Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6499A262DBD011EFB0DEAA79762E951A.roa
File: 6499A262DBD011EFB0DEAA79762E951A.roa (raw, json)
Hash identifier: Kp/g7e6YymX/JstlrqgwU0sdDoVBFymuzBEwgFb1OxE=
Subject key identifier: D4:C2:58:41:CF:18:6D:60:EB:3A:D9:33:68:92:F2:42:89:40:04:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6499A262DBD011EFB0DEAA79762E951A.roa
Signing time: Sun 26 Jan 2025 10:29:16 +0000
ROA not before: Sun 26 Jan 2025 10:29:12 +0000
ROA not after: Sat 22 Feb 2025 10:29:12 +0000
asID: 202736
IP address blocks: 154.88.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84591 (0x14a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 10:29:12 2025 GMT
Not After : Feb 22 10:29:12 2025 GMT
Subject: CN=67960e7c-0589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:e7:6a:46:63:d6:eb:8d:69:9c:a3:69:77:
88:54:26:81:fa:96:79:6b:3e:9c:8d:59:48:9b:c0:
04:55:2a:66:0f:64:0e:ea:28:64:6b:d9:23:90:c2:
b9:24:e1:7c:f4:97:05:81:43:01:3c:6c:ab:a4:2e:
e0:07:49:ca:91:e5:89:f8:10:c1:3e:f7:fc:1f:34:
b3:11:ef:bb:c3:26:d3:99:2e:c7:2d:9d:de:fe:48:
6d:85:ee:20:16:86:05:91:fc:5f:6e:19:6d:0e:2c:
ef:8a:50:42:95:fa:60:06:6d:23:4c:5b:ee:82:96:
55:4d:20:17:a3:07:ed:95:9a:8b:1b:33:31:35:03:
61:2e:19:f4:6a:3a:84:1b:24:c8:c7:c5:b0:bc:61:
94:9d:09:c6:7b:e7:21:b8:0b:8d:e6:39:f5:08:d3:
8f:fe:18:66:58:13:ad:13:5d:d3:25:68:c7:25:bd:
31:dc:b8:0b:de:04:86:b5:b8:a5:51:34:67:ec:93:
85:55:a9:19:eb:40:1f:ec:97:07:0f:2f:c0:86:77:
1b:80:de:35:f4:78:f8:c2:49:d7:a0:2b:02:87:2a:
fc:f9:28:48:76:21:6b:13:61:e7:2f:c8:5f:c9:1d:
05:8f:7c:7b:8d:41:9b:90:b5:10:b3:27:64:62:f3:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:58:41:CF:18:6D:60:EB:3A:D9:33:68:92:F2:42:89:40:04:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6499A262DBD011EFB0DEAA79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.54.0/24
Signature Algorithm: sha256WithRSAEncryption
03:30:5f:da:bb:d0:f1:a2:e0:ed:20:ac:09:81:a1:82:4f:ee:
4d:5d:f6:96:7f:09:5c:a5:c0:bf:cf:e8:aa:57:ac:91:a2:32:
a2:f7:6f:a7:65:d7:7f:48:4a:68:49:11:9d:bc:d5:5a:21:d4:
c0:4b:84:68:a3:7b:b5:5e:52:58:4b:84:c4:de:f1:71:03:b8:
d7:69:da:5a:63:e6:05:3c:89:f0:b8:8b:4d:af:6f:c8:30:46:
08:3e:a1:80:5b:86:20:1f:7d:e2:4e:cb:3f:88:86:87:ff:6d:
ed:2d:b8:fb:24:26:08:a4:eb:9f:0c:d8:e5:10:15:f1:ae:de:
35:9d:8a:a0:57:c7:f8:47:64:c2:49:04:33:6c:03:30:8e:90:
bf:b5:8e:99:9d:5d:80:0a:40:51:2f:24:e1:9b:63:08:0c:c4:
8a:05:37:80:8f:1a:af:7b:26:6c:d2:c3:0c:80:33:05:db:df:
33:1f:45:22:37:83:fb:75:97:c6:0c:d5:f0:cf:ab:fc:6e:17:
ec:0d:c7:cc:44:be:f9:5d:33:fa:5c:40:f3:e5:03:81:25:51:
32:50:04:a7:7c:56:6c:89:ff:ab:50:e9:e3:5a:c6:8a:61:90:
5e:25:5e:1d:32:3d:bd:1c:4c:e9:d0:60:a4:17:f3:e1:cc:4f:
fd:ec:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:54 2025 by rpki-client