Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0CDF9EDB1E11EFAE36BE48762E951A.roa
File: 5D0CDF9EDB1E11EFAE36BE48762E951A.roa (raw, json)
Hash identifier: T/Q88oY8sqIAZIrDcA0dT9Ibgb/NQP9Kpr/iHRcEkAA=
Subject key identifier: 36:37:69:FC:8B:59:08:6F:2A:7C:1E:01:20:89:3A:46:FD:A8:4C:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01496E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0CDF9EDB1E11EFAE36BE48762E951A.roa
Signing time: Sat 25 Jan 2025 13:14:53 +0000
ROA not before: Sat 25 Jan 2025 13:14:49 +0000
ROA not after: Mon 03 Mar 2025 13:14:49 +0000
asID: 44559
IP address blocks: 154.209.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84334 (0x1496e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:14:49 2025 GMT
Not After : Mar 3 13:14:49 2025 GMT
Subject: CN=6794e3cd-0249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:97:9a:57:6e:8e:3f:3f:e8:60:23:f5:8a:ee:
29:b8:f7:54:49:67:93:d7:0f:72:3c:c5:a8:aa:40:
17:c8:37:4f:2a:9f:24:14:2d:c9:7d:5a:88:15:ea:
57:5f:f7:f0:2b:4e:ec:b1:0d:b3:40:c3:2a:d0:1f:
ef:92:e0:e1:2f:dd:ae:5f:e2:39:31:5c:1c:a4:c8:
af:3c:39:55:0c:bd:21:de:30:1a:7b:24:71:4e:90:
ed:98:a1:8c:d0:c7:95:eb:52:b0:92:18:b9:00:77:
13:ec:e7:de:3f:a5:9e:80:82:33:3b:8d:6c:0c:b1:
a9:02:5a:13:71:2a:09:fc:9a:e8:35:ab:ef:36:dd:
2d:99:97:b5:d2:4d:d3:14:d4:5e:b6:36:d5:b5:62:
0f:a3:23:32:e5:0f:3d:e5:3b:d9:22:98:f9:f7:14:
25:b0:2c:19:39:43:38:2e:51:b0:f7:de:ea:dc:ad:
2c:b1:ac:1e:32:0c:63:99:fc:76:83:ae:f8:85:a9:
93:87:85:63:06:9e:df:61:4d:e8:5e:5a:d8:66:86:
d0:03:64:6c:0f:c2:1c:3e:48:35:20:96:2f:85:f4:
e2:4d:42:d2:b2:c8:60:97:29:38:60:ce:77:1d:59:
8b:d3:e6:19:0e:08:4e:a4:8d:fd:97:d3:9d:31:90:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:69:FC:8B:59:08:6F:2A:7C:1E:01:20:89:3A:46:FD:A8:4C:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D0CDF9EDB1E11EFAE36BE48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3c:5a:57:09:b8:1e:23:67:ab:47:8d:6c:eb:90:14:32:dc:
ba:b2:b4:0b:62:8a:a0:6a:f2:61:05:4c:82:5f:b6:bb:ac:2a:
ef:34:75:3d:94:fd:69:c5:f1:f7:cd:ad:4f:d2:f3:5f:d0:dc:
14:57:56:dd:ec:9f:4c:e2:b2:e6:94:5d:dd:7b:99:2a:a9:02:
4e:41:54:f0:fb:59:46:8e:da:3e:49:5f:7b:c4:a1:82:20:bb:
e2:dd:e7:c2:72:c0:4e:b5:1b:0a:90:76:c9:69:e4:aa:dc:7f:
c3:fb:6f:5b:fa:d4:7e:8f:5d:7f:37:7c:b9:bf:b6:67:84:dc:
7e:99:e9:e7:e9:c7:86:72:01:0b:70:96:06:b4:b2:21:ed:e7:
f0:31:6e:bd:06:23:1a:7e:2d:cd:71:18:72:09:39:47:0e:03:
b1:c2:3f:8b:5e:58:92:22:50:2f:79:f2:86:8c:93:e6:98:6c:
6e:5a:5d:a2:4d:76:8e:d8:71:32:31:c5:8e:49:dd:26:44:9c:
65:d6:7a:9e:43:f2:4a:ce:bb:19:2b:54:d5:48:93:06:cc:c1:
4c:1b:7a:d9:17:43:38:34:83:7f:99:90:32:0a:43:8f:c3:db:
b3:a4:25:77:8f:07:f0:9a:10:04:57:ca:66:91:c2:83:4d:5a:
94:28:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:13:02 2025 by rpki-client