Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C3033DED8B111EFB1634F6B762E951A.roa
File: 9C3033DED8B111EFB1634F6B762E951A.roa (raw, json)
Hash identifier: lZmZdSIhQqV0ldhhvr2XzVvPUJTxRf1bCMRP6XLUGJI=
Subject key identifier: 0D:C0:C4:58:D2:BA:6E:28:2C:14:9E:64:A1:86:29:71:E9:A7:07:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C3033DED8B111EFB1634F6B762E951A.roa
Signing time: Wed 22 Jan 2025 11:11:21 +0000
ROA not before: Wed 22 Jan 2025 11:11:18 +0000
ROA not after: Sat 08 Feb 2025 11:11:18 +0000
asID: 150008
IP address blocks: 154.206.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81648 (0x13ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:11:18 2025 GMT
Not After : Feb 8 11:11:18 2025 GMT
Subject: CN=6790d259-3fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:0c:44:91:64:0e:6d:c3:8c:0a:c7:11:68:
58:40:3c:f2:18:c7:65:11:63:88:2b:99:17:74:3b:
31:8e:99:d2:f7:b8:92:48:6e:fe:97:ba:23:dd:f2:
99:a9:d4:f5:38:36:6a:d0:16:39:aa:4e:30:60:6f:
92:6e:90:fa:a4:63:bf:8b:ac:4d:cd:a1:cd:d4:5e:
5b:e0:85:85:c5:bc:bf:59:a2:23:f2:ea:ac:84:99:
c4:76:2e:9a:ed:0b:89:b2:47:86:86:7b:ce:40:d4:
0a:84:37:e3:ec:8e:22:b5:94:21:50:3f:c8:65:77:
d6:6b:52:ff:c9:c8:ad:20:0a:f3:88:fd:f8:03:3d:
71:fa:28:f9:fd:90:00:0b:19:86:23:f8:bd:86:30:
3e:13:f5:74:19:09:b1:ff:9f:f9:bb:9f:d6:9d:15:
18:a0:20:d1:40:76:06:f9:6e:0c:99:d7:3c:53:02:
23:bd:58:05:f1:98:81:9c:87:f4:4f:58:fd:c5:2c:
8e:4f:04:50:dd:33:8b:16:08:c0:5f:1b:47:a9:e9:
ce:d7:6d:04:a1:88:a3:cd:c1:50:f8:b2:52:ac:1f:
22:af:0d:64:18:e1:a5:ea:03:85:8e:00:65:f8:7b:
72:8f:2e:7e:c6:33:95:71:51:46:2d:e9:dc:25:f4:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:C4:58:D2:BA:6E:28:2C:14:9E:64:A1:86:29:71:E9:A7:07:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C3033DED8B111EFB1634F6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.18.0/24
Signature Algorithm: sha256WithRSAEncryption
86:39:d6:d7:26:85:2c:42:5e:f0:a7:45:de:9d:33:80:62:7a:
c7:b4:a7:40:63:da:d7:85:b5:ae:fb:5d:4a:76:7d:d3:1b:fd:
29:db:6b:18:85:4b:ca:54:e3:09:05:71:c1:a2:70:0d:34:ea:
91:03:3b:c8:77:43:25:b8:f9:2f:ef:e6:75:5b:53:9a:ec:05:
d3:75:45:23:03:ca:63:62:9d:a7:42:3a:b2:93:6c:40:9a:5b:
ec:bd:60:8c:c8:c2:95:f5:1e:ea:fa:d6:e0:71:45:56:61:4f:
8c:a6:f1:86:69:99:68:e1:03:64:ff:98:1c:d4:6e:1e:79:65:
00:bb:b3:be:b6:66:58:8b:ce:49:fc:be:50:42:9f:c0:65:ae:
5a:36:06:6f:b9:73:e7:f7:b2:3b:1e:58:2f:60:ef:e1:9a:b9:
c6:0d:9d:bf:e8:9a:2c:ca:ab:d7:0c:67:f3:4c:9b:2a:ce:38:
b0:61:94:03:49:0d:5f:03:8e:73:1a:da:ec:1e:1c:2a:ad:69:
e3:ea:88:11:46:85:8e:1c:14:fa:de:bd:e0:1e:a9:f0:1c:4e:
ba:54:c7:a2:ff:62:b1:55:0f:da:a4:2a:4c:a2:c2:e0:da:17:
dd:72:3b:cd:a6:9a:5e:41:82:0b:15:b3:bf:a0:c8:7b:6b:ec:
d9:b9:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:31 2025 by rpki-client