Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA8451EDA6811EF859EA07B762E951A.roa
File: 8DA8451EDA6811EF859EA07B762E951A.roa (raw, json)
Hash identifier: xNAZNVUCbqICyncHMeQt8ckUpQ9/Obik8xbnkRqmjJk=
Subject key identifier: 2D:57:1A:51:E3:5B:7A:0C:6C:0A:F9:A2:68:F3:BB:CE:F9:BC:9D:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA8451EDA6811EF859EA07B762E951A.roa
Signing time: Fri 24 Jan 2025 15:33:26 +0000
ROA not before: Fri 24 Jan 2025 15:33:22 +0000
ROA not after: Thu 27 Feb 2025 15:33:22 +0000
asID: 45814
IP address blocks: 154.204.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84143 (0x148af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:33:22 2025 GMT
Not After : Feb 27 15:33:22 2025 GMT
Subject: CN=6793b2c6-8f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:c7:33:62:ea:6a:21:40:ca:1a:8d:40:1f:
f3:4d:5b:59:38:13:8f:30:14:81:c7:99:79:b9:79:
07:14:4b:d4:c2:11:31:39:aa:a3:df:1e:de:a4:34:
cb:40:71:20:b3:84:03:bf:8b:f6:03:54:b4:4f:1e:
4f:b6:dd:76:59:48:8b:c0:24:a2:8c:56:47:32:61:
fd:79:7c:da:50:e8:7c:5e:4d:6d:26:4f:42:4b:f7:
f1:27:7e:59:6e:ba:8d:0f:15:c7:e8:ce:08:ad:1b:
f3:b5:26:c1:85:07:fd:e9:8c:be:73:44:7b:f1:a4:
83:88:11:2c:56:0e:8f:c2:10:f9:ac:60:91:30:9e:
15:bb:95:ce:70:f7:a1:9d:f6:11:c8:45:33:b6:d5:
9e:67:30:9f:fa:bd:e5:bd:f5:4d:7f:e7:a3:c9:84:
de:07:14:7a:58:f9:bf:14:c7:a7:af:3f:00:40:f4:
93:99:a7:30:84:75:72:a1:a1:9a:b1:23:fa:5a:ec:
7b:80:0b:cd:65:90:c4:21:b7:d3:07:40:52:52:b9:
41:ed:08:9d:37:6b:fe:bc:44:32:dc:ec:41:96:91:
15:ea:f2:88:2f:b4:e1:a3:c7:22:cf:3e:39:40:a6:
ea:18:d6:7f:a6:1d:47:1d:e0:38:9d:70:a4:a0:21:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:1A:51:E3:5B:7A:0C:6C:0A:F9:A2:68:F3:BB:CE:F9:BC:9D:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA8451EDA6811EF859EA07B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:47:b6:9a:01:62:3f:9c:39:e2:85:22:2f:b3:88:24:b7:05:
2e:ae:2e:ed:bf:0c:57:15:3b:78:73:d9:60:a3:c7:2d:08:60:
8d:e5:e0:ff:72:b2:09:2c:3a:ed:01:ea:fb:db:46:10:9b:a2:
04:ca:6e:13:47:8e:91:da:93:50:69:2c:4c:26:e5:cd:c2:98:
e8:1f:fe:55:93:07:94:bf:2f:fc:7f:44:e4:3b:ba:f9:4e:9e:
41:92:7c:a6:9d:c0:27:91:c2:bb:ec:d8:80:46:6f:4f:9c:c5:
38:c4:a0:6f:c4:5d:ca:49:9b:4a:11:5e:1c:76:8b:29:bf:e3:
7b:34:f8:89:9d:0c:ea:6d:8e:41:a3:d7:ba:59:8d:c2:f2:70:
c9:01:ff:1b:fd:09:22:5f:49:82:87:53:2b:ad:18:79:d0:4b:
cd:f2:3b:73:31:19:c8:4a:87:2f:5e:1f:53:9c:17:51:1e:dc:
f5:84:84:2a:e1:87:99:16:67:27:53:1f:ce:c9:04:7e:92:a2:
53:72:9c:0b:cb:c5:3c:be:bc:1d:3f:a1:e5:a9:27:93:9b:50:
c7:aa:db:86:e1:fb:89:0b:aa:95:03:0e:89:b5:9d:de:2c:bb:
b3:2b:a0:f9:1e:98:1b:29:34:ce:57:f3:e7:d5:e5:5f:71:50:
2f:0a:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:47 2025 by rpki-client