Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C3FA72D40911EFB7499F5F762E951A.roa
File: 73C3FA72D40911EFB7499F5F762E951A.roa (raw, json)
Hash identifier: bb1hWGyr1VS2lNyvWd/dmkcUAgNehq8TWSu43OuFMPA=
Subject key identifier: AA:B4:AD:33:16:F1:4C:DA:AD:3A:7E:45:9F:43:08:75:8C:75:A3:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C3FA72D40911EFB7499F5F762E951A.roa
Signing time: Thu 16 Jan 2025 12:57:34 +0000
ROA not before: Thu 16 Jan 2025 12:57:29 +0000
ROA not after: Sun 16 Mar 2025 12:57:29 +0000
asID: 17561
IP address blocks: 154.206.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80954 (0x13c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:57:29 2025 GMT
Not After : Mar 16 12:57:29 2025 GMT
Subject: CN=6789023d-0aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:13:7d:e3:d7:81:a1:21:ea:c4:1c:ae:4f:
17:c1:98:2d:08:cd:4f:e2:4f:72:23:db:07:3b:df:
eb:7a:2c:d5:3d:72:41:c0:31:3e:aa:1a:de:20:48:
06:fb:2b:fe:7b:68:91:47:2d:41:1e:58:59:9e:39:
e2:b5:0d:21:43:99:d0:8b:7e:a5:51:c0:c8:89:47:
da:c9:98:19:c9:96:aa:42:ee:10:e2:31:90:a5:7b:
e4:07:2d:fe:62:bc:e4:33:4a:94:51:3a:69:39:51:
98:9b:37:55:90:f7:46:d6:91:a3:a6:2a:df:1b:84:
29:be:57:b0:29:d8:6f:84:1b:59:75:de:f6:7e:f2:
1f:51:7b:6f:d2:b5:88:40:1d:74:56:61:3e:55:c8:
c3:5f:a6:67:7d:0a:11:b6:21:9e:51:86:b3:d9:1e:
24:b7:c2:e2:b4:f8:e0:a3:5d:b5:5d:a3:8b:71:70:
b9:d0:7f:66:d2:ea:9c:c2:55:fc:fd:c5:fe:93:2c:
24:ee:70:ef:ae:61:3a:fd:70:dc:82:0d:84:8a:bd:
1a:40:31:c4:84:2b:b2:dd:9d:c6:c5:bc:69:27:1a:
c7:9a:0e:96:fa:a1:21:18:02:65:9b:1c:df:95:26:
a9:22:0b:6d:7c:da:6f:86:ad:5e:b7:8f:68:21:0f:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:AD:33:16:F1:4C:DA:AD:3A:7E:45:9F:43:08:75:8C:75:A3:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73C3FA72D40911EFB7499F5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bd:00:82:6b:96:1b:06:29:a1:18:76:39:0c:5f:79:0d:78:
e8:0a:8b:2d:52:65:34:74:32:64:31:bf:52:1a:83:b4:92:f0:
a7:af:f8:9d:e6:cc:f8:86:fb:d7:4a:a6:54:1b:ce:4f:0e:39:
5b:de:8e:40:ef:17:4b:95:c6:4f:3b:cf:02:2a:97:1b:07:60:
d7:3b:d5:e7:a2:cf:b9:a5:0d:aa:cb:21:ef:55:9b:84:05:e8:
73:68:9e:8e:37:5d:cd:98:b8:89:ec:eb:a5:8e:4e:a6:fb:c0:
fd:dc:16:27:1f:7f:72:4c:f3:ad:03:d7:56:5f:59:9c:82:16:
a8:49:3c:32:1b:f8:49:b6:a8:29:38:3d:dd:90:fe:1b:67:93:
1d:d7:57:77:0b:85:79:7e:7c:f6:86:1f:3a:db:53:61:5a:bd:
d2:bc:3f:12:30:53:f0:1b:20:11:0a:ca:37:ee:04:0e:67:6d:
3b:d6:fa:e2:66:e0:ac:8e:26:59:59:64:b0:af:bb:92:65:d6:
e4:f1:94:3c:1e:f0:3e:c7:6b:8a:39:a3:a8:f1:fd:77:2c:54:
9f:0b:2d:b4:15:23:2c:3e:87:9c:56:e2:23:ee:f4:d5:e7:82:
27:d7:b5:e2:cd:b1:3d:8b:6f:a8:32:75:21:38:a1:c2:c7:4f:
c3:f4:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:50 2025 by rpki-client