Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515C21D6DB1F11EFBF5CD74F762E951A.roa
File: 515C21D6DB1F11EFBF5CD74F762E951A.roa (raw, json)
Hash identifier: nv74ucl2AO55vUkaVSoZuuS2oNw7zY+P4KdGQVrNZJI=
Subject key identifier: 1F:11:63:68:1B:5C:DA:1D:9B:8D:87:12:2D:A6:D6:AA:E2:69:D0:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014979
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515C21D6DB1F11EFBF5CD74F762E951A.roa
Signing time: Sat 25 Jan 2025 13:21:43 +0000
ROA not before: Sat 25 Jan 2025 13:21:39 +0000
ROA not after: Mon 03 Mar 2025 13:21:39 +0000
asID: 44559
IP address blocks: 154.209.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84345 (0x14979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:21:39 2025 GMT
Not After : Mar 3 13:21:39 2025 GMT
Subject: CN=6794e567-42c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:81:33:0d:f9:4a:22:d3:90:f8:98:7e:7f:
99:d0:00:a8:cb:92:da:14:b6:b3:09:bd:fa:0c:c6:
1c:be:09:e1:a4:a5:7e:1a:44:0f:dd:35:a3:ec:e8:
b4:12:b5:09:3d:85:2b:d0:63:a2:ac:aa:b0:cb:56:
77:04:fb:11:6a:95:7f:1c:7d:3c:c3:d0:d3:fc:b4:
7f:7a:d3:c6:69:e8:ca:09:41:49:71:c5:c5:9d:8d:
a6:5d:54:62:57:27:f4:e5:b8:bc:28:e0:f9:0d:a9:
90:2c:27:fd:98:b2:ee:c7:2f:fe:e3:01:cd:21:e4:
03:82:92:6a:fa:36:aa:a0:27:48:5c:23:c5:89:85:
2b:f9:dd:4d:c3:a8:72:80:15:8a:09:b1:fc:dc:ae:
4f:f7:b8:15:d3:3e:5f:4c:d7:e5:bb:a1:61:bb:0e:
1c:7c:17:ed:be:ad:ae:6c:f9:32:37:5b:ca:32:f6:
be:b1:83:52:69:d9:a3:73:9a:9d:a3:b1:da:9f:08:
41:3d:f0:36:74:76:88:af:24:77:2d:d7:44:e6:1c:
f5:3c:e1:6c:6c:ce:a5:c7:d2:d2:2c:c9:74:f3:d6:
b4:f2:d2:30:43:6c:10:e3:3b:0c:b0:22:47:27:31:
e1:18:87:30:55:28:ee:e7:a8:ff:45:3c:e1:3e:a9:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:63:68:1B:5C:DA:1D:9B:8D:87:12:2D:A6:D6:AA:E2:69:D0:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/515C21D6DB1F11EFBF5CD74F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:71:bf:5d:a7:6c:07:df:8e:75:53:c9:95:06:d0:66:bc:ab:
14:e9:5d:07:a4:fd:35:d8:ea:20:f3:fc:c0:fb:d7:fa:e8:28:
cf:7b:b0:41:ec:f3:d7:ce:7a:0d:38:96:dd:9e:12:b1:4c:e6:
9b:be:0e:f1:af:df:1e:5b:7e:7c:be:c3:6d:4e:3e:37:ab:a8:
2d:aa:81:47:a8:fb:d1:93:3e:c4:46:c9:88:4a:2a:3f:49:df:
66:d5:11:fd:c2:1f:88:e9:67:db:a6:4f:d0:5a:05:72:e6:b9:
0c:8e:0b:71:c0:29:9b:2d:2c:fb:67:ad:c4:d8:3c:14:a9:ca:
59:15:71:90:cc:5a:61:34:83:6b:19:71:c4:9d:73:6c:75:58:
57:4c:a9:f8:f9:9c:95:8a:98:01:d8:00:04:c2:28:74:22:20:
d5:58:8c:14:00:01:e0:de:36:0c:85:cf:8d:94:95:d8:7b:a0:
c1:7e:52:ae:77:b7:60:b2:83:58:cf:e5:b3:87:e5:93:6e:ea:
6f:a5:fb:8d:2e:10:71:4f:f4:2e:e5:fd:9a:08:0a:df:a7:b2:
71:e4:4b:4f:83:3a:32:77:8b:3f:a2:b2:c2:69:be:61:5b:20:
ce:07:0e:22:2d:9f:f7:36:f2:50:6f:33:27:78:51:7f:de:1c:
79:71:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:01:00 2025 by rpki-client