Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F25162D17911EF819B7096762E951A.roa
File: 59F25162D17911EF819B7096762E951A.roa (raw, json)
Hash identifier: I2Pb0vcDDzpLTZ7mnO9A9QoFAcQiZsCOUI/ElZ7YrUI=
Subject key identifier: 6D:50:A4:8C:12:9A:DE:72:D2:36:09:9E:77:96:14:A6:B6:FE:16:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F25162D17911EF819B7096762E951A.roa
Signing time: Mon 13 Jan 2025 06:41:00 +0000
ROA not before: Mon 13 Jan 2025 06:40:56 +0000
ROA not after: Tue 18 Feb 2025 06:40:56 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80596 (0x13ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 06:40:56 2025 GMT
Not After : Feb 18 06:40:56 2025 GMT
Subject: CN=6784b57c-2e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:f2:f6:cb:6f:89:ec:2d:41:18:51:34:fa:
82:2e:e8:3a:e3:21:b1:b0:5e:8b:ee:46:ee:2e:bd:
5e:52:a3:0a:b6:99:b1:76:a3:78:99:4b:4b:dd:64:
91:8e:13:46:23:08:ee:36:b0:ec:64:de:68:89:6e:
55:e8:e8:20:92:1e:6a:e4:9c:23:96:40:50:68:97:
d1:f3:73:8c:ed:f3:f0:2c:60:5b:51:0e:e3:cd:e5:
02:85:bc:64:fa:ce:36:b2:9c:b0:32:e1:27:0f:fc:
e0:26:a1:e3:56:b8:b7:5e:71:42:bf:db:13:ce:1d:
f3:62:23:1f:12:11:a5:cf:f4:03:a2:b7:59:d1:d4:
83:85:32:14:28:17:73:f0:90:48:e1:3e:7a:e0:2c:
4b:0f:cb:3c:0d:81:25:81:2b:a5:c4:ac:c1:99:7c:
79:5e:a5:26:68:94:ca:5c:8f:f1:8e:b1:f0:8e:21:
a7:6e:f7:0b:de:53:55:d2:99:42:47:17:2e:6c:48:
a6:9a:50:d6:0c:2e:9b:d8:8e:03:74:62:ab:e1:60:
00:50:14:41:1f:93:a7:2f:19:33:52:39:c8:2e:f2:
83:b5:6f:39:19:15:99:de:ca:24:17:fa:ab:6f:6f:
bb:26:8d:ac:d9:ee:05:22:14:f2:77:83:00:44:01:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:A4:8C:12:9A:DE:72:D2:36:09:9E:77:96:14:A6:B6:FE:16:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F25162D17911EF819B7096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
85:d3:f5:39:06:bd:4b:6f:78:25:26:e4:6d:a8:50:a3:54:3b:
fa:45:69:93:8a:c3:4a:6d:8a:8b:ee:46:05:b1:2b:6a:cc:92:
d1:9c:35:13:1b:4e:06:89:8d:84:f0:e9:8b:f6:57:0a:af:3f:
01:07:53:7e:a8:cf:0e:94:d3:45:82:bf:b9:e5:64:52:89:f1:
88:b7:f4:19:66:85:6b:a0:dd:46:0c:bd:6e:36:47:63:cd:34:
de:20:38:11:6f:fa:70:02:b7:be:34:b0:30:59:c9:4a:dc:8d:
e6:c9:12:d6:e1:c9:a0:70:b5:31:54:a1:a6:95:a3:65:f2:4b:
c7:a1:46:20:37:73:0f:2f:ba:c6:71:4e:42:2a:d1:d3:e7:1c:
25:a9:75:f8:47:69:15:c1:1f:a3:fb:6e:ab:ce:14:9a:ad:a4:
c7:24:84:27:39:3e:73:8c:72:7e:44:24:78:fd:a7:ec:18:92:
f7:13:5c:d8:a5:0c:03:74:63:b6:d5:06:df:72:89:73:55:04:
1c:0a:d1:b5:e4:b8:76:f6:6e:07:67:bb:6d:bb:80:2a:3b:39:
a5:45:9e:f8:85:f9:b9:52:7c:e7:da:b3:88:eb:c1:04:04:b4:
43:bf:a9:f5:82:e3:c7:70:8b:36:74:22:23:e6:5b:45:04:b2:
8b:7b:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:32 2025 by rpki-client