Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B447392D56A11EFA05E0373762E951A.roa
File: 6B447392D56A11EFA05E0373762E951A.roa (raw, json)
Hash identifier: wVz1wvYCzV2C66+dJ/8J19mbhb07v4ksJrYeOzzrXvk=
Subject key identifier: 5B:EF:DC:6A:2A:CD:F8:2E:89:6A:9A:30:DC:8D:72:AA:59:97:76:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B447392D56A11EFA05E0373762E951A.roa
Signing time: Sat 18 Jan 2025 07:04:11 +0000
ROA not before: Sat 18 Jan 2025 07:04:08 +0000
ROA not after: Sat 22 Feb 2025 07:04:08 +0000
asID: 54600
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81296 (0x13d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:04:08 2025 GMT
Not After : Feb 22 07:04:08 2025 GMT
Subject: CN=678b526b-4f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:62:24:af:e8:26:af:94:58:b6:2f:5e:31:
2d:1a:1a:92:d6:2f:a9:fc:9c:f2:3d:87:e7:21:1d:
89:64:43:bd:70:a4:c6:5b:68:70:f9:ed:52:3a:32:
d9:68:28:72:d4:f2:56:e0:9e:5d:55:be:0c:c3:dc:
5b:08:a6:5d:c2:ef:c3:02:f4:a8:28:38:fe:23:3c:
f0:17:dc:9f:b4:9a:30:17:1e:c5:f5:b9:b7:d3:93:
1d:c3:12:96:c6:39:81:44:d7:ca:d4:0f:29:d1:2d:
e8:3b:36:09:fb:b3:83:11:1b:9b:13:b5:06:3f:47:
4a:99:14:c2:c2:82:f8:55:65:05:ec:c9:c6:80:fe:
a4:36:98:e5:b7:64:77:d7:fc:9b:4a:23:61:12:d9:
fe:fb:d8:0f:db:0f:a2:d2:05:fb:fa:3e:de:e2:63:
bc:39:c2:34:26:87:4f:c4:d9:78:81:f6:6f:0b:50:
02:8f:3a:8a:54:c7:0c:7c:42:77:22:32:20:0c:d7:
e8:ac:fb:74:38:30:a3:dd:6c:f6:ea:ea:84:bf:a2:
82:57:72:ac:ea:bb:e2:db:d2:50:7e:81:a8:a4:cc:
30:74:dc:8a:63:15:bd:50:df:1f:32:c2:a2:d4:b8:
7a:ae:b3:59:fe:c3:71:0e:cf:50:69:c8:ef:95:35:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:DC:6A:2A:CD:F8:2E:89:6A:9A:30:DC:8D:72:AA:59:97:76:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B447392D56A11EFA05E0373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:14:ab:7a:03:e7:ac:22:2e:88:72:bc:0a:83:1b:30:a1:61:
a5:46:fe:59:74:f3:20:48:9a:f8:76:1b:b9:9f:1f:dd:3d:d4:
77:c4:17:a1:fa:3c:72:97:31:76:8f:f2:55:16:ad:b1:ed:71:
4d:0e:11:07:2d:bf:ef:cf:ae:e2:09:bf:37:72:8a:6c:d6:b6:
c6:8d:62:2f:93:07:26:4e:95:08:49:77:bd:b4:74:54:7e:f2:
60:ed:cf:15:7d:ce:d1:ff:38:3d:e1:2d:92:47:54:23:54:d0:
c8:3c:eb:47:0b:95:5d:4b:fd:ab:ac:0f:2d:b2:a7:01:39:bf:
a9:a0:50:f5:17:08:fd:e9:7a:3b:85:88:67:8f:fb:66:e0:75:
c1:91:8a:a6:05:39:b1:5b:c8:90:61:93:5f:7e:0f:2b:11:82:
c1:5c:62:5f:2c:f5:11:5b:4c:a2:65:45:35:5d:76:14:ed:94:
ef:78:e8:fa:07:f7:65:50:fc:fc:4a:64:53:9f:f3:9b:c4:b8:
98:4d:75:86:4d:f4:2a:9c:18:03:7c:99:a8:92:28:09:4b:5e:
d8:a2:c3:3d:8e:6b:46:5e:60:0a:2f:f9:70:f8:d2:6f:15:a6:
ed:3c:7b:f6:ab:35:67:29:ff:b0:11:e5:ac:5c:9a:d8:1c:c1:
0c:93:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:51:42 2025 by rpki-client