Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6461AF04DCA411EFA0ED208E762E951A.roa
File: 6461AF04DCA411EFA0ED208E762E951A.roa (raw, json)
Hash identifier: r0StzaKi6peZCXcTZtKjGRw2BiUeQcE3mYy6I6ePdEY=
Subject key identifier: 91:61:AC:BB:F6:54:79:B1:CC:14:5C:F2:2D:D5:93:2E:1A:56:29:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6461AF04DCA411EFA0ED208E762E951A.roa
Signing time: Mon 27 Jan 2025 11:46:49 +0000
ROA not before: Mon 27 Jan 2025 11:46:45 +0000
ROA not after: Sat 08 Feb 2025 11:46:45 +0000
asID: 7018
IP address blocks: 154.201.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84963 (0x14be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:46:45 2025 GMT
Not After : Feb 8 11:46:45 2025 GMT
Subject: CN=67977229-b2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:13:1f:10:d8:5e:07:99:84:ee:17:eb:87:
fc:d2:5a:9e:30:01:bb:de:41:45:79:77:59:9b:ea:
96:a6:dd:e0:61:f6:c1:9c:68:d4:a6:c9:47:51:85:
78:ac:58:e4:04:da:0a:6b:4c:0e:40:96:40:74:19:
52:db:6d:67:9f:4c:2c:21:60:82:63:8c:6f:30:9f:
f6:d2:c3:4d:48:a4:0d:62:45:af:fd:46:5d:01:c3:
a9:db:11:4b:5a:97:7a:d9:06:06:e9:42:68:59:8e:
be:55:81:48:06:2b:54:65:5e:47:ba:e4:2d:e8:5f:
b7:51:92:f0:57:fc:01:7b:93:a4:4a:a4:af:ff:99:
1b:cd:72:e6:75:93:72:09:ea:b6:ea:a9:28:2c:01:
78:e9:6f:88:88:8a:6d:1e:3b:c8:21:62:60:9f:28:
23:a9:46:95:fa:37:8e:62:e3:7e:8a:75:7f:f6:2e:
e4:bf:fc:ae:a5:18:80:7e:12:c4:06:b5:96:aa:e3:
ce:b8:c4:0c:91:94:cf:d0:97:76:19:af:7d:67:cb:
a2:8b:34:30:38:56:0f:87:3b:e7:71:04:03:5e:37:
88:f6:a0:da:87:b8:48:5f:9e:c1:d3:03:91:a4:02:
18:d9:1b:2f:ba:a2:20:dd:30:2e:79:61:95:63:4d:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:AC:BB:F6:54:79:B1:CC:14:5C:F2:2D:D5:93:2E:1A:56:29:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6461AF04DCA411EFA0ED208E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:37:88:cc:5a:43:0f:de:78:6b:b0:c4:3c:1e:a8:1e:35:
b2:95:27:5f:56:9f:7e:7f:8f:95:01:9e:a9:45:5d:ff:5b:86:
29:8d:51:96:76:25:4e:a0:d4:77:4c:df:b7:ae:62:b0:44:d4:
1b:53:67:86:22:61:25:8c:18:c9:53:1a:ca:ab:e1:76:0b:5f:
18:cb:30:19:63:ae:ca:df:d5:a2:54:f8:8b:9a:16:db:fc:e6:
a9:01:fa:ef:01:91:1c:1a:8f:94:23:4c:28:1e:27:e8:0d:0b:
6f:a0:42:1e:b8:96:c6:8e:47:0d:ac:59:d2:65:e1:4b:e6:10:
da:a2:0b:ba:32:ec:d0:da:c1:90:98:3d:0e:69:1f:b6:5d:ba:
4f:d4:47:11:c6:56:8e:28:94:4f:e9:df:1d:4b:a1:ca:14:f2:
bc:47:0a:98:aa:b1:fa:dc:71:ac:13:5b:71:75:ea:fb:90:86:
7f:7a:51:42:06:0b:23:ee:60:db:16:6c:97:fb:80:94:3d:9d:
de:af:f5:7f:d0:1d:76:dc:11:e3:89:d4:e3:f6:0c:c6:b1:e9:
cd:10:d9:7d:67:6f:68:fc:96:d7:e2:f4:e0:dc:71:48:fc:0f:
d2:59:1e:38:4b:6a:29:c5:fb:35:03:30:98:13:4a:ce:16:4f:
26:d5:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:30 2025 by rpki-client