Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DB8782C9C511EFA5664BAF762E951A.roa
File: 67DB8782C9C511EFA5664BAF762E951A.roa (raw, json)
Hash identifier: 4iroB4eHkf3j27dWMnVcjCaKNfPh0/up2O3RBecabOw=
Subject key identifier: A6:D8:5D:3C:27:1D:D2:41:FD:92:78:33:6D:EA:04:2D:A2:44:F3:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01349E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DB8782C9C511EFA5664BAF762E951A.roa
Signing time: Fri 03 Jan 2025 11:25:16 +0000
ROA not before: Fri 03 Jan 2025 11:25:12 +0000
ROA not after: Tue 04 Feb 2025 11:25:12 +0000
asID: 203020
IP address blocks: 154.208.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79006 (0x1349e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:25:12 2025 GMT
Not After : Feb 4 11:25:12 2025 GMT
Subject: CN=6777c91c-cf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:af:6e:69:44:69:20:ab:e7:f4:7e:6a:d8:
07:07:f0:dc:ab:74:74:cd:a6:b6:d3:53:be:91:8e:
61:28:58:1b:b7:c0:f1:81:3a:8a:07:14:9a:27:48:
74:8b:c4:60:a6:7c:54:91:16:19:19:85:af:68:d0:
c8:1e:73:be:e7:ba:83:29:78:9b:7e:1e:88:62:a6:
f9:fc:da:9e:8c:0d:6a:27:06:8b:91:57:43:56:1a:
06:e9:30:c4:f7:26:47:9b:36:48:60:5b:49:c9:ec:
72:41:d1:f6:6a:fe:a7:1f:48:f9:58:c6:57:3c:77:
db:08:4b:8a:2d:b3:64:7b:bf:c8:db:f4:63:76:11:
fa:91:b4:63:84:5d:28:96:bf:a3:50:2b:91:1e:19:
1d:e8:cc:d2:1b:be:26:35:0b:b9:c6:13:fe:c0:0d:
98:ea:7e:a4:3f:0e:9b:68:68:b4:5b:d9:dc:45:f0:
50:c0:cc:9d:1a:64:be:7e:42:4d:c4:ea:80:42:de:
d3:b2:c8:3f:25:bb:da:ed:bd:97:26:41:a2:b2:d2:
7e:e3:38:95:eb:db:fc:00:e4:e7:34:4b:c9:1f:82:
55:9e:72:d3:f4:2c:f6:7d:08:c3:51:d1:cd:d1:b1:
f3:b4:b1:b6:bd:82:f1:f8:9a:7b:db:95:fc:36:62:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:5D:3C:27:1D:D2:41:FD:92:78:33:6D:EA:04:2D:A2:44:F3:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67DB8782C9C511EFA5664BAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.1.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c8:5a:5e:21:cb:ae:bf:da:ff:26:bd:cf:c8:54:d3:1f:f7:
b7:cf:4d:dd:08:e9:1f:4c:bd:4b:97:50:91:15:1a:7d:42:80:
cf:3e:85:11:d6:b5:9e:15:be:23:4a:7c:0a:fb:7b:a8:68:53:
8d:67:ee:fe:e0:92:cd:0a:80:25:e3:f9:b8:ff:e0:f4:d3:d6:
76:b2:92:a6:de:84:26:41:66:5c:91:d5:db:9e:c9:79:62:6a:
e6:b4:e5:f6:11:40:03:6f:03:73:3f:b8:46:0f:b9:b7:7e:6d:
24:09:d3:a6:50:13:9e:df:4f:98:f0:72:27:ed:11:dd:28:50:
05:d8:37:90:ed:24:21:9c:96:4e:cc:cd:e7:80:20:ac:f5:30:
39:14:cf:bc:d7:fb:73:91:15:10:c7:9e:4d:51:7c:5f:60:c6:
bb:63:51:7d:be:6d:1a:c3:cf:02:fd:29:57:76:9e:5e:68:d6:
9d:13:7d:81:08:12:7f:d6:5f:e2:e2:1e:b5:c1:f7:41:36:b8:
d0:f7:51:63:6c:81:4d:c6:22:f0:57:11:f8:7c:38:48:18:e5:
39:8f:1d:1a:5b:89:20:54:c6:47:21:97:b0:55:8c:32:0a:35:
ef:69:37:36:e6:b5:90:73:8e:94:ca:27:ce:4d:ec:3e:d3:13:
af:75:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:45:53 2025 by rpki-client