Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6199F5C2BED811EFB0FE4C4C762E951A.roa
File: 6199F5C2BED811EFB0FE4C4C762E951A.roa (raw, json)
Hash identifier: q1mfVfj9KhV9unNI3AZVrApPT+MUV4DSI0uI1QhwQI8=
Subject key identifier: 7E:75:D3:6E:7A:36:3E:1D:39:51:55:E3:88:F0:0D:05:94:51:FD:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6199F5C2BED811EFB0FE4C4C762E951A.roa
Signing time: Fri 20 Dec 2024 13:43:23 +0000
ROA not before: Fri 20 Dec 2024 13:43:20 +0000
ROA not after: Sun 02 Feb 2025 13:43:20 +0000
asID: 44559
IP address blocks: 154.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72956 (0x11cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:43:20 2024 GMT
Not After : Feb 2 13:43:20 2025 GMT
Subject: CN=6765747b-ad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:61:5f:a0:46:77:8d:bd:65:e0:c4:39:e0:
65:39:ff:5c:c5:72:c4:9d:b1:1e:a1:74:cf:9e:79:
07:48:a2:c0:87:f9:fd:b0:88:a2:5d:04:4b:9b:9f:
14:d6:6e:a3:a6:4a:22:e2:8e:fa:55:2d:62:ca:c6:
d8:08:20:34:f1:49:43:02:d5:72:58:54:0b:97:da:
a4:2c:f1:0d:72:1d:75:d0:c4:ab:99:5e:08:66:f9:
6d:d5:96:83:d8:a8:c9:f2:cf:b0:03:8f:ae:4b:b8:
d5:d8:c0:32:b0:b3:11:af:dc:dc:16:8e:cc:50:94:
66:1d:e6:63:f3:88:27:06:10:0b:a2:41:7a:7a:9e:
c8:53:c3:43:ca:82:b9:9e:32:60:e9:55:14:5b:36:
52:c2:46:7c:3d:7f:80:b8:69:d3:a9:9e:ba:4d:18:
d4:77:31:e8:56:02:b6:c9:f9:da:81:9e:84:7a:6a:
25:15:b1:8f:96:3f:eb:cf:c9:be:0b:ed:fc:3c:ed:
22:4f:ca:0e:cf:13:fb:e6:10:c5:82:83:f9:61:0c:
29:f6:fe:92:61:79:1a:35:72:fe:dd:80:47:a5:56:
4f:1f:ef:94:af:df:d1:82:56:a1:c9:fb:6b:63:9d:
53:5e:bd:41:99:de:a1:aa:c4:4e:e6:41:d4:e6:fa:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:D3:6E:7A:36:3E:1D:39:51:55:E3:88:F0:0D:05:94:51:FD:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6199F5C2BED811EFB0FE4C4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
84:05:04:7c:b0:47:10:12:9c:f7:ae:97:ca:f5:3c:65:dc:18:
77:5b:fd:02:20:57:f6:6d:60:c0:93:79:34:49:63:56:0a:12:
10:5b:00:0f:1c:e7:c2:d8:2b:34:e2:cc:5e:25:83:0d:19:7b:
4f:12:1b:43:ac:d5:e5:e3:b5:8d:cc:63:33:8f:13:5d:21:e0:
fd:9e:c6:d6:98:e0:67:b5:66:50:1b:a2:31:d0:9d:6e:3d:9a:
fe:9c:e6:78:48:8f:c1:d3:9b:17:ad:6a:74:e7:13:d9:52:f9:
cb:70:aa:bd:5a:89:af:05:5c:e4:73:0d:da:d2:a1:9b:95:78:
d8:c6:ed:96:0a:07:ea:98:f2:44:8d:5d:74:00:de:4b:62:2b:
8b:a0:ff:11:ba:6d:09:d0:17:47:15:c1:83:d9:db:88:36:36:
bb:2b:19:97:d3:12:55:ee:5f:47:1b:12:ff:68:4e:c2:79:52:
3f:27:d1:84:04:da:b5:f1:93:f1:0b:b0:a5:89:de:3b:93:0b:
c2:11:86:be:b4:2d:66:73:60:0f:7b:d4:3b:aa:5b:19:f9:84:
0a:51:6d:ca:d8:61:b2:b4:d9:c8:4b:b6:0b:8f:30:89:31:67:
ec:1a:53:7b:0a:ad:79:98:43:3f:38:11:8f:e8:cd:d9:16:d5:
6d:17:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:04:55 2025 by rpki-client