Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA7F6F8D8E111EFA362B1A7762E951A.roa
File: 6CA7F6F8D8E111EFA362B1A7762E951A.roa (raw, json)
Hash identifier: X+pM+iBxgFf57T9LTMTB53cF9KD2liTm2zGoww4uTek=
Subject key identifier: 7F:89:41:BF:C9:95:12:E4:95:4D:23:76:C4:29:C2:AB:12:28:D4:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA7F6F8D8E111EFA362B1A7762E951A.roa
Signing time: Wed 22 Jan 2025 16:53:37 +0000
ROA not before: Wed 22 Jan 2025 16:53:34 +0000
ROA not after: Sat 15 Mar 2025 16:53:34 +0000
asID: 138915
IP address blocks: 154.206.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81910 (0x13ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 16:53:34 2025 GMT
Not After : Mar 15 16:53:34 2025 GMT
Subject: CN=67912291-337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:27:20:f8:bf:1a:d1:f9:9b:86:68:f6:05:
86:67:dd:e2:66:ba:3b:28:8f:bc:9c:c0:0d:38:a4:
53:11:f6:57:01:d9:ec:b2:07:da:49:83:de:08:33:
fe:c8:b4:dd:26:9b:a5:bd:9c:b2:b2:0b:52:2b:30:
8d:74:be:1b:39:5d:c2:7e:4e:0f:3f:11:d5:92:d8:
d0:3f:57:db:e6:fc:7b:b2:fa:21:48:39:89:2b:39:
1d:51:e0:e4:2e:76:07:f0:9d:62:78:4f:a1:ff:82:
16:10:76:36:3c:8e:b6:11:b5:37:c6:7b:f5:82:44:
66:91:87:a6:0e:ec:41:cf:10:24:56:cb:94:51:dc:
cc:4b:75:1f:1a:58:c8:ed:40:ae:df:c0:f1:1c:81:
59:f7:63:ed:e1:31:fe:56:8e:2b:23:53:e7:12:d1:
4b:65:70:50:02:57:94:ba:f8:20:e5:84:fd:5d:62:
03:f6:98:d9:35:72:cd:30:48:18:ed:09:7f:30:e1:
d3:57:af:aa:e6:f5:1e:29:55:f8:37:5e:64:97:49:
14:3a:e2:75:80:ea:06:ca:00:26:8e:a6:e5:dc:b5:
a2:af:00:33:18:6b:84:e4:ce:3c:1a:2b:a7:15:af:
60:6d:16:f3:7b:4e:f3:63:06:60:a0:df:07:18:6b:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:41:BF:C9:95:12:E4:95:4D:23:76:C4:29:C2:AB:12:28:D4:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA7F6F8D8E111EFA362B1A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:59:fd:2d:de:bd:58:3c:9b:fa:b7:48:48:74:d9:81:43:f7:
5d:18:41:71:04:82:f7:18:7d:c5:4b:2f:03:31:40:3a:b0:29:
fb:e4:d0:79:97:33:f8:6c:4e:57:3c:27:df:72:7a:29:d3:57:
e6:9c:56:f0:fe:fd:11:2f:cc:09:47:d8:f0:18:49:e4:b7:49:
9b:08:2a:e7:e9:18:ba:e3:1e:95:35:16:5a:aa:d9:0a:a2:67:
63:0b:d4:0c:4e:fc:ca:c7:89:27:22:f3:48:af:fe:9b:27:8e:
e5:0b:35:33:08:29:04:1c:8b:c3:b9:26:87:76:4c:57:45:61:
d1:d8:7a:29:d4:8f:d4:b2:81:25:f8:4b:35:39:56:88:e2:4c:
f3:e0:72:de:ff:19:c0:de:60:6c:85:2c:9a:bf:7a:93:1d:5a:
a8:8f:41:cf:91:3f:18:13:e4:7e:36:4b:bf:3d:47:90:3c:4d:
45:82:bd:fa:1d:53:cd:22:69:9f:92:c9:65:35:ab:24:83:1c:
8e:c0:ec:96:7d:df:e0:07:6c:1b:c3:2d:c6:04:ab:7f:c2:61:
7b:29:f7:a1:13:c1:6a:9c:44:bf:7e:9e:12:05:37:92:fb:4c:
58:2a:cd:3c:69:72:57:39:06:d4:29:a8:7f:8f:a6:c6:05:db:
14:3f:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:45 2025 by rpki-client