Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5461E06ED15611EFA79F10B2762E951A.roa
File: 5461E06ED15611EFA79F10B2762E951A.roa (raw, json)
Hash identifier: TAWGi8e8PpdxzC4nsuOCX8d7FqUqsfRe746/PJWSAgs=
Subject key identifier: AF:04:CF:60:B3:72:AD:F2:65:1E:CC:36:FB:28:86:0F:95:34:4C:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ACA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5461E06ED15611EFA79F10B2762E951A.roa
Signing time: Mon 13 Jan 2025 02:30:18 +0000
ROA not before: Mon 13 Jan 2025 02:30:15 +0000
ROA not after: Thu 13 Mar 2025 02:30:15 +0000
asID: 17561
IP address blocks: 154.216.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80586 (0x13aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:30:15 2025 GMT
Not After : Mar 13 02:30:15 2025 GMT
Subject: CN=67847aba-016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:58:0e:99:dd:8f:eb:0d:c5:fa:a4:0b:1c:
85:ce:c4:fd:5b:82:eb:d4:18:0b:8d:7a:c4:3c:50:
61:dd:bb:91:ac:49:cb:8b:e7:1c:b9:49:c6:a6:d7:
d0:ad:df:d5:d3:df:ed:82:9e:f3:c7:78:91:10:4b:
d0:c8:7c:8c:b6:26:a3:33:de:a5:6d:f1:37:a9:c8:
b0:82:cc:c0:74:86:30:15:91:a2:d3:a2:d4:50:08:
6a:00:e9:5d:59:32:61:ef:6a:d4:98:a1:7e:df:6a:
02:66:8e:0c:ba:ac:34:a8:17:a5:c8:aa:3f:3e:58:
56:17:b0:0f:fb:c6:1e:ae:13:d8:dd:3b:56:66:70:
b3:85:cf:ad:f1:a7:b5:0e:62:0e:f2:50:5b:19:af:
cb:83:ae:ad:11:6f:4c:16:e2:d0:f7:d9:ec:d6:63:
f3:a3:c1:cf:04:7e:74:df:c9:e1:61:e8:22:58:9f:
25:1d:15:05:ec:e7:ae:80:c4:17:8f:3a:b0:53:8a:
9b:df:ba:f6:eb:94:65:23:e4:f1:d0:eb:a0:b4:f7:
ac:55:4b:9f:f3:38:1a:1a:bd:af:59:9a:ab:81:f8:
77:ea:9b:59:0a:44:96:29:bc:35:d0:60:3c:70:a4:
99:a3:0b:61:77:4f:b7:14:4b:2b:b3:11:e7:cd:e2:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:04:CF:60:B3:72:AD:F2:65:1E:CC:36:FB:28:86:0F:95:34:4C:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5461E06ED15611EFA79F10B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.20.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fa:ea:d7:3a:78:a5:9d:db:17:df:dd:44:d5:74:63:33:da:
c1:02:1d:89:76:9e:ea:e2:a4:f6:10:0f:21:9d:4e:90:2a:35:
ed:52:e7:fc:94:f1:40:fc:fc:3e:c2:b7:6b:e2:c6:9d:ed:e7:
20:82:9c:9c:96:43:b6:4e:b4:9c:ee:f3:fd:4e:9b:2a:78:8d:
af:bd:f8:a0:92:a5:92:1e:cf:55:25:d3:9f:9e:5c:99:54:6d:
30:f7:4d:47:62:73:55:79:48:b8:fc:e5:80:83:08:a7:96:17:
5d:c3:9c:73:9d:34:17:61:37:0c:6c:52:f0:01:ee:16:da:63:
ba:31:b8:a5:39:eb:5a:1b:34:ba:e6:05:9a:6c:2a:0d:7d:6f:
c2:8e:ad:db:82:2c:82:57:da:c0:3b:d1:ca:da:19:58:7a:01:
cf:a6:2b:ea:3b:01:8c:df:0a:c7:46:a2:9d:35:76:5b:a9:ed:
92:a3:5a:b0:ca:8e:03:b2:a8:d2:08:af:e1:f6:25:28:d2:b9:
77:1e:de:df:c8:b9:38:11:6a:6c:b4:e2:ec:53:c2:1d:d3:1e:
2e:8b:e4:d4:6d:bd:65:4a:af:d6:b7:29:eb:22:c1:3a:4c:50:
23:dd:fe:0e:c5:52:9e:2b:dc:df:c9:43:a3:21:70:a2:4e:41:
11:a7:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:01 2025 by rpki-client