Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8557B04EDC0611EF8FBBD062762E951A.roa
File: 8557B04EDC0611EF8FBBD062762E951A.roa (raw, json)
Hash identifier: RUcf6UGAP7SMg5Cfwg2X+9Xa7IPfm3tbxzKRc1WB2Z0=
Subject key identifier: 40:F1:64:62:22:4F:A4:79:1A:4B:9E:9C:DC:8B:CB:A5:8F:B0:95:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8557B04EDC0611EF8FBBD062762E951A.roa
Signing time: Sun 26 Jan 2025 16:56:44 +0000
ROA not before: Sun 26 Jan 2025 16:56:40 +0000
ROA not after: Sun 23 Mar 2025 16:56:40 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84740 (0x14b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 16:56:40 2025 GMT
Not After : Mar 23 16:56:40 2025 GMT
Subject: CN=6796694c-d177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:e2:4b:91:87:bc:41:20:d2:c6:e0:bf:6b:
8f:88:32:7c:81:a6:87:56:e9:ba:f4:c7:40:20:a9:
60:96:90:f4:8e:26:fb:36:44:78:ea:d3:c0:a4:3c:
87:5a:2d:7f:53:c9:5a:13:9e:f5:d7:26:3b:f8:44:
5e:42:e6:81:17:4d:04:12:4f:9b:02:75:9b:7c:0c:
80:77:6e:63:f0:3f:66:5a:ab:45:84:88:d9:8d:d6:
56:f8:96:b1:e9:ec:87:d8:25:d0:51:60:73:34:84:
6e:c2:21:5c:57:b3:ea:84:b0:86:ce:10:f4:7d:bf:
f1:6e:83:5e:a4:74:46:02:6d:75:82:ae:84:a2:51:
a8:37:41:c0:46:17:70:95:ca:10:71:29:86:a8:83:
19:91:74:e3:f5:03:be:d3:45:1a:68:f1:b0:fa:b2:
dd:ad:ff:3b:59:0c:32:13:02:7a:c8:e8:28:38:d6:
a2:30:53:71:a0:5f:5c:61:6c:87:0a:00:5d:8c:dc:
61:95:c4:da:32:20:fa:34:b2:7b:e6:24:23:bf:da:
43:e9:ff:23:9d:23:4b:43:d6:89:67:4d:3a:ea:68:
a2:99:7d:5c:f3:1a:ba:c9:b8:6e:d8:5d:94:50:58:
de:da:a5:36:68:9d:b6:b9:1c:dc:ee:a9:2d:f1:c1:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:64:62:22:4F:A4:79:1A:4B:9E:9C:DC:8B:CB:A5:8F:B0:95:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8557B04EDC0611EF8FBBD062762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
94:03:27:56:63:7d:f6:f8:bb:48:07:de:a3:11:f1:99:f5:18:
c9:aa:52:12:a2:e7:fd:5c:9e:07:f7:1a:b2:13:65:ab:a1:23:
a3:84:c3:b2:04:57:db:47:fd:b7:72:34:3b:d4:fa:2c:c1:8b:
25:12:3c:5c:b8:21:99:0c:ad:83:36:a0:1e:89:65:ec:09:b8:
3b:7c:ee:2e:7a:e3:34:15:dc:bd:b0:c8:8a:36:fe:49:2e:33:
5e:f9:20:48:c4:b0:6f:a6:93:f7:98:13:c7:b7:1c:cd:2e:b2:
ef:dd:64:f3:4c:ab:5a:0b:f8:05:07:69:d4:89:e0:d7:af:87:
3e:f4:f8:c8:f7:65:40:90:5c:75:5e:d1:37:a1:40:ce:c0:6c:
e2:b5:f5:1d:df:40:01:39:4f:1c:39:54:9e:f1:5f:d4:a9:bb:
40:a3:c3:69:ba:83:fd:25:65:84:57:86:18:ca:f7:91:90:22:
d4:eb:50:27:c2:53:ae:03:e3:4a:61:7d:c8:59:21:51:1a:d2:
52:2d:38:d0:39:b0:ea:3f:51:9f:5f:de:71:87:ef:0b:17:3f:
3c:ad:3f:64:63:e5:cc:d9:ba:d2:d7:0d:9b:da:13:45:aa:ae:
f2:db:2d:d8:26:06:4b:a4:e5:8e:54:f4:4f:8b:0b:af:be:92:
af:f5:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:49 2025 by rpki-client