Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8438DDED8AB11EF86626743762E951A.roa
File: A8438DDED8AB11EF86626743762E951A.roa (raw, json)
Hash identifier: tGN9DM6EtSvjpqKaXlI80kZwpcLWDoYHpZUEKebjllE=
Subject key identifier: DE:BA:C1:FF:B1:66:9A:60:8B:28:04:E6:0E:74:5E:B1:B1:F0:15:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8438DDED8AB11EF86626743762E951A.roa
Signing time: Wed 22 Jan 2025 10:28:45 +0000
ROA not before: Wed 22 Jan 2025 10:28:41 +0000
ROA not after: Sat 08 Feb 2025 10:28:41 +0000
asID: 150008
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81602 (0x13ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:28:41 2025 GMT
Not After : Feb 8 10:28:41 2025 GMT
Subject: CN=6790c85c-64c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:71:c9:7e:41:b4:2c:dc:b0:86:85:17:47:
ae:5a:f5:b4:64:07:ff:bd:58:a4:37:eb:a2:0e:2a:
6d:66:20:a7:da:67:42:ef:ca:90:fe:85:b2:62:c2:
ef:9a:15:f1:40:a0:77:23:2c:4c:c5:6b:43:26:6e:
99:1e:54:b4:e1:43:f1:2f:f4:65:ca:f4:64:38:3c:
b7:e1:84:04:ed:27:5a:e5:40:6e:b9:6f:dd:41:ab:
f6:ab:cd:43:f3:be:e2:17:67:5b:03:1c:9e:76:35:
e6:14:3e:c3:80:28:77:e5:ec:4e:48:68:85:a7:c7:
6b:fb:1d:5f:f8:de:ce:82:20:98:bc:56:db:97:d1:
fa:a1:54:80:be:74:00:37:68:d3:fa:5d:aa:a6:44:
fa:ec:4d:68:74:e3:e8:d2:14:15:96:90:c0:5c:81:
63:b1:8d:04:97:48:29:9c:f9:c3:df:89:24:59:50:
a1:66:1f:af:92:bf:68:9b:21:55:a0:c9:4d:f7:d5:
51:e5:66:16:9d:9a:77:11:b5:09:48:5c:55:86:23:
23:c8:30:8f:7b:29:14:a5:63:b8:06:b9:b8:05:78:
ef:d0:4a:73:aa:00:fc:f3:a9:2d:f3:90:6a:f8:a7:
68:c9:7f:a9:87:20:ef:e6:35:18:06:1d:50:3f:ae:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:C1:FF:B1:66:9A:60:8B:28:04:E6:0E:74:5E:B1:B1:F0:15:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8438DDED8AB11EF86626743762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:35:1d:aa:1d:92:bf:ec:66:63:f8:88:61:13:dc:96:4e:a8:
3a:42:9f:7e:96:3c:02:86:ba:64:9b:b8:28:59:0e:2b:9b:9a:
e1:e6:52:42:31:fa:9e:a1:da:d6:8c:54:2d:30:f6:cf:9f:99:
0c:0b:c6:c6:53:ff:70:2b:e9:eb:3d:b0:3c:8c:fe:1b:46:69:
01:eb:45:56:d5:ed:72:a6:8a:a6:70:b1:21:a4:4c:f6:87:b7:
14:f1:df:fa:50:d8:0b:88:97:5b:6b:1b:da:d5:35:8d:7f:cd:
b2:96:13:8a:96:4d:a3:d5:be:96:85:4f:43:bc:dd:3b:9c:b1:
72:09:6c:cb:64:57:96:a0:7b:ff:0f:7e:85:56:76:56:10:5c:
fe:dc:0c:f2:f0:f3:05:17:dd:e2:9d:32:86:ee:70:74:43:f6:
4a:f9:bf:b1:c3:af:6f:16:e9:8c:29:54:dd:3e:52:b9:de:72:
6c:00:f9:39:15:f0:bc:b0:12:bc:b7:fa:ff:7a:8a:0a:0d:b0:
93:4d:8a:9b:6f:ec:d5:da:dd:56:02:9c:60:1d:2e:32:7b:50:
fc:f4:b7:8b:2a:ee:15:c6:b4:47:3f:1f:2b:d7:4d:32:53:8c:
6a:0c:e8:0d:3d:be:41:45:00:88:7c:01:3a:5b:af:0c:0f:06:
ff:0a:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:58 2025 by rpki-client