Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA6AA4AD4B211EFA110B6B4762E951A.roa
File: 9BA6AA4AD4B211EFA110B6B4762E951A.roa (raw, json)
Hash identifier: OCJISALhgF/YSnopZwIk1ZSps23ybfL6XMV0lblr1II=
Subject key identifier: 7E:63:97:BD:B4:68:BF:0D:CC:E4:8E:8B:09:DC:3E:2D:7C:5C:D4:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA6AA4AD4B211EFA110B6B4762E951A.roa
Signing time: Fri 17 Jan 2025 09:08:25 +0000
ROA not before: Fri 17 Jan 2025 09:08:22 +0000
ROA not after: Mon 17 Mar 2025 09:08:22 +0000
asID: 17561
IP address blocks: 154.216.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80967 (0x13c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:08:22 2025 GMT
Not After : Mar 17 09:08:22 2025 GMT
Subject: CN=678a1e09-3d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:25:b0:2c:e4:83:bc:48:1a:8d:72:eb:77:
74:77:c7:9d:30:0b:3b:a1:fd:2c:34:12:21:6b:1c:
24:04:27:7d:45:e8:0b:ba:0a:3d:29:95:b7:32:f1:
a3:73:91:62:f7:96:8a:6d:90:16:70:b1:56:2c:47:
60:5b:ba:ce:f3:11:8b:76:d7:41:43:c9:b6:4d:7e:
16:b9:1b:5c:8d:f7:2d:6e:07:dd:eb:18:46:e8:ca:
ce:1a:90:4c:62:7b:8d:39:17:0e:24:f5:6c:bb:c1:
6a:d9:6d:6c:be:5b:8a:e8:3a:7f:b6:4f:1b:b8:8d:
6d:24:39:a6:44:50:16:12:90:a1:6c:c4:bf:a5:5b:
57:b6:bd:1f:b0:cc:1c:72:e0:dc:e6:df:0d:f0:0b:
a6:f0:9a:a9:75:b4:25:ed:64:89:59:6a:bf:a8:2e:
c7:fc:dc:ae:96:0d:5f:b5:58:33:2e:66:21:7a:52:
66:dd:e3:c8:b4:b7:ba:1d:92:9f:9e:05:26:c0:95:
b4:c4:55:fb:d8:8c:54:07:c3:5b:14:39:56:61:41:
e3:dc:f3:69:4d:7d:26:a8:70:38:68:4f:1d:e7:e2:
92:f9:7a:d1:df:5c:61:10:62:c7:09:ef:cc:da:0d:
2a:c8:9a:3b:84:b5:da:9f:f3:97:da:ab:df:77:32:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:97:BD:B4:68:BF:0D:CC:E4:8E:8B:09:DC:3E:2D:7C:5C:D4:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BA6AA4AD4B211EFA110B6B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.17.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fe:87:c9:2a:0d:a0:5f:60:4a:5f:f5:61:83:fc:4f:3c:8a:
a7:00:0c:97:62:b2:8e:13:1f:74:9c:27:9d:bf:75:f4:40:20:
53:e0:69:e0:e6:21:01:42:85:ed:7e:12:9e:41:cf:13:e9:8e:
b6:51:b6:10:49:54:ee:9c:9a:83:7b:95:09:42:e0:b1:53:71:
f0:fe:80:22:05:4f:cc:94:3a:4a:24:dc:cf:31:bd:f4:4a:ce:
02:0e:5a:6e:66:ff:2f:c6:b9:7d:a1:40:bc:1f:7e:a9:6b:9e:
a2:aa:ca:4c:b9:d2:29:5e:31:7c:6d:3c:80:38:2f:79:7e:24:
05:e4:67:66:b9:05:02:45:bf:1a:99:0f:c9:1f:9b:47:9a:28:
0e:8b:01:ef:8a:77:44:de:d0:62:ed:48:0c:66:7e:53:35:8c:
b9:db:b7:36:c0:c0:62:eb:9d:b9:5e:26:e1:fe:42:3b:ac:9b:
55:4c:3d:63:9e:aa:a3:ad:04:05:76:1d:2e:d9:45:d1:20:04:
b2:c8:48:14:6e:62:fb:27:84:f4:d4:6f:52:d7:02:0d:37:e6:
14:b0:23:c8:5d:65:91:31:35:2c:2c:f6:4d:2e:3e:df:33:a1:
ad:5e:52:78:5e:c9:d7:91:0f:57:00:87:56:df:a9:37:37:4d:
0d:0b:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:18 2025 by rpki-client