Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6797AAB21E11EF81573249762E951A.roa
File: 9E6797AAB21E11EF81573249762E951A.roa (raw, json)
Hash identifier: jvJoqWQS14XamjUyFBe0o2b4nj1MeFHtYvP4booD0Vk=
Subject key identifier: 17:19:76:E8:E3:3C:04:AB:31:14:42:E7:53:32:AD:F8:33:D3:52:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01180C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6797AAB21E11EF81573249762E951A.roa
Signing time: Wed 04 Dec 2024 09:03:25 +0000
ROA not before: Wed 04 Dec 2024 09:03:21 +0000
ROA not after: Tue 11 Feb 2025 09:03:21 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71692 (0x1180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 09:03:21 2024 GMT
Not After : Feb 11 09:03:21 2025 GMT
Subject: CN=67501add-1f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:ea:cc:39:4d:3d:51:db:98:46:57:18:69:
dd:a3:e2:93:ef:bf:42:b2:6e:f4:00:55:a4:6f:4b:
c0:99:dc:76:dc:d8:73:2b:c2:fb:e8:9e:f5:01:56:
64:2b:81:5b:ad:2f:ee:14:16:c1:bf:08:16:35:02:
69:b4:fd:ad:1d:20:b8:25:35:79:45:16:f6:58:4d:
b6:71:4d:6b:46:77:4c:f2:f6:c5:52:ae:46:eb:b9:
7d:d8:0a:c1:39:35:86:de:c7:c2:23:b9:20:ff:6a:
d6:a2:f2:36:1e:e6:d5:64:8f:3f:83:72:50:95:75:
dd:6a:2d:92:d8:89:00:52:28:f3:e8:cd:c1:0c:20:
ab:98:65:16:40:87:d0:d3:d9:e2:f3:42:29:c4:36:
0d:02:c1:19:97:51:14:37:58:70:37:95:83:05:85:
12:29:9f:25:15:be:b9:0c:cc:30:cc:4f:5d:63:ff:
06:25:37:2c:83:af:5c:2a:1f:c2:68:0c:ac:e7:15:
b7:ec:af:e8:8d:36:4a:e3:9b:49:41:7c:ce:eb:fa:
f4:0f:ae:89:2a:aa:19:d0:54:d0:89:58:95:4e:69:
27:c4:d1:7c:ee:e8:cf:de:9c:26:67:4d:37:08:86:
47:73:48:e2:c7:ba:d2:ba:f2:11:f6:85:2c:bf:78:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:76:E8:E3:3C:04:AB:31:14:42:E7:53:32:AD:F8:33:D3:52:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E6797AAB21E11EF81573249762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:dc:d6:09:b4:82:64:3a:02:26:ec:37:9f:94:8c:f6:04:1f:
00:04:dc:a9:9b:2d:70:1a:22:3d:00:b6:7e:f0:47:91:69:8e:
bd:18:e3:48:c5:79:b1:0f:45:fd:1e:74:a1:60:eb:7a:e8:86:
55:53:fe:f5:a5:c0:ba:bb:cc:08:12:46:22:70:ea:49:b4:f4:
f4:70:99:a5:a0:59:89:22:dc:97:54:06:c5:60:b5:c9:51:85:
29:44:75:f4:e9:40:55:4b:94:c8:2b:8a:83:e5:3c:8a:a7:d7:
db:6d:c5:12:8f:ac:28:4e:e5:fd:b4:d2:ef:7f:e1:55:7f:d1:
7e:44:5e:4f:8f:33:9e:fc:12:24:36:cf:e3:86:4c:24:10:d3:
90:62:63:e3:0f:70:ca:4f:a3:d4:31:32:a1:d0:9e:ae:a9:d2:
0a:82:6b:cd:d5:ba:4f:24:94:30:66:9b:3d:e1:ec:90:4a:3e:
65:a9:e4:c2:b0:bf:e2:58:fe:02:fd:8d:b6:62:20:97:82:55:
30:c5:2b:3a:34:73:da:f4:a8:80:69:2a:6b:33:06:32:ac:be:
56:d9:64:87:c2:cf:43:4b:86:06:99:2a:ab:c5:eb:02:80:c6:
dd:a8:0d:86:61:67:1b:19:04:89:cf:f1:94:5c:84:59:0e:89:
12:cc:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:15 2025 by rpki-client