Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7F81DCC31F11EFA5699B4F762E951A.roa
File: 6C7F81DCC31F11EFA5699B4F762E951A.roa (raw, json)
Hash identifier: 8+L5L1geEqDJS662KqJwqzUOjK2iVwUeGKo84aIBDdY=
Subject key identifier: 60:F5:5C:EF:AF:F7:BF:C8:37:97:24:E6:25:AE:09:FF:87:F6:BD:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01255E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7F81DCC31F11EFA5699B4F762E951A.roa
Signing time: Thu 26 Dec 2024 00:22:00 +0000
ROA not before: Thu 26 Dec 2024 00:00:56 +0000
ROA not after: Sat 01 Mar 2025 00:00:56 +0000
asID: 984
IP address blocks: 154.193.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75102 (0x1255e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:56 2024 GMT
Not After : Mar 1 00:00:56 2025 GMT
Subject: CN=676ca1a8-f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:49:67:b3:4b:d5:fe:47:6a:b8:c7:2a:e3:
14:fc:2a:74:1f:78:6e:84:5b:2d:7f:3b:26:d2:1d:
5e:a8:70:b1:17:22:e1:b3:d0:b9:0b:4b:6c:9e:da:
d0:ed:be:e9:84:96:0c:e9:2a:f4:28:be:f2:d4:4b:
13:25:0d:c6:16:ee:d1:03:e7:04:b4:c7:fd:bc:38:
88:71:11:1f:60:86:fb:ec:bf:9f:3d:8c:de:5b:98:
50:74:40:8c:f9:c1:a6:a8:53:c2:83:8e:f4:89:19:
fd:17:a8:90:34:a1:5d:b9:6e:58:fb:cd:c1:7a:95:
af:8b:13:71:0e:ba:0e:4e:19:dc:a1:fe:24:fd:0e:
ec:ff:12:b1:60:77:1e:21:5d:2b:16:f5:34:c4:c8:
06:6c:44:38:2e:4f:ff:a6:9f:cb:ba:4b:cc:bc:c0:
09:27:9c:4a:20:bf:49:9e:e9:fd:88:4d:5a:96:3f:
f9:c3:57:01:c8:26:dc:2f:6a:49:a8:dc:c9:ff:7d:
51:00:e6:2c:ac:11:e9:db:db:f1:9e:6b:7a:3f:a1:
9e:17:c1:74:fa:e3:4d:96:8d:d9:78:92:51:b9:12:
22:4b:9b:ed:97:1f:9f:63:e7:12:f6:e2:86:ff:7d:
f8:9f:8e:d3:71:fa:dc:43:23:ec:c0:40:99:3a:7d:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:5C:EF:AF:F7:BF:C8:37:97:24:E6:25:AE:09:FF:87:F6:BD:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C7F81DCC31F11EFA5699B4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:7f:70:a0:49:32:c4:66:2b:55:48:76:7d:71:51:e5:5d:85:
90:42:13:cc:1c:5c:59:85:92:74:20:2e:2f:1c:0d:0a:15:18:
95:af:7b:80:df:47:7a:37:f1:b0:cf:d4:3a:ca:b5:f0:15:93:
64:97:d2:7b:f6:82:6a:47:1f:1a:2a:1c:67:95:15:63:37:71:
d8:42:79:d3:ed:1d:44:06:50:99:a5:73:a0:a4:3d:fa:a9:8c:
88:e4:f6:63:ca:92:a5:a1:d9:7a:d2:93:d0:b1:7d:00:8f:d5:
5f:61:09:df:0a:15:7b:a8:67:04:a9:a3:94:51:9e:80:79:36:
67:40:6b:11:ae:38:0d:a6:6a:3e:c1:31:f0:6e:e3:0d:11:30:
64:b8:c7:2c:a8:0d:69:49:ea:68:9e:d9:78:c3:df:53:f9:06:
c1:14:bf:ad:d8:32:06:aa:4f:f1:0e:22:e8:d8:59:d0:32:fe:
1f:4c:ba:31:84:9c:6b:b5:7f:f0:1d:cb:d8:9e:78:bf:df:95:
7d:f3:91:f6:0a:21:c8:d3:2d:06:07:cd:2b:8a:ac:db:8b:f1:
e1:08:ca:aa:2c:e8:fd:a3:7d:5f:70:6b:3c:ff:bb:26:56:d8:
91:3c:21:a3:51:2e:22:b8:0b:4f:f7:8f:1c:02:39:f8:33:f3:
a1:8e:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:51:07 2025 by rpki-client