Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3E958EDE2711EF8E205E46762E951A.roa
File: 5B3E958EDE2711EF8E205E46762E951A.roa (raw, json)
Hash identifier: bRWzwQE8g8v1Gbr41LyDXXcD/wxMntWkl6IRdm8m3I4=
Subject key identifier: 28:1D:31:B7:43:EA:72:42:FE:93:5B:C0:1E:8B:EC:A7:54:33:A7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3E958EDE2711EF8E205E46762E951A.roa
Signing time: Wed 29 Jan 2025 09:56:49 +0000
ROA not before: Wed 29 Jan 2025 09:56:45 +0000
ROA not after: Fri 28 Feb 2025 09:56:45 +0000
asID: 395793
IP address blocks: 154.193.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85374 (0x14d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:56:45 2025 GMT
Not After : Feb 28 09:56:45 2025 GMT
Subject: CN=6799fb61-2f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:f9:80:84:5f:5e:62:dd:66:fb:66:98:7e:
c2:1a:4d:e2:13:3d:f7:7e:ba:1a:e5:26:f1:96:cf:
48:d5:06:2e:06:3a:52:8a:1a:45:e7:57:31:e6:22:
87:48:64:d9:d9:fb:25:22:5a:f1:f3:ed:94:fb:47:
25:0a:ec:ac:ab:0b:42:5a:92:87:07:58:e3:87:d0:
c9:a5:2f:05:7d:2c:84:ed:e4:eb:0a:64:13:f3:a5:
fb:a1:74:c9:e4:48:c2:45:39:52:e7:b3:55:37:ef:
32:e8:97:70:39:8d:7b:85:0d:41:83:a8:fe:5e:0d:
c6:a2:9d:7f:dc:fe:06:68:16:d6:4d:6d:c1:ed:88:
37:68:8c:f0:81:5e:d8:06:4b:ee:0d:58:d4:07:9d:
0d:17:85:ab:2c:20:e6:b4:f3:71:96:60:8c:8d:5f:
be:21:c3:17:b8:13:ac:fa:7c:64:9c:06:69:cd:7e:
5a:67:92:45:ed:7f:1d:50:79:8a:59:7d:0f:25:5f:
fa:09:6c:83:c3:49:65:2a:ba:b1:4c:d1:60:99:6b:
41:4f:9e:e4:cb:4e:0a:8c:0d:cd:8a:6a:a5:7c:fa:
78:85:d4:ac:49:ff:70:14:03:2c:04:94:41:fe:cc:
aa:f8:6d:ac:e7:b8:42:d8:5b:8f:a5:80:ed:5d:33:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:31:B7:43:EA:72:42:FE:93:5B:C0:1E:8B:EC:A7:54:33:A7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B3E958EDE2711EF8E205E46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9a:49:d8:9a:96:99:b4:46:32:e2:11:22:0f:4e:9f:36:41:
d2:ad:67:21:56:1b:b0:3c:d0:8e:f2:24:05:41:59:92:3c:92:
0a:f9:fb:34:05:9f:76:11:a5:ab:26:ed:4f:38:70:b5:26:8b:
28:a6:89:f5:ee:76:23:fe:33:b3:af:d8:a4:c9:bf:a6:80:5a:
43:30:a5:ec:a2:c7:3a:8d:1f:7e:e3:ca:fd:ea:cd:d9:c4:b4:
71:00:c2:d9:0d:19:3a:d1:36:6e:f7:a6:a9:56:9a:88:ab:b4:
df:be:bf:5a:7a:e5:65:5c:1a:d5:1e:0d:fb:62:9c:72:4a:3f:
8a:e2:15:51:67:69:96:51:12:2b:26:b7:96:77:f3:22:66:cb:
3d:e4:81:a4:b6:21:ea:2f:8c:90:d3:8d:75:4e:8a:fc:4d:06:
9d:e1:ad:ad:8e:11:c7:b1:01:cf:3b:50:01:83:f1:da:b0:17:
ad:5a:5c:14:89:65:9c:17:79:4c:3b:7c:a2:f3:2f:5f:27:bf:
36:a6:6f:13:34:77:f1:67:30:4e:0e:08:4d:3d:44:e7:11:c9:
c3:42:b2:b1:cf:ce:3e:1d:5e:57:56:30:d5:81:cd:68:0b:dc:
83:da:cb:04:17:82:ce:b6:53:e0:5e:74:96:c4:1c:54:79:00:
be:db:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:45 2025 by rpki-client