Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD19D9ADCCA11EFB8EB748B762E951A.roa
File: 6CD19D9ADCCA11EFB8EB748B762E951A.roa (raw, json)
Hash identifier: hiXYM/nXrqLqlG6LYjGJvLyW36fJeIWOy8CQsJ87Gvg=
Subject key identifier: 04:5E:E8:92:FC:9C:D1:73:5D:C9:3B:CB:E7:5E:43:89:B2:4D:7D:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD19D9ADCCA11EFB8EB748B762E951A.roa
Signing time: Mon 27 Jan 2025 16:19:04 +0000
ROA not before: Mon 27 Jan 2025 16:19:00 +0000
ROA not after: Wed 12 Feb 2025 16:19:00 +0000
asID: 135097
IP address blocks: 154.216.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85103 (0x14c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:19:00 2025 GMT
Not After : Feb 12 16:19:00 2025 GMT
Subject: CN=6797b1f8-fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:f3:10:82:70:c3:71:51:d8:ad:e4:09:13:
96:89:5c:6e:11:79:bc:c8:2a:e3:eb:a6:09:89:60:
fb:2e:86:8e:ef:f9:38:9a:b2:87:44:3a:30:40:54:
88:db:3b:69:59:10:9a:e6:9e:68:d3:18:7c:d0:8b:
95:6b:99:f8:77:23:58:11:05:b2:43:b8:b0:4c:7b:
48:f1:d5:9a:10:aa:22:11:1e:ab:fd:49:21:fd:d7:
d1:d5:41:c5:9f:1d:8b:4c:07:b3:a7:1a:64:83:3f:
9e:17:7c:74:f9:5e:c1:ff:f5:80:61:49:1a:78:77:
f3:78:79:f0:db:fa:a1:af:b4:fd:ef:5e:0e:7a:b3:
84:80:6e:f4:8f:cf:aa:c6:c3:b3:aa:2d:df:ed:eb:
35:cd:5c:85:12:5c:47:38:ec:3d:6d:df:9f:47:58:
c0:68:27:ba:e6:a3:7c:1c:39:7d:00:2e:a5:9e:51:
f0:7e:e4:a9:15:7d:54:91:d8:09:ea:e0:d9:b8:42:
95:06:a2:34:cd:f5:10:38:b2:83:60:3c:6f:c7:b6:
e0:5d:ec:8d:8a:a5:9f:7f:bb:d8:ac:d0:42:4b:64:
2d:b0:18:fb:0c:05:b4:2f:dc:8b:ef:df:8b:b8:a2:
25:a0:c7:5d:61:8a:69:06:39:75:e9:d6:95:03:32:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:E8:92:FC:9C:D1:73:5D:C9:3B:CB:E7:5E:43:89:B2:4D:7D:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD19D9ADCCA11EFB8EB748B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:3b:a4:ba:f0:0e:44:58:af:81:25:44:32:6f:7e:7a:51:42:
d0:f4:bc:c6:55:08:fe:b0:0b:33:77:da:d8:7d:92:3f:0b:43:
f3:2c:62:e9:d1:21:bb:6f:fb:e1:7d:6f:57:d1:bb:b0:b2:07:
09:24:1d:3a:7c:f6:32:a0:ff:bd:61:64:a6:f1:19:39:f2:55:
bd:5e:c4:98:c3:9a:d4:c4:67:e3:3a:71:c2:aa:76:9a:be:6e:
af:08:9a:c7:22:c1:9a:1a:d9:48:87:13:de:51:50:78:55:39:
1e:1b:50:f9:42:cd:11:5f:bb:dd:a0:1c:af:89:99:4b:3e:bc:
3b:3d:bf:41:a4:e7:49:11:f5:ca:f3:4a:d0:6b:f6:1a:58:3c:
da:eb:d5:49:97:30:80:d0:44:72:47:c2:42:ca:b0:2e:44:59:
ef:4b:55:c8:6c:00:e3:07:e3:dc:51:41:77:d3:0f:73:a5:fc:
b4:f0:71:60:88:63:b1:21:30:25:85:9b:51:6d:27:78:d8:c0:
d4:8f:b7:5c:18:ea:35:58:04:9c:df:10:5e:d5:19:18:f1:11:
3d:7b:eb:53:ec:9c:a2:93:34:02:17:1d:4d:59:9a:b9:0d:3b:
92:fa:8d:fd:19:5d:f3:4c:95:78:62:ef:0b:62:ae:c0:95:6b:
4e:86:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:33 2025 by rpki-client