Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B11C68EDA5311EF816D876B762E951A.roa
File: 6B11C68EDA5311EF816D876B762E951A.roa (raw, json)
Hash identifier: WErobJiLJvfd7aX1kuN2JF2S2JPUhmNSYOrzD9cR/Nk=
Subject key identifier: 86:04:4D:72:E9:26:65:46:29:18:95:C6:83:31:3A:BC:4C:8E:D5:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014735
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B11C68EDA5311EF816D876B762E951A.roa
Signing time: Fri 24 Jan 2025 13:02:09 +0000
ROA not before: Fri 24 Jan 2025 13:02:05 +0000
ROA not after: Wed 05 Mar 2025 13:02:05 +0000
asID: 44559
IP address blocks: 154.209.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83765 (0x14735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:02:05 2025 GMT
Not After : Mar 5 13:02:05 2025 GMT
Subject: CN=67938f50-9e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:87:5c:49:e1:c2:34:b6:1d:73:f9:4b:db:
d9:c8:cf:3e:f3:4a:60:5a:f0:fc:00:ca:f5:c6:98:
1d:d7:bc:a4:2f:15:b8:8a:a5:fa:cc:e0:61:f6:8b:
46:52:7b:e2:8f:9a:2e:36:3f:4a:eb:1f:c7:f5:57:
a1:21:24:9e:f8:7d:44:36:68:ea:5f:6c:7d:f0:1c:
9f:42:f1:0d:b1:b4:83:6c:58:ea:86:fa:7b:93:a9:
13:5c:2b:ec:e7:e9:b7:c8:c6:6f:73:52:63:c9:bb:
d0:7b:20:59:a5:6e:44:8f:54:01:37:44:ff:78:47:
8f:02:51:f8:62:3c:38:a2:6f:8e:38:a7:e7:25:d0:
86:fe:dc:c8:86:c5:a2:3e:80:df:70:5f:c8:1b:56:
c6:d8:49:c1:4e:55:89:6d:fc:a7:02:ca:5c:8f:1c:
73:66:3e:3d:91:ee:9f:dd:f0:95:7f:68:32:5b:46:
b8:e0:1c:7c:d3:a5:bb:63:2e:2f:1d:a9:fa:f7:63:
f0:99:1e:f2:45:55:cf:8b:53:56:eb:cb:45:34:18:
3d:47:59:79:6f:4d:95:25:f8:ca:47:13:39:a5:93:
13:14:ab:1e:aa:0c:01:63:18:20:af:5e:e4:e9:87:
08:36:89:4f:c9:8e:5d:48:94:07:30:65:c9:35:fb:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:4D:72:E9:26:65:46:29:18:95:C6:83:31:3A:BC:4C:8E:D5:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B11C68EDA5311EF816D876B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ae:bf:69:e6:98:d6:eb:56:27:83:46:eb:0c:7f:6d:fb:f8:
d7:93:a9:ba:a9:44:c1:91:71:14:f5:df:2e:a5:b0:af:12:bc:
41:9a:0f:0c:bc:c4:31:80:6e:47:85:29:6c:65:22:51:e5:45:
2c:ce:e4:05:b8:4b:fe:e3:24:c7:28:c5:f7:42:d0:d5:5b:31:
b9:8b:cc:d1:51:8e:6c:13:34:1b:55:d5:89:47:8f:98:83:1e:
3f:1f:c1:83:cc:50:72:b1:3a:66:0e:ef:02:96:6d:01:2b:1e:
1c:47:b3:8e:56:3f:2a:8e:e8:63:f3:a0:44:11:b6:fd:da:da:
35:d9:82:df:c4:a4:d1:9c:9b:f9:94:b8:37:9b:e3:72:81:16:
32:ea:f7:ee:58:d8:43:df:d4:2a:c0:62:b3:b7:f7:58:67:ac:
2a:30:c6:00:12:18:58:c6:65:a7:1b:69:6b:ea:ac:5f:f3:df:
a8:b2:37:40:53:3c:e8:b2:aa:a0:b6:ce:b4:e3:a1:60:ba:a6:
df:06:65:e2:97:04:04:b2:16:11:89:83:54:39:ed:3f:44:3a:
54:24:18:0d:f2:2b:0e:59:62:59:79:46:4b:cf:d7:d8:2b:df:
e7:9f:02:5e:86:d9:91:ec:6c:cd:de:fc:b3:60:10:87:7f:f3:
a4:f8:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:04:56 2025 by rpki-client