Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9D6C3EDD5A11EF8BF8F95B762E951A.roa
File: 5C9D6C3EDD5A11EF8BF8F95B762E951A.roa (raw, json)
Hash identifier: Rz+UHqe3/NuZWbaNmWDcib0udnpsKMpiINOHev0dLg0=
Subject key identifier: 6F:2E:6D:36:F6:B1:36:7A:8A:94:FC:18:AD:65:2A:2C:69:41:18:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9D6C3EDD5A11EF8BF8F95B762E951A.roa
Signing time: Tue 28 Jan 2025 09:29:25 +0000
ROA not before: Tue 28 Jan 2025 09:29:20 +0000
ROA not after: Tue 04 Feb 2025 09:29:20 +0000
asID: 5065
IP address blocks: 154.206.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85150 (0x14c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:29:20 2025 GMT
Not After : Feb 4 09:29:20 2025 GMT
Subject: CN=6798a374-4106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:15:59:2c:f1:64:3f:e0:a3:e7:db:6f:e3:
f2:32:9f:e6:33:c6:aa:84:88:44:46:77:e5:26:40:
74:47:64:20:ec:dd:a3:7d:f0:10:28:a7:b3:5d:de:
3a:c3:dd:e8:53:9f:e2:97:2d:43:60:c2:cb:1c:24:
9e:73:fa:ce:31:4c:9b:bd:3a:2a:2e:32:f9:59:fd:
00:f3:64:c6:09:0e:5a:2e:6d:68:5c:26:ae:e4:d8:
48:ca:a0:48:2d:c5:a9:7c:55:5e:98:14:06:fa:1a:
a9:53:19:82:15:9b:7f:c8:52:50:ed:44:b4:e1:00:
2a:1d:c4:17:eb:ec:f7:ab:a5:a5:32:58:f9:24:29:
7d:39:82:77:9c:18:7e:35:97:4a:7e:3f:a1:df:49:
93:d2:ef:61:36:51:14:61:67:0d:29:4c:ae:15:0f:
6d:50:79:d2:f5:bf:27:ed:92:79:51:1e:7a:5e:43:
cc:9d:52:01:96:0e:59:e5:6f:07:3d:af:ed:1c:ed:
dc:a3:01:28:4b:c5:41:1c:2a:ad:f9:b0:85:90:1a:
d4:2d:9a:9a:90:ea:a1:25:fe:a1:8b:6a:23:6a:df:
4a:be:b3:15:a5:c0:38:37:bd:5a:27:49:50:bc:04:
5e:60:4c:8c:6a:ad:1c:57:cb:1d:d8:3a:c0:97:ce:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2E:6D:36:F6:B1:36:7A:8A:94:FC:18:AD:65:2A:2C:69:41:18:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9D6C3EDD5A11EF8BF8F95B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:43:ce:ba:33:3b:ed:c2:19:e3:47:00:45:e1:98:b6:da:af:
d0:db:19:51:1f:de:06:45:7c:26:64:ba:ef:61:cc:09:f5:6f:
47:04:e3:2a:49:90:9c:7f:49:0d:5f:5c:19:61:d8:7b:3f:88:
e1:a4:22:f4:cb:e5:ba:57:9c:48:ab:76:6e:94:cb:db:f2:05:
86:09:00:75:d4:3c:3c:25:e6:e4:59:6b:eb:68:d8:84:b2:01:
9a:fe:16:8f:f4:9b:59:a6:09:43:da:9d:eb:fd:73:ae:d1:cd:
dc:2f:02:7f:d7:6d:35:47:29:a3:ca:e9:2f:d7:61:e7:34:04:
17:a7:22:42:c3:19:28:f3:e9:36:04:81:4d:59:ad:dd:98:8a:
3d:90:e3:2d:5a:0b:18:ba:3b:5f:c8:16:3f:92:ac:a6:b7:e3:
9c:7c:03:1d:f6:3a:4f:9c:bf:c7:33:77:d8:ee:27:b5:6c:59:
4b:75:e9:7c:57:f3:21:e3:73:06:2a:e7:50:0c:86:d5:b8:1e:
00:60:48:bf:05:30:3f:b3:80:e0:f8:88:34:0e:2d:86:f2:1b:
05:0f:3a:8c:48:82:00:64:6e:44:8a:a5:11:f4:7e:5f:b0:29:
0f:fa:38:62:d1:ed:10:35:49:c3:fc:c2:46:58:45:61:a2:64:
a5:2d:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:12 2025 by rpki-client