Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7265D8D3F611EF86E99067762E951A.roa
File: AC7265D8D3F611EF86E99067762E951A.roa (raw, json)
Hash identifier: oBywZn+t2SED/jp00tHc+HtJtLKxpUmKtQq1dnE533U=
Subject key identifier: 78:4B:DE:24:4F:3C:DB:90:8F:D1:D2:D4:CA:89:FF:E4:30:26:83:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7265D8D3F611EF86E99067762E951A.roa
Signing time: Thu 16 Jan 2025 10:43:08 +0000
ROA not before: Thu 16 Jan 2025 10:43:04 +0000
ROA not after: Sun 16 Mar 2025 10:43:04 +0000
asID: 17561
IP address blocks: 154.213.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80854 (0x13bd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:43:04 2025 GMT
Not After : Mar 16 10:43:04 2025 GMT
Subject: CN=6788e2bc-dfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:8e:24:5d:b7:0c:a0:4e:7a:8e:0a:d8:bc:
c4:ce:ae:19:51:da:e6:43:c7:84:50:cd:5a:84:2e:
cc:6a:72:4c:8c:60:35:19:2a:17:bc:17:b0:82:7a:
75:b4:3e:df:2e:1d:3e:cd:62:c3:fa:dd:2a:b5:a3:
a4:21:75:57:7f:f9:7f:8a:54:e9:f8:40:2c:46:4a:
c9:19:07:84:ab:5d:45:a6:98:d5:e7:40:e0:dc:a8:
12:c8:81:9d:11:b0:c5:9d:91:2f:ee:d0:9e:20:1b:
4a:a6:29:c3:e3:5c:01:a9:18:69:8c:2a:bd:de:a9:
eb:16:df:d8:cc:b9:26:09:72:fd:06:6c:74:0b:ee:
51:90:2e:9e:ee:ea:8e:f3:de:76:ee:85:3e:d4:b9:
eb:41:58:f2:3a:99:23:13:1b:ff:cc:36:f7:0d:77:
1f:ab:01:8f:b6:56:26:31:83:7f:08:b5:9d:13:5c:
91:d3:09:ec:b1:41:ae:1c:59:7a:a3:64:8d:b6:9f:
1a:80:33:65:4b:91:3b:59:3c:6f:42:27:37:db:fd:
50:a9:9e:d1:63:13:5d:bb:c7:8f:81:28:9c:58:cb:
aa:fb:cc:df:e4:92:25:e3:d0:71:aa:4b:34:84:c5:
cf:cc:6d:d4:37:06:3c:16:a3:bd:c5:18:c4:24:fe:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:DE:24:4F:3C:DB:90:8F:D1:D2:D4:CA:89:FF:E4:30:26:83:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC7265D8D3F611EF86E99067762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.28.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7a:48:ed:40:89:71:8a:bc:8f:aa:dc:15:d4:31:c2:b1:7a:
dd:bb:74:0f:0b:fd:aa:bb:a7:87:09:99:15:99:d1:c4:dc:fe:
4d:45:d3:cf:f8:72:19:a8:79:6f:aa:23:72:2d:cd:5f:69:2e:
ad:06:bf:0d:9c:0d:6f:c6:71:a4:f6:68:6c:44:8f:ed:68:80:
6e:35:28:a6:0b:7a:bc:73:02:19:77:d6:93:c1:09:20:7f:e3:
23:bd:7d:0e:3d:82:76:87:6c:f2:fa:3b:e9:22:49:76:62:77:
87:d1:be:d7:48:b1:db:82:ca:33:cc:e0:a6:1c:b0:5b:9a:96:
0e:99:28:42:e9:40:19:63:bf:f6:4a:b8:05:e0:ef:7c:2a:d5:
fc:cf:c7:a5:32:a7:1a:8c:7f:1c:d8:0c:95:ba:c1:5f:e8:4e:
de:68:f9:b5:54:6d:88:74:eb:2a:a6:41:2e:24:8d:02:85:b2:
e1:6d:57:8d:ad:ae:70:5b:f6:96:0d:32:ad:83:ed:c6:e5:4e:
e2:cd:48:7c:96:d8:8f:9d:ee:43:43:0d:75:d3:db:ee:81:2d:
cd:a6:71:2b:f1:17:61:20:97:99:46:80:ae:92:7e:8e:d0:40:
8e:b4:7b:12:ab:eb:7a:dc:2e:0c:25:d0:88:74:6e:2f:28:ba:
28:a8:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:14 2025 by rpki-client