Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63B2FC50DA3011EFB130F37D762E951A.roa
File: 63B2FC50DA3011EFB130F37D762E951A.roa (raw, json)
Hash identifier: gXoXTW1fhEwsmM/MuK7U/1PSzhC0AVv/fSE820QV5Ac=
Subject key identifier: E2:C3:B5:5A:BF:41:E7:98:49:AB:1C:25:D9:62:41:EE:C1:EC:43:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014495
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63B2FC50DA3011EFB130F37D762E951A.roa
Signing time: Fri 24 Jan 2025 08:51:24 +0000
ROA not before: Fri 24 Jan 2025 08:51:20 +0000
ROA not after: Thu 27 Feb 2025 08:51:20 +0000
asID: 135983
IP address blocks: 154.200.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83093 (0x14495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:51:20 2025 GMT
Not After : Feb 27 08:51:20 2025 GMT
Subject: CN=6793548c-b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:0a:92:09:b5:59:d1:45:24:b6:cc:3e:bd:
5a:2f:b4:ed:28:2e:c6:18:c7:54:ec:94:3f:ac:75:
d0:a0:b8:5a:f0:04:ac:a8:39:6d:ac:c6:46:3a:99:
86:62:27:2c:12:41:0a:08:34:cc:c9:8f:33:46:15:
b4:4c:7d:05:3c:51:81:62:83:b0:70:30:72:a4:c5:
da:31:98:57:d6:c1:e4:52:44:d1:2b:62:10:b2:17:
41:c1:40:41:41:ed:27:7e:b6:f6:82:fe:cd:ef:29:
34:35:e9:6a:49:dd:2e:64:c8:61:26:04:8e:a5:59:
d1:79:a9:75:17:bd:1f:5f:fd:69:0a:fa:33:7b:2a:
75:07:2b:f3:91:5e:e4:46:bc:d6:6c:d0:03:9c:ac:
8e:8d:98:5c:a8:b6:c7:6b:f8:d2:f0:45:94:ca:d1:
3f:53:db:cd:bc:26:bc:1b:02:81:a7:09:48:db:5b:
4e:62:7d:05:cf:92:94:3a:3e:f8:6f:99:7e:97:04:
88:06:13:99:81:a1:4f:ff:9f:56:b4:7a:1d:f7:bb:
3b:fd:1e:d5:5d:49:61:f7:7b:05:cc:3c:3d:6f:1c:
31:d0:71:b9:d3:57:46:db:4f:bd:46:27:8e:da:07:
41:48:c6:06:21:76:6b:b1:0e:b5:fa:f7:ad:72:f3:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:B5:5A:BF:41:E7:98:49:AB:1C:25:D9:62:41:EE:C1:EC:43:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63B2FC50DA3011EFB130F37D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.35.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5b:26:ba:7d:18:43:6b:a7:cd:a1:56:14:1d:6d:79:d2:d3:
e8:7f:d0:53:f9:fb:b7:0f:a5:41:10:5c:ed:f7:2d:82:d9:8b:
a2:a2:55:14:8a:bb:93:98:8b:55:09:50:ce:7f:07:6f:10:b9:
d2:e3:01:27:83:58:27:74:36:2a:c7:ea:cb:8d:c6:87:e2:df:
fe:45:73:9e:a5:42:3b:ae:47:a2:af:40:37:78:90:e7:37:99:
55:18:f5:0a:f7:3b:e7:62:17:e7:fd:30:04:0e:4f:47:39:8f:
c6:30:bd:ca:3c:66:7a:74:68:2e:9c:3f:48:e1:ed:7b:53:86:
17:3e:41:ed:e6:d8:a8:ad:73:f5:f7:93:32:5f:32:da:8c:09:
5b:5b:61:01:de:4a:d3:cc:b9:a8:1f:2b:f8:5f:25:b7:3b:09:
25:cf:55:80:ce:49:b8:b7:67:a4:32:52:ab:82:7f:cc:52:b5:
20:e1:d1:d6:cc:49:7f:14:c1:d2:33:ee:bd:fd:23:28:cb:ea:
0e:a1:55:00:0c:89:f6:7b:34:4a:00:7e:ac:c6:a2:29:e0:5e:
95:01:12:5b:0a:3f:92:fa:7a:28:30:2f:66:d6:0e:17:fd:41:
8e:c8:36:79:64:60:d3:52:78:f7:42:70:03:cc:59:8e:b5:96:
a1:ad:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:57 2025 by rpki-client