Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765FBA74D8E511EFA27F3642762E951A.roa
File: 765FBA74D8E511EFA27F3642762E951A.roa (raw, json)
Hash identifier: dsBXK8iJUKxI2/GhBKweNPb6o792hZHa9ky000+X8UA=
Subject key identifier: A6:10:60:D5:29:D1:51:4F:F9:63:56:DE:FF:9A:B1:0D:CF:FA:23:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01400C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765FBA74D8E511EFA27F3642762E951A.roa
Signing time: Wed 22 Jan 2025 17:22:32 +0000
ROA not before: Wed 22 Jan 2025 17:22:28 +0000
ROA not after: Sat 15 Mar 2025 17:22:28 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81932 (0x1400c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:22:28 2025 GMT
Not After : Mar 15 17:22:28 2025 GMT
Subject: CN=67912958-cf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:2f:59:92:f8:34:48:77:93:66:63:28:2e:
0e:7d:ea:d8:e7:40:3b:41:d9:ec:ca:a7:8c:cb:15:
1a:18:9b:2d:5f:4a:64:5b:bd:98:eb:6a:0c:70:0e:
6f:76:7a:33:08:99:ab:82:db:d4:88:52:df:e5:5c:
8a:20:50:b3:bf:56:70:64:56:65:76:b2:53:6e:7e:
11:f8:b0:68:ee:ed:d9:14:2d:4d:3c:33:a1:69:aa:
11:05:b5:2d:d0:d5:7d:bc:28:1c:24:e4:c2:91:98:
2d:c4:f5:60:4f:09:29:8b:80:db:7a:fd:dc:72:92:
cc:79:10:cb:ce:21:ff:3e:23:86:a9:b1:f0:44:92:
50:73:61:f2:21:1c:f7:e7:54:15:d8:05:81:90:7a:
dd:fd:ce:43:eb:11:7f:83:09:0f:03:ef:7e:4d:71:
b2:78:7e:fd:e8:f1:44:3b:ee:56:62:8e:05:b8:e2:
7f:f2:e0:21:18:f9:21:47:53:fd:04:b1:a1:9e:21:
46:54:bb:58:1f:7e:06:9c:22:e0:89:89:b8:14:0c:
0c:3e:a3:4c:e2:0b:d9:b1:83:9b:3a:f6:e0:e7:d7:
93:e8:b5:a9:ff:e9:2f:51:ba:e8:08:90:93:f4:d6:
87:c3:1c:5d:6a:00:b5:fd:ac:e5:47:dc:42:f0:60:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:60:D5:29:D1:51:4F:F9:63:56:DE:FF:9A:B1:0D:CF:FA:23:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765FBA74D8E511EFA27F3642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/24
Signature Algorithm: sha256WithRSAEncryption
15:97:a9:32:a6:5e:91:c6:68:2c:3f:a7:dc:4a:2f:ed:2d:54:
76:cb:33:63:68:3e:0a:8b:3a:43:b7:53:bc:a2:d6:21:18:fc:
0e:bb:bc:aa:52:64:b5:cc:29:6d:21:fc:ad:7d:8a:9a:6b:05:
4f:20:aa:0e:08:21:ed:bc:f2:3d:60:fc:ab:b6:c2:90:16:6a:
0c:c9:cb:1f:09:13:30:9c:20:8c:19:87:ef:a5:69:43:8d:c3:
48:1b:6d:fa:5e:50:cd:8b:5f:54:6d:b7:3e:36:c6:15:4a:a7:
3b:2b:b6:e6:31:e7:8c:f4:5f:41:09:d0:20:33:6c:34:89:2a:
72:35:05:da:77:17:76:4c:e8:11:bc:59:e6:5c:ba:0b:3f:25:
91:ef:b2:ac:36:c7:cf:91:05:f5:7f:83:d3:55:80:24:34:1f:
5a:e0:12:53:29:fd:10:4a:af:fa:d1:21:4f:e5:b3:a0:53:d8:
c3:0d:07:c4:cc:40:8a:ce:5d:90:60:72:96:b1:0a:bb:a3:2b:
e0:94:e5:bc:d1:e1:de:67:51:fa:ad:ea:6c:f1:7a:79:11:f6:
44:5d:ea:5c:e1:df:3d:2a:2e:15:93:28:70:46:73:ad:94:92:
2f:9e:39:78:7d:04:a9:a2:09:96:de:b8:83:e5:f7:28:c1:b1:
a9:77:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:32:26 2025 by rpki-client