Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67F4AE0ADFE711EFAAED0A8C762E951A.roa
File: 67F4AE0ADFE711EFAAED0A8C762E951A.roa (raw, json)
Hash identifier: wfzMbXyzwoOABQRXWRVeJu4ZoHga0li3QiaE7nDfYAc=
Subject key identifier: 8B:F3:21:C1:50:F9:00:45:20:C5:F2:3A:A0:A3:AB:76:1F:17:7B:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67F4AE0ADFE711EFAAED0A8C762E951A.roa
Signing time: Fri 31 Jan 2025 15:24:05 +0000
ROA not before: Fri 31 Jan 2025 15:24:00 +0000
ROA not after: Wed 05 Feb 2025 15:24:00 +0000
asID: 39600
IP address blocks: 154.84.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85468 (0x14ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:24:00 2025 GMT
Not After : Feb 5 15:24:00 2025 GMT
Subject: CN=679ceb15-74ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:53:e9:eb:2b:1d:c5:40:b3:5a:4b:a1:f9:
bb:29:a5:42:ed:41:c6:e2:35:b0:d9:f7:02:f9:53:
38:9e:b8:af:7d:08:17:26:a9:1a:6f:4c:84:ff:9f:
7d:41:44:09:0e:99:78:58:bd:2f:9b:22:a4:6d:98:
32:12:38:40:08:2c:61:a8:a8:15:e6:34:8b:05:f6:
2d:cb:59:ec:db:fc:6d:20:22:db:3b:c8:fd:21:0b:
4f:88:1d:c5:17:b1:3c:cd:2c:95:0d:c9:63:0e:3d:
7e:ef:77:2e:1d:39:27:fa:a8:54:4f:91:e0:46:72:
fd:56:82:35:05:7b:9c:10:ad:61:1d:ac:96:bc:aa:
b1:79:2c:a7:47:fe:f4:5c:74:5d:d8:a5:5a:5a:2d:
8d:4d:58:49:e7:8a:aa:e9:5e:e1:c8:18:21:ee:5e:
c7:a6:68:4d:50:6a:bd:94:8e:10:bc:83:a7:9c:25:
3f:bf:13:62:2f:ef:9c:cf:18:67:3b:85:c1:24:49:
06:d9:ac:51:34:57:4c:fd:e2:d1:2c:a0:15:f0:b4:
4b:2d:0d:da:b6:e0:bb:bd:8b:e2:b3:43:4f:e3:68:
3a:cd:53:44:8d:1e:97:ec:4a:e6:9b:7d:94:8a:ec:
36:d8:3d:1a:53:2d:c1:a9:ee:2a:c4:ee:90:3b:8b:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:21:C1:50:F9:00:45:20:C5:F2:3A:A0:A3:AB:76:1F:17:7B:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67F4AE0ADFE711EFAAED0A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ef:9e:8d:db:02:c7:f7:c2:71:88:bc:c8:91:e2:0c:b5:77:
77:5d:ed:f9:f3:56:f9:52:91:e2:a2:78:de:54:b1:91:45:55:
7c:f7:47:45:75:47:19:69:5c:57:6a:eb:8f:a3:24:2f:4d:2e:
19:bd:a5:5c:ce:cd:f7:6d:f0:3d:f7:86:4a:a7:3f:83:69:9f:
e7:bd:21:13:dd:e4:80:6f:19:4d:8a:ca:fa:ee:c5:19:5a:26:
d1:a9:e6:92:2c:ad:4e:ea:21:c9:74:cb:1f:38:68:38:fa:af:
d4:fb:d6:d8:d3:88:4f:45:4a:6d:6c:ba:e9:56:0a:5d:3f:55:
6d:9a:a3:2d:b1:02:c6:39:e7:59:b0:d2:60:5a:77:c2:61:15:
9b:ee:39:9c:59:17:44:a3:63:24:d5:32:8a:3e:04:17:f8:e8:
3e:48:d1:bb:17:b8:58:4b:fb:b9:b8:0f:af:a4:d9:af:48:cc:
05:41:d4:94:64:31:3e:52:fc:b6:36:e8:69:ff:25:93:79:97:
d3:0b:09:16:5a:a1:36:87:09:56:7d:0b:f5:b8:51:8c:96:9a:
ff:53:60:4b:e9:5a:0a:29:53:40:81:77:a9:83:e2:c7:09:5f:
04:da:b8:a3:ad:b0:05:c8:c0:06:ed:6b:e6:7d:56:be:37:77:
87:c5:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:18 2025 by rpki-client