Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9510A854D8E811EFAA1EEB56762E951A.roa
File: 9510A854D8E811EFAA1EEB56762E951A.roa (raw, json)
Hash identifier: q3JEkSnMbe/mJHeJGn+pv7XyoBfRivs29CUovTZ/gH0=
Subject key identifier: 9B:C0:3A:73:7B:73:6C:D2:E0:B9:A4:1F:13:18:10:06:81:01:7E:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01401E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9510A854D8E811EFAA1EEB56762E951A.roa
Signing time: Wed 22 Jan 2025 17:44:52 +0000
ROA not before: Wed 22 Jan 2025 17:44:48 +0000
ROA not after: Sat 15 Mar 2025 17:44:48 +0000
asID: 138915
IP address blocks: 154.206.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81950 (0x1401e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:44:48 2025 GMT
Not After : Mar 15 17:44:48 2025 GMT
Subject: CN=67912e94-4da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:14:01:81:30:c8:f9:21:30:87:ac:07:9f:
8c:91:9f:1c:ad:ff:5a:8c:e4:22:e0:93:06:d3:c0:
fb:e1:41:f3:ec:a6:eb:7c:68:de:e4:d1:cb:5d:02:
47:ba:19:62:7b:59:5f:a2:54:23:10:c5:c9:a6:2f:
0d:56:ef:92:9b:ff:03:86:86:61:98:e7:ae:b8:70:
71:09:aa:13:7d:8e:bc:bf:26:8e:64:04:cf:6a:ab:
6f:36:d6:f8:c5:67:cb:0e:81:fd:ca:65:a0:c8:f2:
09:9c:55:04:9a:af:31:7d:3d:77:13:33:29:46:eb:
99:11:fc:f7:d2:12:1f:b3:7e:2d:27:f4:19:bf:73:
6c:60:82:72:78:7c:36:04:5c:2d:fb:78:c0:08:dd:
66:ed:bd:fd:a0:1c:4b:0d:21:0a:86:1d:ce:63:94:
b4:3a:c5:c3:04:0d:8b:f5:27:08:1b:e8:05:aa:11:
60:9a:14:50:91:fd:9d:57:65:64:c0:f4:0f:3f:14:
8a:54:22:d2:c1:b4:c0:53:ff:10:95:9d:62:3f:60:
9e:2d:cb:41:3b:38:03:56:46:a4:c4:91:83:a2:7e:
79:e7:1c:b2:7c:3a:e1:7f:e1:02:59:e5:eb:83:5a:
f2:ae:50:1e:9a:e0:0a:bf:5f:4a:a6:5a:1d:25:7b:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:3A:73:7B:73:6C:D2:E0:B9:A4:1F:13:18:10:06:81:01:7E:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9510A854D8E811EFAA1EEB56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.96.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:a2:e5:cc:f9:f5:d4:c6:d1:71:30:88:69:ab:ac:ce:c1:cf:
83:cb:ea:69:60:0b:a9:54:84:22:f1:8b:f6:27:ab:25:c3:21:
2d:01:0a:4c:44:80:1c:c7:d1:39:e5:f0:00:b8:01:ea:82:a2:
57:e4:c3:83:42:7b:2b:0d:e8:1a:87:4c:64:90:db:36:bd:6d:
eb:5b:8f:69:75:2e:c5:45:f8:e0:ba:88:12:f6:13:49:b2:84:
a3:05:5e:2f:0f:92:7a:44:72:6a:c7:fa:77:62:62:73:74:f3:
93:a5:12:81:1a:05:12:33:0c:d3:76:64:e5:69:9b:8b:b5:46:
ae:fb:5f:23:28:aa:b5:27:e1:3b:92:d5:f2:92:bb:66:16:7e:
dc:f2:01:17:7b:8f:75:e8:73:9f:14:1b:2c:d3:c1:62:b8:82:
00:d9:62:af:a1:08:7e:4f:8a:21:08:0b:e6:3d:df:3a:21:3c:
a2:bb:42:79:ec:c5:16:60:e1:aa:6e:4d:ba:fa:68:a9:a8:7e:
c1:42:ec:20:c3:6c:2c:38:51:de:d9:d7:b6:e6:a2:65:d0:26:
06:15:c8:ed:6c:fe:41:6f:64:10:48:0a:c2:e1:b6:97:98:e3:
34:b7:33:93:7e:54:4c:74:76:74:ca:cd:b7:fd:f4:8b:39:a2:
ce:4e:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:32:02 2025 by rpki-client