Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E444E0ED51B11EFAA68E65C762E951A.roa
File: 6E444E0ED51B11EFAA68E65C762E951A.roa (raw, json)
Hash identifier: 0s/NBBLEwpq3ZO65sZLANPgy5uOOb34Ved8T41vNvq0=
Subject key identifier: FC:96:F5:E0:A3:01:95:AF:CA:29:CF:2C:8E:83:5E:03:9B:AF:63:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E444E0ED51B11EFAA68E65C762E951A.roa
Signing time: Fri 17 Jan 2025 21:38:46 +0000
ROA not before: Fri 17 Jan 2025 21:38:43 +0000
ROA not after: Sat 22 Feb 2025 21:38:43 +0000
asID: 141883
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81241 (0x13d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 21:38:43 2025 GMT
Not After : Feb 22 21:38:43 2025 GMT
Subject: CN=678acde6-716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:e2:ab:fc:36:2a:3b:5b:36:67:91:18:10:
26:b8:e3:cb:f1:15:8a:46:7a:37:a8:93:f6:8e:34:
fc:78:61:61:1a:5d:73:3b:55:d8:22:05:32:9b:94:
58:71:45:9a:89:8f:1b:33:47:31:35:d0:51:6a:fe:
30:2a:ac:2d:54:14:ab:5b:8d:31:5c:5f:36:3b:8f:
d8:bb:f3:4c:51:c6:46:6a:f1:d6:aa:48:96:3e:10:
82:8e:c0:60:57:98:ec:fc:4f:9b:11:88:6a:bf:b3:
57:36:33:69:40:fd:6c:a1:d9:06:aa:ae:bf:ba:4f:
65:61:fb:55:74:ec:0d:52:7d:a1:ac:9a:03:3c:72:
ce:ea:04:79:e0:35:bc:44:11:ca:25:8c:d2:e1:3f:
73:f0:89:ea:b2:c6:74:9b:db:ee:92:70:a1:a8:3d:
7b:28:ff:9a:b7:93:ce:0b:39:37:3d:c6:e5:3c:97:
06:03:e0:b4:4d:3a:2e:bc:c6:34:22:4f:fe:0a:33:
f6:dc:b1:1d:b6:a7:d9:50:7f:d6:07:ad:65:93:7f:
81:8c:1b:dc:9b:9a:86:4f:c3:ac:ed:e7:2a:3e:f9:
dd:c4:09:36:63:90:69:65:06:94:e8:86:2d:e7:24:
e3:f7:41:0c:2a:33:8a:f4:5d:cf:43:a3:13:45:fc:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:F5:E0:A3:01:95:AF:CA:29:CF:2C:8E:83:5E:03:9B:AF:63:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E444E0ED51B11EFAA68E65C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:88:23:f0:91:35:13:41:1b:a1:f1:5e:00:47:77:e8:66:3a:
02:a8:20:6c:b4:62:c2:50:c0:1a:22:46:3d:7f:ea:48:2a:4f:
d5:81:43:8c:f7:9c:bb:8e:32:a4:b3:43:19:76:46:17:f8:24:
6d:db:64:15:3a:4b:c3:5c:e6:78:62:c8:3a:ea:5b:c9:a2:7f:
dc:63:8d:47:dc:fc:b8:9f:bb:06:dd:28:40:d6:10:b0:29:3f:
09:7b:a4:e2:54:4e:76:8d:09:a8:cd:d6:36:98:57:ad:01:11:
cf:73:6b:f5:3f:49:80:65:ed:c2:88:47:d6:cd:05:53:aa:79:
c9:1e:4c:62:25:e3:74:a6:30:ab:cc:e8:6f:77:d5:23:17:2e:
35:2f:b8:83:b4:65:f1:65:28:b8:ed:a5:2e:1b:53:0a:98:22:
a0:19:71:64:95:32:5c:e1:e4:2d:6a:7f:74:1e:10:81:8a:02:
00:d6:17:3a:9b:80:8e:2e:ad:29:ea:ff:32:0b:a4:f0:1f:5e:
41:65:f1:45:64:1e:0b:09:37:fe:b9:67:62:a5:75:71:03:2d:
44:58:f6:d2:a7:ac:52:21:de:77:ae:06:7b:38:75:4f:63:5f:
bc:0a:c2:7f:c0:d5:78:92:2e:32:0e:aa:08:39:aa:f4:86:3c:
24:95:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:19 2025 by rpki-client