Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D96CBB8DA4C11EF8150E9B9762E951A.roa
File: 6D96CBB8DA4C11EF8150E9B9762E951A.roa (raw, json)
Hash identifier: pFsdak3LrBKn5hDyaA4G23lSdi3j4oZ9Mood0F8AKTk=
Subject key identifier: CA:44:09:1E:55:18:0A:CF:A6:DB:78:0C:D9:46:FD:AF:54:BF:B9:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D96CBB8DA4C11EF8150E9B9762E951A.roa
Signing time: Fri 24 Jan 2025 12:12:06 +0000
ROA not before: Fri 24 Jan 2025 12:12:01 +0000
ROA not after: Sat 01 Mar 2025 12:12:01 +0000
asID: 209242
IP address blocks: 154.200.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83601 (0x14691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:12:01 2025 GMT
Not After : Mar 1 12:12:01 2025 GMT
Subject: CN=67938396-e541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:f2:3e:5d:24:6b:af:c9:da:d6:92:fa:4a:
5e:42:67:1e:68:eb:24:3a:c0:6f:f3:21:1d:67:24:
f7:ad:f3:e3:b0:36:30:f7:79:0a:be:74:38:1c:0e:
36:47:85:e8:f2:f4:3e:35:75:e1:aa:33:dd:ed:b8:
3c:92:12:1b:c3:ff:f5:7a:67:42:b2:44:1d:10:c9:
73:d3:94:a3:0b:88:94:48:d6:7b:bd:83:0a:eb:95:
84:55:4b:4d:62:db:45:26:8f:62:a5:81:6f:ef:d1:
7c:e7:dc:08:e1:36:34:a9:f8:31:7d:62:ae:84:ff:
c8:ea:b5:8d:11:76:19:e4:37:25:60:9a:a8:01:8a:
dd:6e:9b:60:f1:ba:e2:8d:a4:fe:42:fb:c0:61:1d:
bb:8b:83:0c:6c:86:5c:b2:0f:fd:74:bb:b8:8b:08:
67:69:60:2e:da:11:b1:4f:04:d6:01:8d:6f:56:dc:
1f:2d:f2:90:e0:90:b5:c1:5e:1f:c2:6c:ba:c7:7d:
fb:23:6b:b2:00:7c:4d:3d:5e:ad:a9:c0:b0:0f:14:
c9:f3:69:c5:4c:c3:f8:30:57:db:ac:a9:3f:48:f5:
75:e9:81:61:2b:a8:d1:c4:09:d2:db:44:ee:2d:30:
a1:9c:8d:d5:26:6d:4d:00:28:8d:a9:e6:ae:58:bd:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:09:1E:55:18:0A:CF:A6:DB:78:0C:D9:46:FD:AF:54:BF:B9:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D96CBB8DA4C11EF8150E9B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.109.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a0:23:ea:b0:33:1e:57:67:73:52:7b:2b:31:1d:79:7d:b3:
65:e0:54:a4:c8:05:e8:f4:e5:bc:72:15:ee:40:43:61:d1:95:
c6:7b:0a:bc:d0:58:35:67:e3:cc:73:a9:97:9c:a9:8a:2c:6d:
5f:40:c9:e4:8b:f7:1f:6a:a5:35:d8:d7:23:a5:73:15:75:c1:
ec:04:be:e5:39:b8:f2:05:79:e5:03:6d:2d:1f:0b:f5:19:77:
fb:b0:6d:88:65:be:8e:97:78:a1:ca:ec:98:1b:21:9f:5e:f5:
52:9d:cb:a2:85:78:97:1d:0e:8f:90:44:71:e6:b9:d8:d1:c8:
b3:04:70:5b:70:7d:84:c7:4e:39:2b:57:25:cd:c5:26:01:64:
19:64:fa:21:9c:92:c7:22:4f:28:aa:cc:ad:25:3a:69:c7:be:
8a:d4:8f:ff:0f:0b:fd:9e:5b:c9:08:05:75:65:5e:70:ff:71:
ba:fe:3e:2d:a4:ef:bd:2d:6f:b5:68:9d:fe:25:40:06:24:c3:
83:27:21:44:24:81:41:95:1e:32:93:de:e3:7f:46:9b:6f:db:
91:27:02:0e:c7:e1:08:eb:05:ac:12:41:90:c2:e6:c7:f5:8f:
11:e7:a2:0e:b2:6f:df:47:1d:bb:a9:55:71:1c:b6:74:48:ca:
ea:b2:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:16:34 2025 by rpki-client