Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593484D6DA5511EF8A799377762E951A.roa
File: 593484D6DA5511EF8A799377762E951A.roa (raw, json)
Hash identifier: Pmk7f0Pb8ou19VrV9LTxluBK2UD8emR50k1dZLtI5Yk=
Subject key identifier: A8:67:8F:AB:F0:71:C4:04:94:03:10:A9:AB:9D:D4:8C:8D:5A:72:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014755
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593484D6DA5511EF8A799377762E951A.roa
Signing time: Fri 24 Jan 2025 13:15:58 +0000
ROA not before: Fri 24 Jan 2025 13:15:54 +0000
ROA not after: Thu 27 Feb 2025 13:15:54 +0000
asID: 135983
IP address blocks: 154.200.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83797 (0x14755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:15:54 2025 GMT
Not After : Feb 27 13:15:54 2025 GMT
Subject: CN=6793928d-fb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:8a:9d:7e:c3:7c:fe:3a:af:08:86:41:64:
cc:c2:76:61:08:f1:6f:0c:e2:85:46:4c:31:54:71:
87:f6:56:cc:75:1f:05:89:47:4d:30:cc:7f:79:53:
f5:93:4f:b3:aa:ed:f8:b9:b6:0a:2a:1a:28:d6:7d:
27:a9:d4:10:66:cc:1e:80:f5:06:53:b6:95:d2:fa:
2d:1c:50:48:25:f7:3d:54:2c:35:3b:21:bc:da:f8:
78:5c:bb:2d:64:02:06:6e:6d:82:84:30:e6:53:d7:
fc:32:a5:ba:62:ec:4a:8e:e7:f0:47:67:8e:a4:78:
6b:42:03:57:a7:54:dc:6a:fa:bf:78:06:92:00:47:
9f:78:7c:df:d5:ee:2f:f9:0b:8f:0d:7b:ea:68:a6:
b6:aa:b4:b6:6e:7a:10:bc:3a:ad:7b:eb:fd:3c:02:
ba:9b:ac:24:19:14:20:55:47:c2:14:20:2b:4f:62:
59:ec:f7:c5:b0:54:6a:47:9f:9f:84:49:19:1b:ca:
2b:df:10:63:b6:60:8c:8e:60:39:18:6c:bb:34:0a:
8b:e4:1e:40:56:82:e5:0d:52:3c:a8:ee:74:63:06:
80:64:4a:e8:35:f6:fd:64:a5:64:67:4a:ec:19:76:
d3:00:57:70:41:9f:76:f2:48:21:bb:80:9c:52:cb:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:8F:AB:F0:71:C4:04:94:03:10:A9:AB:9D:D4:8C:8D:5A:72:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/593484D6DA5511EF8A799377762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:72:0b:a6:a4:74:c2:53:cb:e4:a7:ad:ed:ed:23:78:6d:b7:
69:59:e7:54:06:05:1a:cc:3c:50:bf:af:3d:49:ca:ff:1b:e7:
08:b2:fa:f4:67:a2:f0:33:ed:86:8b:f8:82:3f:ec:69:41:3d:
39:91:f4:45:46:09:b6:2f:d2:79:43:c3:32:77:39:64:fe:28:
bc:ad:ad:b1:3a:b1:fa:ad:93:f0:ec:d3:8b:cf:c4:9a:29:ad:
bc:6e:f3:21:9a:57:6f:db:f2:54:e3:f9:0a:0e:bf:3f:79:57:
b5:ef:34:b5:36:bd:3c:85:96:49:5d:91:09:a0:50:38:f7:e7:
71:eb:66:89:ad:85:f7:a2:fb:fb:54:5b:e5:8e:bb:9d:55:d3:
a4:22:4b:04:0d:c8:60:e9:99:6e:ad:f3:15:5e:1a:cd:de:d9:
66:fe:9f:ca:d7:80:6b:b4:7f:70:db:30:bd:e2:2e:70:02:3b:
66:3e:1a:48:bf:aa:7d:2d:14:84:18:3c:c2:85:3a:7f:70:0c:
57:32:4c:64:d4:ed:8b:2e:69:58:26:e3:48:2e:e0:a4:f8:e4:
d6:db:c2:23:8d:a2:ac:a9:8b:f7:a5:70:af:c4:bb:7c:5f:88:
4c:a1:0b:c0:89:46:8a:2e:af:09:98:49:4a:57:76:91:b1:02:
ac:a4:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:37 2025 by rpki-client