d6:45:53:19:45:1b:86:98:03:1b:8f:
40:58:1d:fa:75:62:6f:81:98:1d:a6:fe:ab:e0:98:
06:bc:71:c6:f7:20:ee:52:c3:5c:3a:f8:84:42:28:
09:2f:26:7c:dd:54:5b:a0:19:c5:08:d0:1a:e9:56:
6f:53:c8:73:a4:84:88:5c:64:d4:59:95:4b:2f:60:
86:e5:e0:be:91:8a:38:2a:7c:ef:ef:09:ca:d8:27:
3a:5e:8e:f6:10:b6:1e:4c:a2:fb:a8:80:ec:21:49:
fa:5d:7d:ea:bb:7c:69:5d:5f:b5:31:75:96:06:7e:
74:d1:80:4e:4e:0f:ba:5c:f7:92:b6:b9:27:ce:2a:
5c:a1:aa:55:48:5b:05:80:38:00:71:97:f9:18:3d:
df:c3:02:e5:8e:72:bb:21:43:72:77:95:ae:7f:1c:
e5:34:07:a9:19:d5:e0:d1:c0:00:e8:fc:21:e0:1c:
9e:bc:fb:20:bf:40:64:00:de:e6:94:a6:bb:f9:db:
b1:00:03:91:e4:6f:46:fe:d8:47:75:f8:67:9b:d8:
1e:eb:ba:36:d1:2e:4f:48:de:c2:f3:cb:b8:33:d6:
34:d0:4a:d4:42:a4:72:b5:45:36:a5:ca:c5:a5:51:
ca:3e:9a:19:27:84:1b:4c:a1:ef:11:68:5a:58:da:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AB:BC:66:9A:C9:6F:5F:9A:B1:4D:84:DE:A4:1D:6A:A5:2E:C0:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FEA1954D8E311EFA7F822B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.67.0/24
Signature Algorithm: sha256WithRSAEncryption
36:59:82:6c:ed:10:cb:3e:c8:84:08:b7:f5:2c:f7:29:07:6d:
3a:6e:31:34:51:d5:0c:c4:68:72:d7:e9:8d:73:ce:a9:32:2d:
0f:83:7a:a3:0a:5a:53:6e:0a:fc:2d:29:f8:8b:f7:6c:da:af:
c4:60:0b:59:e0:e3:41:1d:39:91:9b:88:65:39:5e:ec:a0:54:
8a:d0:54:01:4e:c1:d5:1e:b7:bd:46:c9:b5:67:23:0c:c5:25:
5b:9f:ce:2b:a6:46:1e:8c:5e:68:e8:9c:02:12:86:31:8f:54:
9b:07:c3:6e:96:57:6e:fa:e2:3e:6c:67:73:32:cc:28:6b:e8:
24:d2:a4:e3:5e:03:17:16:ab:0b:e1:b7:06:58:5e:f3:6d:6d:
dd:05:1b:b0:44:cf:58:2d:38:57:7f:81:36:13:1d:5e:4d:08:
8e:66:65:29:07:3d:b9:1d:ff:b9:b4:7c:e4:b6:79:48:92:d9:
35:9a:98:ce:d9:5b:8b:a4:c5:50:5f:05:f4:c4:a0:1a:0d:c6:
76:2a:31:f5:e3:18:8a:bf:0a:ee:77:e9:ed:af:4a:0b:97:1b:
e3:f5:23:16:a8:c1:19:1c:12:22:57:f2:02:c9:87:9e:36:b3:
9a:00:1b:75:1f:67:d8:b0:c8:80:39:81:72:f3:22:c8:6d:03:
36:b2:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:00 2025 by rpki-client