Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0A116CC8F111EF9F6C2565762E951A.roa
File: 6D0A116CC8F111EF9F6C2565762E951A.roa (raw, json)
Hash identifier: GNkpQJHaiihaeWVt61vkibhFCsvVdR9PvIs0/yj8aTk=
Subject key identifier: 37:EA:78:C9:15:20:A3:2C:EA:91:79:E5:AE:20:6D:E1:88:78:16:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013271
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0A116CC8F111EF9F6C2565762E951A.roa
Signing time: Thu 02 Jan 2025 10:07:51 +0000
ROA not before: Thu 02 Jan 2025 10:07:48 +0000
ROA not after: Tue 11 Feb 2025 10:07:48 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78449 (0x13271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 10:07:48 2025 GMT
Not After : Feb 11 10:07:48 2025 GMT
Subject: CN=67766577-08f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:2a:3b:83:04:50:12:23:30:ab:5b:2b:6a:
03:0d:31:e7:9e:fd:d3:12:c5:0b:41:9b:80:2e:b3:
c3:e0:80:1a:e4:5c:6a:c3:a1:50:26:13:81:44:4c:
6a:e4:11:36:21:b2:6e:6e:7f:14:6f:93:21:f3:9b:
98:07:31:42:b3:d7:c3:68:fc:01:53:22:90:09:05:
52:79:a2:82:2a:08:a3:27:b7:d8:ff:f8:ba:3c:eb:
65:2b:10:f3:b3:3f:90:18:1a:58:2c:3f:16:e8:d9:
9a:e5:5b:14:87:3f:e4:0d:e8:66:a3:e0:78:74:77:
82:63:bc:11:a6:6f:ed:72:b8:12:7d:94:17:12:f8:
6d:64:35:93:3b:de:82:4f:88:57:7e:40:af:b4:d2:
08:40:ee:53:d6:e3:91:30:c6:f8:b4:c7:17:f8:b5:
e4:d6:11:f9:ff:c4:64:8c:48:e5:5a:e3:59:bf:c9:
ec:9a:67:83:7a:d8:3f:db:37:80:5f:e7:eb:d8:f5:
3e:d8:c7:b7:fc:47:cb:2f:e5:df:64:1e:60:2e:a3:
b4:ed:75:33:66:74:0c:d2:36:1b:9a:ef:64:f4:ba:
1c:64:d2:54:d1:91:e3:40:8e:4b:29:f2:e0:5e:6b:
c9:a1:94:19:5c:10:f3:4d:61:f0:d4:03:61:38:c1:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:78:C9:15:20:A3:2C:EA:91:79:E5:AE:20:6D:E1:88:78:16:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0A116CC8F111EF9F6C2565762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:0f:ff:6d:88:0c:8f:f5:ba:a6:89:81:14:5c:bc:7e:4b:
62:c0:90:ac:e3:9d:b1:28:07:99:7f:bf:c1:a2:84:d4:36:25:
1d:f8:9d:a3:5d:23:ac:f1:19:2f:5c:57:0a:f8:eb:18:a1:ef:
be:0b:2f:23:38:bc:7e:50:07:7e:33:a5:7b:43:5c:4b:73:6e:
40:8d:f9:f4:c8:f3:f9:73:b0:df:7e:c9:54:c3:34:97:ce:35:
52:26:e8:11:d7:fd:29:58:12:96:df:37:56:7b:95:a5:b1:3c:
8e:e7:a8:71:17:e8:c4:b9:59:62:a0:09:01:cb:d6:f4:64:9e:
40:ff:e0:07:09:1d:ef:57:78:1b:25:19:7c:c2:91:3b:c6:3d:
11:41:8e:ec:0f:24:92:f3:fa:07:f7:aa:29:19:3d:c9:32:56:
e7:c4:ce:ee:c1:4f:4c:f3:5c:d2:f6:e2:ee:8a:ff:f4:f0:45:
74:96:15:be:44:af:16:88:38:2f:81:8b:4f:94:e0:69:86:fa:
62:ee:5a:2e:35:73:cf:4b:ad:f4:41:12:58:77:f5:a7:39:3f:
ae:a0:eb:e2:1a:54:05:12:cc:07:4a:8d:32:da:1a:23:ea:20:
cf:58:ff:46:74:35:55:3a:36:51:dc:12:28:52:93:b1:82:bf:
65:ec:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:11:56 2025 by rpki-client