Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A418FF0CADE11EFB016C399762E951A.roa
File: 8A418FF0CADE11EFB016C399762E951A.roa (raw, json)
Hash identifier: dm7tnja07U5PqW53G7bVpIdjCj74OWNyTWZmqIDVNKQ=
Subject key identifier: 51:3F:83:74:99:C4:8D:1D:EE:0F:26:B9:6E:DF:72:EA:2D:F5:8D:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013559
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A418FF0CADE11EFB016C399762E951A.roa
Signing time: Sat 04 Jan 2025 20:57:42 +0000
ROA not before: Sun 05 Jan 2025 20:57:39 +0000
ROA not after: Tue 04 Feb 2025 20:57:39 +0000
asID: 203020
IP address blocks: 154.207.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79193 (0x13559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:57:39 2025 GMT
Not After : Feb 4 20:57:39 2025 GMT
Subject: CN=6779a0c6-3473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:78:73:5b:87:ed:2b:3c:0b:87:21:9c:1b:
46:14:41:5a:e6:c2:3d:ed:70:e8:c3:21:02:7a:30:
af:4e:70:22:cd:00:40:74:be:ef:b6:2c:6d:3c:90:
7b:cb:a0:25:0b:e0:cc:b9:60:5d:ac:4c:38:58:3b:
10:4a:d3:08:d5:fe:f2:09:4e:26:fd:cd:2c:93:e6:
da:27:15:71:99:95:2b:41:37:13:b6:66:a2:5d:b3:
00:80:b4:b9:ae:3b:87:18:7a:03:e2:a4:86:f2:ad:
ea:44:30:80:35:f1:ab:b1:f4:c0:52:4a:3c:73:de:
52:cc:71:b0:7c:47:25:0e:73:64:ab:86:df:72:3d:
68:e4:66:d0:1a:9d:8b:67:2e:cf:dd:4a:1d:ee:0c:
58:f4:68:eb:87:b8:d1:41:6e:1e:1b:5a:e5:f0:07:
ff:1a:cb:44:82:7f:1d:f3:57:a4:7f:6a:63:ec:41:
37:12:65:5a:6c:28:3d:84:f6:10:24:7c:07:37:46:
a8:1c:ac:3d:46:a2:71:b0:c1:d0:10:10:f4:52:16:
1c:8d:fe:d7:58:1f:4a:c1:e9:9e:ad:e7:0b:57:4a:
3c:6d:ee:ea:59:43:ea:e8:79:1e:92:e4:48:d5:7f:
f3:66:a0:72:eb:4e:1d:d6:36:8f:f7:17:1d:b1:30:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:83:74:99:C4:8D:1D:EE:0F:26:B9:6E:DF:72:EA:2D:F5:8D:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A418FF0CADE11EFB016C399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.254.0/23
Signature Algorithm: sha256WithRSAEncryption
af:36:ef:60:41:91:b5:6b:54:62:5a:e1:be:36:5a:e8:da:6d:
a9:c3:be:bb:c7:af:95:ac:e9:75:f9:9b:57:86:20:ef:2b:2a:
89:b1:98:64:ed:6d:08:b9:db:1e:02:ec:d0:84:9a:13:9a:61:
fe:52:a1:03:3b:03:c2:1d:83:1d:9c:3f:9d:14:5f:7d:92:f1:
ba:49:fd:0f:b0:f2:9f:fa:bf:60:a5:ab:f9:2d:eb:b7:ea:a0:
28:f3:3b:9a:49:ed:ce:7c:bf:c6:f0:21:10:2e:0b:18:87:c7:
90:91:5a:2b:d1:59:0a:1f:03:8c:3d:0a:00:40:1b:f1:e7:fd:
04:3e:74:1f:cd:a5:d9:2c:fb:13:b3:f2:5f:4e:b3:1d:da:88:
e8:5a:51:54:53:b8:0c:7d:df:b7:06:58:d6:7c:e7:c6:fd:db:
d1:ba:ff:7e:46:bb:10:76:30:0c:24:bc:f4:ef:c3:b1:f2:ab:
a7:12:39:68:d9:3e:82:2c:7f:9d:db:cb:a4:d7:a7:ec:5d:c0:
fb:5b:d9:e2:98:3b:11:95:d4:2f:cb:88:4a:78:a2:8e:fd:74:
53:fd:33:04:5a:96:ec:af:e0:cd:fb:41:10:d4:aa:ad:97:55:
55:ae:57:b5:df:70:d1:63:9e:1d:60:87:02:c2:96:01:10:60:
6c:8f:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:26 2025 by rpki-client