Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A073D60AD3F511EF9D46F860762E951A.roa
File: A073D60AD3F511EF9D46F860762E951A.roa (raw, json)
Hash identifier: 9403O2Uc5tzoYTLhITG7VMIJgqO37+unGTfQFRKhAAg=
Subject key identifier: A2:4D:49:0B:A8:BB:2C:06:D4:84:B8:6F:88:74:32:9E:E6:D8:9F:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A073D60AD3F511EF9D46F860762E951A.roa
Signing time: Thu 16 Jan 2025 10:35:38 +0000
ROA not before: Thu 16 Jan 2025 10:35:35 +0000
ROA not after: Sun 16 Mar 2025 10:35:35 +0000
asID: 17561
IP address blocks: 154.213.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80846 (0x13bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:35:35 2025 GMT
Not After : Mar 16 10:35:35 2025 GMT
Subject: CN=6788e0fa-1c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:22:a8:15:84:c9:66:3a:d5:8b:0a:e7:24:
ef:09:a3:50:8c:f3:4c:1f:0c:83:ab:12:cd:57:01:
54:17:2f:c7:13:16:75:3a:24:34:3c:ed:05:f1:2c:
b9:1d:c9:7c:4a:ac:fb:79:99:e8:77:9a:ff:bc:ae:
21:85:64:b6:de:a7:2a:ca:a4:f7:27:02:07:c3:25:
0d:78:8b:b3:f4:51:ea:49:fc:8b:d6:28:ab:c2:8c:
c8:50:f2:4d:a5:67:c5:b3:55:e9:b5:d8:b2:96:bb:
b4:ac:4a:c8:0a:97:5e:99:bf:a8:64:eb:eb:26:f4:
7e:3a:51:8d:24:62:64:67:95:28:c7:a4:b8:f1:ea:
e9:8d:71:90:6f:54:b7:4c:0f:27:26:c1:eb:ee:bd:
23:ab:0f:f2:3c:e8:1a:1e:74:c0:8a:c1:fc:02:e9:
a0:c9:a2:0e:5f:99:87:84:e4:2b:e6:80:5b:8e:35:
72:3d:98:fe:11:e4:30:b8:92:de:c9:d5:dc:00:c0:
f1:e7:e8:1d:8d:f4:c3:bf:56:0e:69:85:a3:9e:e4:
f1:64:4b:fd:01:a4:d6:b3:3e:e0:e1:2c:9b:0e:3a:
ad:35:65:02:3b:6f:b7:f9:1e:3c:80:0c:1e:40:15:
d9:89:d0:64:c0:bb:10:4e:a9:b2:86:12:71:1c:2d:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:49:0B:A8:BB:2C:06:D4:84:B8:6F:88:74:32:9E:E6:D8:9F:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A073D60AD3F511EF9D46F860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
38:79:a0:5a:4f:09:31:45:84:03:ed:0d:5b:b7:c1:66:25:11:
3b:08:10:f6:c6:a7:01:56:c0:db:7e:8b:0b:50:26:8f:cf:2a:
48:06:32:6d:ec:3c:80:20:7d:83:df:55:25:d7:b0:fb:36:32:
34:40:5d:cc:36:5d:4e:66:6e:45:11:3c:f9:e4:7b:b8:ef:81:
f7:30:d7:7f:ae:55:ac:4c:02:50:60:27:94:51:41:93:2e:33:
5f:02:b4:74:78:0b:96:03:9d:71:c1:53:d2:51:37:ae:f6:ee:
6a:a6:0d:2a:f7:83:92:69:10:1f:69:cc:47:c6:74:4c:9c:cf:
54:15:55:23:4f:cc:9d:f6:de:97:ad:ae:b5:3e:78:40:9f:ac:
5b:7b:8b:5b:be:47:05:b6:18:c3:6f:08:46:27:01:6d:3c:55:
ec:b8:9f:b0:8f:d3:bc:18:94:14:01:bc:7a:f8:d1:df:2e:83:
c5:d1:b6:1c:a3:60:14:74:8c:23:d4:ca:17:f8:cb:4c:6b:41:
80:c1:8c:98:8e:90:af:09:67:10:e5:b3:a0:89:30:04:78:a6:
7b:ca:5f:bc:06:e1:9a:d7:5c:a4:b7:e1:8e:69:f0:50:c9:8a:
06:3f:78:d0:a4:b8:d1:16:fd:d1:33:a3:1d:e2:d1:f5:f8:b9:
b2:65:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:48 2025 by rpki-client