Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6B982D4B411EFB5250C41762E951A.roa
File: 6DD6B982D4B411EFB5250C41762E951A.roa (raw, json)
Hash identifier: xqGrja4voHzK79wsh+usFF0sTkE/Y7mpua0aNS5QUTA=
Subject key identifier: 2F:6E:56:CB:F0:F8:14:9E:42:25:B6:8C:D2:88:F4:27:60:9E:38:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6B982D4B411EFB5250C41762E951A.roa
Signing time: Fri 17 Jan 2025 09:21:27 +0000
ROA not before: Fri 17 Jan 2025 09:21:24 +0000
ROA not after: Mon 17 Mar 2025 09:21:24 +0000
asID: 17561
IP address blocks: 154.213.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80981 (0x13c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:21:24 2025 GMT
Not After : Mar 17 09:21:24 2025 GMT
Subject: CN=678a2117-35c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:da:bf:23:53:f2:83:b4:41:c1:08:ff:cd:
34:0b:52:c9:73:9c:51:b1:c4:62:b6:7d:e4:83:d1:
42:85:3e:d6:be:56:65:ba:22:47:6a:3a:3e:17:b8:
9a:1c:fd:a2:19:08:10:70:1e:2e:c1:31:96:c5:22:
b1:cc:26:df:32:3e:7f:18:3d:f4:54:69:c6:b2:9a:
07:37:a7:6f:78:2e:00:92:bd:88:a2:73:02:b7:d7:
82:95:f8:f1:d7:b5:87:0c:fd:7e:55:5c:e6:b0:b8:
88:76:5e:4f:23:a1:f8:a9:70:00:fb:35:fc:7d:43:
74:45:07:44:c1:12:15:c9:af:0f:33:81:82:2a:35:
c8:d6:85:e1:26:fc:8a:59:ce:26:47:d5:31:45:94:
60:db:57:44:72:7f:92:17:29:18:a1:28:91:a6:48:
71:32:1b:21:7e:0a:6c:1c:d6:e5:7b:00:b7:02:62:
e2:27:3f:82:f3:f2:84:2a:28:0f:29:67:0d:c1:c1:
32:3d:f6:67:ab:02:14:e1:2e:46:d1:b0:50:1a:05:
3e:ec:bf:50:02:d4:a9:80:08:66:e5:89:ae:13:f6:
4b:f3:a7:96:5f:14:03:16:99:b1:60:6a:bc:e7:76:
df:70:0b:a5:b6:93:5d:60:d0:b0:ec:35:22:a1:17:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:56:CB:F0:F8:14:9E:42:25:B6:8C:D2:88:F4:27:60:9E:38:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6B982D4B411EFB5250C41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:c9:9d:06:4d:96:37:7f:8a:1a:7b:b4:57:61:11:4d:f3:67:
27:04:d1:39:ca:5b:ea:00:ee:ca:3e:1f:9f:b2:11:a4:7d:ff:
f1:fe:a9:77:fe:c1:c0:da:91:86:92:48:9d:f8:04:18:5e:3c:
1e:f6:b4:0c:2c:77:46:d5:59:df:fa:4c:52:b9:35:10:6c:63:
da:11:42:1b:68:0a:57:0e:26:e0:79:df:36:25:18:a4:d4:bf:
59:c9:31:24:2e:d1:59:8b:37:55:88:e3:c1:90:7a:ff:8a:2a:
d3:65:0a:a5:64:4a:96:9f:5a:3a:69:59:49:67:96:44:56:dd:
51:df:08:92:bb:f1:e8:9f:20:4e:f6:b3:4f:ee:5c:98:c8:45:
3d:45:ff:46:5d:3c:4a:d3:30:92:4c:28:9a:27:21:e9:18:c5:
37:40:58:5f:92:a5:ed:15:61:d4:a9:81:97:72:5a:5d:71:24:
83:59:d6:20:df:13:40:7d:3c:1f:24:83:e8:64:19:93:9a:08:
99:f7:e3:df:cf:4c:bc:4e:22:f3:6c:45:14:b8:29:d4:ca:7f:
92:53:90:ba:f1:df:35:15:57:6e:c6:05:5d:b5:23:ab:0f:0d:
d2:32:3b:90:a7:b5:6b:46:fe:7e:3a:81:74:da:2b:cd:6f:d3:
6d:3e:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:28 2025 by rpki-client