Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B8998CAD911EF8145B379762E951A.roa
File: 6E1B8998CAD911EF8145B379762E951A.roa (raw, json)
Hash identifier: EZijWJAb1cBGlNnFncseBG26D9dkSw0COGhO3NE79LM=
Subject key identifier: 25:44:19:32:52:14:7B:6D:49:55:4D:F5:E3:EB:F0:8F:72:D7:E6:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013541
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B8998CAD911EF8145B379762E951A.roa
Signing time: Sat 04 Jan 2025 20:21:08 +0000
ROA not before: Sun 05 Jan 2025 20:21:04 +0000
ROA not after: Sat 08 Feb 2025 20:21:04 +0000
asID: 203020
IP address blocks: 154.217.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79169 (0x13541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:21:04 2025 GMT
Not After : Feb 8 20:21:04 2025 GMT
Subject: CN=67799833-68a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:22:a4:1b:84:80:ba:7b:04:e9:e1:51:e9:
91:52:58:14:d3:5c:6b:65:bc:66:d3:7d:e1:7e:e9:
2d:31:52:48:e2:a3:e7:73:55:d4:71:ba:69:9b:a0:
57:9a:bf:e5:49:dc:ad:1e:69:fe:8b:62:63:33:38:
1d:e2:73:d4:36:d5:86:09:15:9d:ad:7a:11:bc:40:
85:66:0a:70:6e:60:ae:32:85:0a:65:81:80:68:63:
66:a5:dc:8f:9d:6e:d0:a0:9d:d1:78:86:f5:08:22:
8b:eb:81:aa:1d:fb:6a:94:a5:b1:e3:91:4d:ba:57:
f7:36:29:e2:90:62:91:dc:fa:6b:77:19:c3:cd:2f:
3b:84:75:cd:23:bd:63:c2:27:78:1f:f9:ce:2b:0e:
85:64:be:34:5e:59:c4:be:05:71:9e:eb:06:a4:a7:
0d:82:dc:d3:de:34:67:96:26:d0:b0:5e:c1:9a:b3:
07:b3:fc:3a:8d:a4:e1:73:61:a3:af:76:1f:8f:63:
95:30:f0:2d:65:07:fa:d3:c4:e0:e5:07:4a:83:1d:
09:ee:d7:ac:6a:a6:6a:f5:ed:f1:c5:52:ac:0b:75:
24:6b:a2:24:05:6e:ad:5f:5b:ac:4e:c3:49:29:30:
c9:16:bd:c1:7a:f4:f7:ea:4f:13:f1:af:1d:b0:33:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:19:32:52:14:7B:6D:49:55:4D:F5:E3:EB:F0:8F:72:D7:E6:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E1B8998CAD911EF8145B379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.148.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3d:12:07:cf:2d:49:72:f6:ae:3b:8a:c4:8a:e2:28:f7:a4:
34:cf:e9:20:55:90:48:c0:d5:e5:89:47:24:8b:d9:9c:bc:b4:
aa:a2:5b:4f:36:82:9b:21:1d:c9:1b:51:28:f7:9b:c6:ec:6a:
27:9e:55:a2:a3:2d:00:1a:3c:be:ff:2b:01:9c:a8:0b:ef:4d:
20:43:04:f5:9a:ab:8f:2c:c6:88:0c:08:03:97:ae:0f:89:39:
35:da:5a:f0:5e:eb:4d:e8:c9:2e:ee:c7:f8:00:99:10:ed:90:
96:fc:07:b8:9a:68:6e:cd:10:fa:fb:2d:b4:cc:c5:66:8c:a9:
7e:1a:d8:a6:83:53:e1:b1:9c:46:e2:9c:4f:f2:76:db:ae:35:
06:50:64:90:78:47:03:c5:5e:cd:d3:85:63:1a:29:54:a1:d9:
c9:9d:d2:40:04:78:9b:9c:14:2d:06:d1:4f:a9:c7:06:2a:17:
66:60:f9:6c:e7:ad:5d:cf:ed:86:71:05:c1:71:00:74:de:1e:
1d:9b:c2:df:cb:5f:b8:c3:3e:6e:ed:5a:9d:f6:8d:e4:94:63:
06:39:9d:29:f4:e1:f2:6d:54:a0:00:1c:70:90:3c:36:3a:38:
94:14:34:88:52:41:5c:02:44:71:2c:99:70:9e:13:fd:ea:66:
39:a6:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:09 2025 by rpki-client