Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C9A88A4DB1F11EFB5490052762E951A.roa
File: 9C9A88A4DB1F11EFB5490052762E951A.roa (raw, json)
Hash identifier: QP6p6PkTKyO2B2C/2qTmjKEM6LWaW1PA+pbuxKla7NI=
Subject key identifier: 91:46:15:1A:1A:CD:F4:0B:60:E5:97:99:BA:88:B1:91:E3:AD:76:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01497D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C9A88A4DB1F11EFB5490052762E951A.roa
Signing time: Sat 25 Jan 2025 13:23:49 +0000
ROA not before: Sat 25 Jan 2025 13:23:45 +0000
ROA not after: Mon 03 Mar 2025 13:23:45 +0000
asID: 48031
IP address blocks: 154.218.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84349 (0x1497d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:23:45 2025 GMT
Not After : Mar 3 13:23:45 2025 GMT
Subject: CN=6794e5e5-b080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:6f:5f:23:fb:2c:e6:5a:33:0f:5a:3d:17:
ad:72:0a:48:32:a2:5f:d8:2a:53:c3:80:89:eb:1a:
85:f8:e1:72:07:0b:48:a8:bb:e9:c3:03:81:92:9d:
96:3a:ed:8d:27:7f:a9:b1:6f:76:97:21:8a:3d:17:
90:e1:5c:48:a0:e7:0f:a0:a8:39:4c:69:a3:60:2f:
03:1a:cb:30:67:53:c7:d7:46:29:a4:ba:16:89:9f:
d3:f2:c7:88:80:5a:fa:f8:2b:52:f4:11:c3:2d:73:
09:a4:51:ca:c9:80:c9:ad:4a:b5:76:cb:ef:d1:08:
de:7a:29:42:4a:a1:fe:fd:ec:ab:58:dc:66:66:30:
ad:e5:c9:a8:63:a2:9e:2c:5b:8c:b6:1a:7c:9e:f0:
4b:a3:05:c5:55:01:d3:1b:f2:a2:33:97:7c:e3:6b:
90:0b:3b:ba:61:05:49:79:32:8b:77:b9:5f:f3:3c:
73:a1:59:68:11:75:c8:23:3f:60:5c:d3:49:5a:40:
1d:c0:36:ab:9f:87:03:03:87:dc:6c:b9:95:09:72:
bf:23:4e:e2:6f:ca:75:39:9f:68:82:9d:49:c9:b0:
15:28:cc:58:2d:ca:26:61:8f:07:2b:d8:57:e7:23:
30:88:fa:53:c5:18:f0:50:d5:94:db:10:74:d8:b2:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:15:1A:1A:CD:F4:0B:60:E5:97:99:BA:88:B1:91:E3:AD:76:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C9A88A4DB1F11EFB5490052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.17.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f6:60:65:cb:89:df:69:bf:80:2f:71:03:a3:a2:f1:fe:6f:
5a:fb:a6:e9:14:8b:93:ec:3b:43:b7:8e:e2:70:55:20:c6:d1:
34:b9:c6:aa:9c:30:8c:ff:8a:a2:e4:43:f7:e3:cb:5b:b2:3c:
f7:53:82:f0:36:7c:d2:7e:a0:5a:fd:3d:e8:b6:0b:26:4a:57:
b6:48:3d:06:26:e2:58:e4:16:0d:fe:89:b6:ea:51:f4:10:67:
25:16:83:51:63:f9:20:40:c1:9f:d8:9a:bf:18:1a:a3:a8:2a:
1f:87:48:b3:07:55:ee:34:e7:5b:58:a0:a8:63:f8:ba:f5:3c:
49:c9:3f:6f:30:ed:42:e6:45:22:5f:4b:ce:fb:36:ec:e4:9e:
d1:a3:37:db:0d:80:76:13:1b:08:fd:da:da:29:16:a6:0d:48:
d3:55:46:27:7a:05:47:a8:fd:3d:60:79:74:fd:d9:ea:1b:bd:
c3:32:d6:f6:54:d5:04:5e:32:02:8c:68:64:9a:c5:85:5f:3c:
13:b1:51:32:af:f5:32:ee:cc:25:00:7b:3c:c2:7b:07:9a:0b:
c3:9f:af:68:ec:e3:ed:bf:6c:d5:10:98:08:34:82:78:78:a7:
8c:d3:28:76:3b:ad:42:32:ca:92:3f:1a:c4:20:ce:ed:0b:5b:
69:cf:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:04:16 2025 by rpki-client