Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AB54A0D3FC11EF89A8248E762E951A.roa
File: A7AB54A0D3FC11EF89A8248E762E951A.roa (raw, json)
Hash identifier: An4IdqGCk5ctiTQJFOhw9gdnZsphVxowSH1ff8r2RXM=
Subject key identifier: E8:87:28:65:54:E1:CC:6F:4B:C7:92:F2:B0:4F:61:B5:AF:17:6B:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AB54A0D3FC11EF89A8248E762E951A.roa
Signing time: Thu 16 Jan 2025 11:25:57 +0000
ROA not before: Thu 16 Jan 2025 11:25:53 +0000
ROA not after: Sun 16 Mar 2025 11:25:53 +0000
asID: 17561
IP address blocks: 154.206.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80882 (0x13bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:25:53 2025 GMT
Not After : Mar 16 11:25:53 2025 GMT
Subject: CN=6788ecc5-948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:c7:cf:8f:d1:86:39:aa:9d:a0:4c:fb:23:
98:7d:d4:d0:9f:41:ea:7f:78:75:dd:4e:77:3b:46:
b9:38:f9:91:c6:17:6a:15:64:c6:a9:49:2b:5d:a5:
7a:cd:82:94:15:fe:48:90:ec:69:c4:c0:c4:3d:bd:
f4:93:4e:87:95:17:c8:ac:86:39:e2:98:8f:80:e1:
d6:02:f0:3d:45:07:6d:26:b2:06:e1:ee:59:e9:23:
13:5f:c2:78:be:28:f6:b8:07:64:41:12:78:0a:a1:
b5:04:a2:45:9d:c1:13:06:5b:b1:dc:58:2f:f8:1f:
d1:1d:ef:b1:38:9d:b9:47:99:43:85:32:2f:91:a5:
b8:3b:e6:4d:55:62:bb:9d:23:91:12:61:8c:27:62:
38:4d:ad:e4:7c:03:20:7c:cc:f9:2a:f0:40:85:53:
e5:a8:07:f5:e5:20:4d:8d:74:81:83:88:85:1b:59:
58:05:ea:85:cd:4c:8c:60:d6:4c:0b:90:46:93:33:
8b:02:44:f3:82:da:98:2e:06:e6:84:d4:58:76:67:
99:a0:c8:3e:ac:c2:e2:ab:c2:50:2b:66:e6:e7:0b:
90:7b:7f:78:a8:4f:04:c1:b7:fc:51:06:f6:98:e4:
b0:78:7c:3a:11:1a:31:83:ea:5e:a2:46:fe:fa:b3:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:28:65:54:E1:CC:6F:4B:C7:92:F2:B0:4F:61:B5:AF:17:6B:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7AB54A0D3FC11EF89A8248E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.227.0/24
Signature Algorithm: sha256WithRSAEncryption
61:00:29:be:cc:4a:a9:25:e8:ba:f4:81:02:46:36:40:0a:93:
68:04:b8:0a:cb:ad:75:56:47:7c:57:60:0e:6d:2e:eb:d2:e3:
08:4d:3d:dc:08:4d:d9:33:c8:e3:3b:40:ff:9d:fc:81:a1:47:
03:b5:f1:03:05:38:01:a7:cd:39:04:6b:a8:25:b8:a4:86:4c:
03:c7:fa:0a:91:40:8d:78:6b:ea:23:5b:26:d2:b2:ea:09:f2:
98:ae:b0:21:79:f2:24:fc:e6:4a:90:ed:e5:22:76:38:38:41:
42:cd:57:b2:58:53:1f:0f:21:dd:5b:19:98:68:68:cd:cb:98:
5d:c9:a2:05:1e:0b:5a:24:d4:d1:c8:a3:f4:f4:50:76:d3:90:
7a:ed:22:cc:72:0f:1e:6d:63:1c:74:a4:80:81:ac:db:48:31:
c2:bd:a9:e9:e5:16:73:51:0c:0e:fb:ce:b3:d4:29:e8:9e:81:
f3:e7:5c:52:f3:0d:84:cb:1a:19:0a:60:9d:84:36:2e:79:25:
7e:d1:b8:e6:cd:02:aa:a4:a2:0e:74:f8:2f:23:23:8d:d1:bb:
43:8d:97:75:e6:4d:1b:32:9c:78:36:8c:a3:66:89:0e:f7:c0:
d8:b4:98:c1:85:af:be:af:0e:07:30:5a:a3:e4:e9:21:85:43:
0a:d3:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:29 2025 by rpki-client