Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7A23BAD95911EFBE8FE553762E951A.roa
File: 6A7A23BAD95911EFBE8FE553762E951A.roa (raw, json)
Hash identifier: QPX6IH07xaCzrk6lzm0NaAjVS2A5YOVFRW5wQqVaSF0=
Subject key identifier: 34:A2:41:10:81:0D:AE:98:0A:87:48:4D:18:B2:9C:E0:2E:FA:4B:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01402B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7A23BAD95911EFBE8FE553762E951A.roa
Signing time: Thu 23 Jan 2025 07:12:33 +0000
ROA not before: Thu 23 Jan 2025 07:12:30 +0000
ROA not after: Sat 08 Feb 2025 07:12:30 +0000
asID: 18229
IP address blocks: 154.210.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81963 (0x1402b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:12:30 2025 GMT
Not After : Feb 8 07:12:30 2025 GMT
Subject: CN=6791ebe1-34ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:b7:a8:e9:99:b7:a3:41:fa:be:25:7f:2d:
97:5a:47:ae:a2:75:d2:8b:c9:c7:0c:cd:c0:cc:95:
64:e6:ce:f2:e3:dd:85:42:ba:3b:60:37:a9:6b:8c:
1d:c7:06:c8:ff:73:08:3c:57:91:1e:0a:35:f5:57:
71:a6:d3:3d:d5:2f:a9:00:a3:4b:bc:89:b2:7e:02:
59:66:45:42:ea:44:8d:ed:76:f1:bb:e5:c6:0c:92:
48:a7:74:aa:df:c7:dc:ec:8f:d4:e7:68:5d:a5:48:
2c:64:2c:d5:2c:92:cb:36:7f:d3:05:4e:50:ac:dc:
d7:83:16:46:1e:47:4e:05:8f:97:1b:65:f5:7a:50:
c3:f8:ba:cc:7b:4a:f9:fa:ab:44:1e:2e:5e:95:16:
cd:03:dc:a9:30:bf:d6:2f:e4:8e:1d:1f:45:4b:4e:
77:81:2a:15:f1:f6:9a:4a:2d:f0:44:9c:08:cc:fd:
c4:22:81:47:39:68:df:97:d5:dd:57:97:43:76:cd:
fd:1d:6c:15:64:37:39:29:b1:99:85:ea:ef:b5:e4:
46:eb:3a:79:86:e5:97:76:ba:ae:d3:23:b0:bc:be:
3d:0e:0b:ff:e0:d9:64:44:73:fb:ff:60:1b:98:0a:
6f:dd:25:0a:49:e4:6d:4f:ce:98:6b:cb:2f:de:9e:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:41:10:81:0D:AE:98:0A:87:48:4D:18:B2:9C:E0:2E:FA:4B:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A7A23BAD95911EFBE8FE553762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.151.0/24
Signature Algorithm: sha256WithRSAEncryption
17:66:9a:18:e9:49:53:c4:96:26:3b:7e:f5:2c:44:0d:95:bf:
7a:35:25:da:c2:45:3d:6e:8b:f9:c9:aa:d2:a4:11:0a:9a:6e:
b0:6d:cc:d4:e5:4d:86:a6:94:28:98:eb:ec:28:2b:cd:16:a3:
08:d5:36:12:c1:68:2c:f8:a5:29:75:fe:7b:3d:94:0e:ea:3d:
37:1b:67:3d:85:6a:f7:d8:a8:7a:e3:d6:52:3a:86:2c:95:dc:
a4:67:07:24:bb:ae:a3:ab:9e:1c:39:0e:2f:46:3b:c3:18:3d:
f6:5d:0c:a9:ea:e3:d7:5d:a3:d5:dc:9c:b8:18:14:7c:6c:35:
e1:2e:e4:20:5a:f1:2c:3b:b7:e6:a7:0b:f3:3d:73:51:66:27:
ce:71:36:8f:5f:85:f2:4b:e4:7b:56:19:8a:a5:d2:ab:c1:b7:
e1:d5:31:ee:a2:bf:59:e2:56:5b:c3:a9:b5:61:3a:80:33:4a:
2e:b6:a2:8c:49:0a:b5:66:53:bf:bb:0f:df:36:bd:2e:61:72:
94:bf:5f:44:3c:59:bb:ab:f7:13:a1:e2:e1:f2:6d:55:04:4d:
9e:ce:7b:92:a5:a7:be:f1:8c:d3:c2:fe:e1:ff:0e:29:c7:42:
0a:80:4f:55:27:6a:a1:ca:51:a9:03:17:1c:af:2c:ba:d6:28:
84:73:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:50 2025 by rpki-client