Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6A5884DCCF11EFB373D4AB762E951A.roa
File: 7F6A5884DCCF11EFB373D4AB762E951A.roa (raw, json)
Hash identifier: TTdOquopZfv5APqfWWmmqdA+JDOgmA4Xr0y5WbQiQco=
Subject key identifier: 9C:7D:54:E4:79:D3:85:03:C9:91:8F:67:BE:68:8F:25:CE:FF:D7:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6A5884DCCF11EFB373D4AB762E951A.roa
Signing time: Mon 27 Jan 2025 16:55:23 +0000
ROA not before: Mon 27 Jan 2025 16:55:19 +0000
ROA not after: Wed 12 Feb 2025 16:55:19 +0000
asID: 135097
IP address blocks: 154.213.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85135 (0x14c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:55:19 2025 GMT
Not After : Feb 12 16:55:19 2025 GMT
Subject: CN=6797ba7a-cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:8e:e6:11:1b:9e:bd:97:2e:d8:d4:e1:d2:
a0:1d:e6:5b:e1:0f:19:29:21:b6:e1:f8:b4:75:7a:
78:26:66:3a:a2:b3:dd:dc:04:ac:48:af:af:6a:d6:
ec:70:54:cd:6b:b4:48:db:c2:37:70:b7:dc:4a:22:
20:cb:37:17:95:e4:13:c6:13:7e:b2:50:bf:25:c9:
7c:0f:62:23:ce:bd:f3:01:0f:20:fa:ec:8f:90:e7:
05:06:97:d3:20:b5:18:8b:c6:7c:a8:a9:1a:7a:ee:
77:4d:52:b7:de:d0:f0:53:61:a7:2f:b2:b4:a7:8d:
71:99:01:bb:c0:3c:52:8a:15:97:cb:53:57:31:98:
ae:b5:80:e7:9e:bd:e9:12:16:09:87:2c:55:9a:39:
aa:dc:f7:41:4f:8e:9a:49:29:1d:fc:d3:04:08:cb:
08:63:fe:fd:3d:5e:ec:86:6f:cf:8b:8d:f8:54:2f:
01:93:86:f7:99:23:c1:91:43:ea:cd:4f:54:23:ec:
00:e0:f2:66:db:2f:1d:0e:c8:26:57:cb:58:30:a7:
87:67:ee:49:fe:c1:f7:d7:13:ca:9f:65:56:84:d2:
c2:31:e4:33:16:54:66:9e:6c:5c:4f:32:1f:e8:69:
e8:2a:59:69:91:9b:04:33:01:d9:29:ce:13:a8:20:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7D:54:E4:79:D3:85:03:C9:91:8F:67:BE:68:8F:25:CE:FF:D7:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6A5884DCCF11EFB373D4AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.10.0/24
Signature Algorithm: sha256WithRSAEncryption
43:96:5c:71:0c:1b:ff:35:77:77:64:22:52:bf:16:c3:68:33:
0d:b3:5a:ab:a1:90:4d:4c:66:41:cb:0f:4b:ec:12:9f:7b:ea:
19:66:df:5e:7e:89:dc:f8:59:c5:81:d9:91:62:b6:19:a1:49:
0a:44:25:7c:e3:18:3a:b8:9f:9e:dd:e0:37:74:15:47:e2:50:
ac:40:be:55:69:0a:fd:85:33:0f:73:d7:44:aa:4c:0d:6a:f6:
cf:1e:01:c3:d7:39:a1:c1:98:dc:d0:bc:db:0b:c2:c5:28:e9:
68:0e:bd:28:2e:a1:e4:30:69:73:73:4c:91:ee:22:b2:4c:6f:
f6:bd:a8:1f:8c:7a:0b:4e:36:db:c4:09:63:8d:d5:66:01:35:
71:fe:b5:17:fb:02:61:9a:74:da:94:92:f5:05:41:3c:6b:59:
10:51:51:41:fe:9d:f7:ab:8d:ec:a8:a8:a6:4b:88:ca:99:43:
db:20:fc:dd:37:36:64:d3:be:db:b6:14:a9:0f:7d:5a:ed:4f:
31:77:51:d3:eb:8b:d5:8f:c6:55:3b:df:3a:cb:f4:e2:6a:8a:
b4:8e:1d:5e:4f:0f:31:a5:82:c9:f6:e6:7f:7b:39:1e:cf:fb:
1b:1b:af:d1:18:f3:57:1d:9b:3b:11:53:91:44:fe:47:80:cb:
f4:64:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:35 2025 by rpki-client