Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6197B6E6C9C711EFB5991EBA762E951A.roa
File: 6197B6E6C9C711EFB5991EBA762E951A.roa (raw, json)
Hash identifier: gx0rn+yYjwYj4+9zibbftLV/aLeYL7AonLzBCwtysOE=
Subject key identifier: 96:53:03:7F:F0:85:4A:5D:82:71:53:A1:65:43:3A:C4:D9:CB:76:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6197B6E6C9C711EFB5991EBA762E951A.roa
Signing time: Fri 03 Jan 2025 11:39:25 +0000
ROA not before: Fri 03 Jan 2025 11:39:21 +0000
ROA not after: Tue 04 Feb 2025 11:39:21 +0000
asID: 203020
IP address blocks: 154.207.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79022 (0x134ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:39:21 2025 GMT
Not After : Feb 4 11:39:21 2025 GMT
Subject: CN=6777cc6c-5dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:3d:b2:49:9a:3f:02:1d:00:cf:11:83:95:
26:a4:c1:53:5c:7e:05:ad:78:76:76:c7:4b:d5:85:
a7:e3:e2:0b:4e:c3:51:0d:ab:e4:90:7b:9e:70:f0:
9d:54:c3:9a:42:2c:2a:08:23:5e:54:56:f7:d0:71:
1d:8b:16:e8:8f:2b:ea:1e:54:2b:43:30:a0:c8:73:
98:80:cd:ff:23:4a:39:d6:42:76:b8:7b:19:5f:62:
00:0a:4d:7f:75:73:d0:70:03:d1:cc:c6:37:09:03:
df:c0:c6:7c:cd:47:f4:0e:7b:95:bd:fb:ae:5d:16:
f3:65:5d:96:74:d6:d4:6c:e1:b8:28:56:09:88:88:
7a:56:41:ec:0b:d4:a4:d8:65:6b:df:46:11:a0:9f:
f6:5d:b5:df:4e:ff:55:41:04:5b:11:48:4c:94:6d:
0e:84:75:6d:b5:bd:c7:60:6d:1d:0f:40:e8:46:17:
3d:76:ec:ab:9c:9a:2a:22:38:f8:6d:91:27:6b:3c:
bb:43:7e:06:88:d6:70:dd:e7:99:83:d8:c7:cf:df:
c3:03:b3:f4:cb:12:ae:29:23:59:24:46:fa:b1:42:
bc:b8:41:f0:88:2f:b6:37:3d:ea:d2:2f:07:86:51:
e1:45:24:20:f8:a8:6c:fd:4b:3d:13:c4:0d:94:bc:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:03:7F:F0:85:4A:5D:82:71:53:A1:65:43:3A:C4:D9:CB:76:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6197B6E6C9C711EFB5991EBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.216.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:32:9b:cf:eb:cf:2b:ad:ae:36:56:7d:3c:a3:fd:ec:78:43:
39:2f:ae:1e:80:ca:2c:5c:e4:0f:70:b6:9e:26:23:05:10:8e:
a8:a4:be:c1:33:96:94:52:71:54:50:91:fb:14:79:4c:9b:89:
9c:3d:b4:50:66:2a:f0:0c:07:ad:cf:37:68:0d:6c:7c:ac:f0:
47:e2:8c:0e:b6:12:23:1f:b3:83:2b:c6:f3:12:cb:fe:e4:2c:
d5:04:fe:e3:00:68:f7:86:ba:68:51:97:59:e1:d2:f4:2b:a6:
42:1b:91:6b:cd:a0:f0:45:4f:39:47:56:67:56:a6:e9:19:d9:
86:1a:d0:11:03:09:12:37:03:6a:b4:67:ff:69:c5:bf:3d:dd:
88:6c:e6:52:6e:e4:ee:6a:3c:21:da:a2:4b:2d:4b:df:9b:ca:
c9:ba:55:8f:c4:51:4a:77:3c:70:55:3b:9d:6f:92:c9:37:01:
43:dc:dc:d8:93:81:d8:c7:4d:11:92:17:8a:e1:d7:24:61:58:
95:32:27:09:c5:7f:ab:0c:c2:c7:a5:72:0d:32:df:ae:7d:ec:
7f:73:ea:70:9f:ec:e5:59:8f:7b:c6:6e:a7:8c:c5:61:5b:cc:
b6:34:df:26:0a:b2:e5:b1:53:01:be:a3:9c:07:c4:51:d5:04:
22:84:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:07 2025 by rpki-client