Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCBBFB2DE1611EF89C82755762E951A.roa
File: 6DCBBFB2DE1611EF89C82755762E951A.roa (raw, json)
Hash identifier: LqkxRgNvYNYMUHF+KohGNC9xb0btXYTjxd8ISHwyBWw=
Subject key identifier: D7:2C:00:94:34:16:49:97:11:18:72:65:2E:A4:8D:69:BC:56:3F:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCBBFB2DE1611EF89C82755762E951A.roa
Signing time: Wed 29 Jan 2025 07:55:38 +0000
ROA not before: Wed 29 Jan 2025 07:55:35 +0000
ROA not after: Wed 05 Mar 2025 07:55:35 +0000
asID: 203020
IP address blocks: 154.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85306 (0x14d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 07:55:35 2025 GMT
Not After : Mar 5 07:55:35 2025 GMT
Subject: CN=6799defa-d5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:2b:a3:46:13:1a:a3:83:de:77:1f:22:d0:
26:f9:f5:54:35:55:d9:b8:9f:0c:42:c3:77:ef:77:
e8:7d:da:bd:48:7b:29:08:45:73:a9:42:2b:69:99:
01:45:18:b6:45:61:66:dc:38:d2:b5:ad:41:67:84:
58:6f:23:e1:01:10:63:c8:33:73:b1:41:3e:63:e7:
93:44:88:e5:2a:be:e7:e5:d2:a1:88:81:0d:c4:9c:
5c:85:29:3f:ac:cc:df:78:07:b8:6b:66:8d:04:e8:
38:8e:f9:8d:1a:20:06:84:68:52:d4:57:47:eb:a8:
e4:61:8d:a2:17:86:67:20:26:40:d2:11:ec:df:92:
1d:19:5e:27:cc:21:7f:74:50:08:8c:85:bc:bd:ed:
a1:f8:c1:80:13:09:81:52:af:19:ab:10:ca:10:14:
85:3c:66:98:0b:cc:62:b9:90:95:a6:f7:a8:45:28:
92:96:f8:41:b3:95:1e:64:b3:17:50:17:25:cc:89:
e7:bc:3c:4f:a6:d6:89:12:e4:56:db:5f:84:9f:3c:
96:81:8c:7e:9c:e4:e2:df:ab:20:65:c1:d3:33:52:
6c:00:74:92:51:f2:3a:86:e9:56:94:cf:f9:a3:b9:
6f:01:17:b5:e6:36:29:15:70:5c:15:fa:91:cb:03:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:00:94:34:16:49:97:11:18:72:65:2E:A4:8D:69:BC:56:3F:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCBBFB2DE1611EF89C82755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d1:45:a6:36:73:f1:67:b6:b5:ee:97:2a:0f:65:ca:76:f9:
a5:c2:62:b6:a8:9e:3e:c4:33:cc:ab:7d:2c:19:38:2d:e9:a7:
b7:38:b3:dd:f4:0d:9a:4f:ce:ff:05:ec:42:8c:2c:fa:3a:81:
d7:99:0e:ee:ee:1c:80:60:be:e5:41:7a:10:45:45:05:17:b3:
70:ae:7e:06:09:02:ac:3c:bb:be:41:e9:ac:99:1c:cb:bf:96:
15:14:a9:cd:49:c8:90:69:57:0d:96:31:b5:02:f1:b2:38:74:
82:c4:f4:ad:0c:bd:d4:94:6a:8c:1e:35:9e:d8:86:89:95:b8:
08:4a:e5:47:16:d4:29:1a:f9:88:34:44:16:21:7c:bd:b8:84:
16:d4:51:62:0f:d7:c7:0a:ff:a9:31:94:91:77:0c:0c:f5:c2:
e5:77:b4:4d:a1:e6:04:8e:b4:cc:28:36:88:98:af:8e:2e:f5:
c3:bb:be:40:59:39:41:00:f8:1d:97:7f:af:ce:ae:a5:31:95:
f9:4c:8a:15:c5:db:6b:60:64:0b:4c:ab:55:5a:68:a5:70:3c:
42:3a:b0:36:0f:49:3f:fd:5c:ea:9d:f5:6a:6a:11:76:b6:58:
00:ff:76:d9:79:79:09:c2:09:29:15:99:35:19:e4:83:02:4e:
80:d6:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:22 2025 by rpki-client