Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6251AE66D9DA11EFB0068CAA762E951A.roa
File: 6251AE66D9DA11EFB0068CAA762E951A.roa (raw, json)
Hash identifier: c54z4JkFsD9DcnFx9C3K53WqKADoQG3s5bC9MNLpgfI=
Subject key identifier: 41:22:78:9F:0B:67:8B:DA:C6:C8:CF:95:37:2B:30:C1:D6:15:98:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014355
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6251AE66D9DA11EFB0068CAA762E951A.roa
Signing time: Thu 23 Jan 2025 22:35:45 +0000
ROA not before: Fri 24 Jan 2025 22:35:41 +0000
ROA not after: Sat 01 Mar 2025 22:35:41 +0000
asID: 62240
IP address blocks: 154.223.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82773 (0x14355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:35:41 2025 GMT
Not After : Mar 1 22:35:41 2025 GMT
Subject: CN=6792c441-18bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:13:05:01:3b:27:cb:81:a9:32:20:06:35:
fd:ea:8f:5d:0e:d3:c3:78:13:79:de:58:53:33:1a:
23:b0:13:a3:d0:0a:3d:9f:6b:3b:a7:a4:6a:d9:c8:
45:c2:45:39:24:e4:d5:01:8a:d5:a2:82:54:95:3d:
27:dc:7c:57:b2:b1:a1:2b:bb:af:b8:e0:c1:6c:a0:
3c:a7:c7:90:5e:a9:3e:8d:b3:00:65:a6:38:95:bc:
03:e4:8b:d4:af:4a:dc:d4:a6:cd:46:0f:93:66:c4:
8f:e0:88:44:9b:ed:0b:2b:4d:d5:9c:8c:d5:cf:b9:
36:b8:0f:f7:18:f5:82:c6:01:f4:69:6a:39:e3:cd:
6a:f3:2b:da:c5:f4:d3:69:a2:c5:d5:f2:05:8c:bf:
dd:ff:f0:4f:3c:76:b7:68:da:6c:63:77:72:79:f7:
60:38:81:8e:58:da:2d:e0:96:17:17:31:0a:4a:c4:
35:f2:32:8c:49:ff:bc:d2:45:2a:11:7f:e0:58:eb:
c6:68:01:cc:5b:15:a9:b7:61:0a:6a:d5:b6:d7:7d:
bd:7a:59:7b:6a:05:19:ef:2b:21:08:9f:be:77:03:
9c:26:5c:82:c5:d3:ed:51:32:cc:74:2b:9a:24:49:
cf:8d:b6:43:2d:01:ea:1e:24:cc:a9:d3:33:48:14:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:78:9F:0B:67:8B:DA:C6:C8:CF:95:37:2B:30:C1:D6:15:98:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6251AE66D9DA11EFB0068CAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.209.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6e:5b:ac:8a:ae:7a:2e:68:76:77:2c:88:81:03:36:88:93:
6e:07:3c:7d:dc:c9:89:a4:99:be:ce:5d:1c:b5:dd:3a:f5:bd:
02:05:d5:8f:1d:61:b7:98:ac:9e:95:ef:34:28:a9:99:60:31:
12:86:1f:fc:27:e2:13:f8:fa:ee:11:7a:28:66:86:3e:cd:39:
f9:90:4a:92:fd:f7:28:ee:34:d4:5e:83:78:69:44:35:a1:77:
e9:83:09:0b:3c:de:31:27:3c:e3:83:6f:9e:54:dc:86:b9:0c:
51:7b:d2:2c:60:d8:5d:e1:91:88:32:f8:86:8b:ec:b8:66:0c:
e8:33:e2:0b:36:ba:49:86:2f:d0:9a:1d:91:c7:4c:0e:1c:fb:
80:22:f4:9f:31:c9:8d:44:fc:e6:84:fd:be:9a:cb:3c:e5:e6:
cb:84:68:55:ae:e3:da:6e:2f:0d:52:d8:14:e8:fb:54:e1:2f:
79:34:a3:d5:b0:b4:b3:fa:21:32:cc:69:4e:ee:f7:6a:94:f7:
52:9d:f3:43:5d:14:0b:01:70:af:c3:7e:60:6e:ae:74:ca:66:
fc:4a:c8:aa:74:26:72:d6:da:6f:39:e9:00:3a:7a:b0:af:28:
63:dd:19:de:77:2b:0a:7a:5e:2c:05:a0:d2:0f:4f:6d:89:62:
f9:9c:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:38 2025 by rpki-client