Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/510643A4CAB911EFB905C5AF762E951A.roa
File: 510643A4CAB911EFB905C5AF762E951A.roa (raw, json)
Hash identifier: c8zsHy3oMG/6CdMgCd6hYWJlJFvHp7Bgwe9rUFcGWwQ=
Subject key identifier: 60:14:30:37:00:E8:AC:F2:60:48:39:48:CB:B6:82:81:31:CF:87:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/510643A4CAB911EFB905C5AF762E951A.roa
Signing time: Sat 04 Jan 2025 16:31:15 +0000
ROA not before: Sun 05 Jan 2025 16:31:11 +0000
ROA not after: Tue 04 Feb 2025 16:31:11 +0000
asID: 38264
IP address blocks: 154.198.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79057 (0x134d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 16:31:11 2025 GMT
Not After : Feb 4 16:31:11 2025 GMT
Subject: CN=67796253-3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:52:52:9b:89:c3:d4:f7:1a:37:61:95:29:
a3:a6:83:61:67:f7:da:ad:6a:57:11:07:34:ae:ac:
91:af:cc:64:d9:ac:cb:02:21:d4:ae:9c:44:bb:7a:
e0:58:71:97:ce:0b:44:4c:79:10:f0:af:f0:a7:c2:
6a:d5:3d:4d:b5:36:b8:6c:3d:0d:82:61:04:43:4f:
f9:f3:b6:ad:2c:ce:27:71:cd:bb:96:76:42:69:4f:
79:90:2b:44:08:f7:ec:4d:43:d4:1b:cf:5d:55:15:
69:83:83:bf:3a:80:8a:09:1d:32:eb:5d:7e:d8:f8:
81:1f:2e:1e:53:d0:0d:5b:4e:2b:af:3c:88:43:82:
68:17:bb:15:36:b0:95:a5:62:ba:6f:c1:e4:e5:a5:
87:48:61:96:7b:30:92:ea:29:26:59:69:ff:b0:a8:
15:d9:41:07:31:ab:a8:ee:a8:7a:48:65:29:f0:87:
82:1a:3a:6b:9b:f3:f2:35:b7:ca:07:f2:55:6d:ea:
bc:48:ab:93:3f:50:fc:21:a6:e4:0a:d8:b3:dc:8d:
d8:cd:6b:f8:c7:22:fd:dd:5d:a8:65:1c:93:d2:77:
c6:a8:6c:e9:bb:cc:7c:45:25:ad:5f:14:42:24:c1:
d7:9c:f7:6a:d1:6d:e1:56:0b:5e:b9:54:f5:f5:33:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:30:37:00:E8:AC:F2:60:48:39:48:CB:B6:82:81:31:CF:87:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/510643A4CAB911EFB905C5AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9e:59:4c:f4:a9:54:4e:ce:4a:83:d5:25:8b:ad:f6:a9:fe:
72:62:3d:3f:5b:8b:c3:58:98:66:1c:c5:7e:07:7a:71:7a:20:
96:a1:0e:d5:ba:73:5e:bb:27:6c:ed:b8:06:29:86:9d:ec:56:
4a:69:37:85:10:0f:5e:5b:10:85:7e:cf:8a:c5:f8:7d:f3:db:
d9:4c:5e:b9:bc:d7:cf:2f:4c:64:c4:ad:08:fb:4c:0a:36:8d:
66:65:f2:1f:5b:4d:b2:48:4b:92:ae:47:b8:cc:8a:41:42:cc:
67:4b:1d:fa:33:24:27:b9:0e:6e:1c:7e:5f:23:bf:e7:36:a4:
c9:80:20:3d:2f:64:15:f7:e6:71:03:79:59:c8:4a:1f:0c:47:
be:3c:9c:bb:3b:dd:dd:9e:2f:6a:5a:57:f4:21:da:1d:75:6c:
98:dd:ed:07:7d:a2:18:aa:0f:2c:22:7d:54:37:09:c2:37:99:
0b:df:99:14:e4:b4:de:56:9d:56:85:10:52:77:5d:cc:e3:54:
aa:3b:dc:4a:68:57:3b:43:94:8d:d9:54:34:8f:e1:26:1b:a4:
f2:29:d5:d8:90:4c:d8:46:61:3a:f3:02:bb:41:da:b8:ea:c4:
82:9b:31:03:16:07:b0:57:6b:59:60:eb:43:f5:16:ff:11:e4:
ef:b9:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:59:21 2025 by rpki-client