Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE78FC06D51411EF8B7BF8B0762E951A.roa
File: AE78FC06D51411EF8B7BF8B0762E951A.roa (raw, json)
Hash identifier: HEdS2W5LVjw5w1yLef68dVlixCupDxgKmd0vT3atFvU=
Subject key identifier: 54:75:AF:32:B3:A1:8D:61:6C:BD:C0:1E:52:55:D5:8D:3B:D3:01:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE78FC06D51411EF8B7BF8B0762E951A.roa
Signing time: Fri 17 Jan 2025 20:50:28 +0000
ROA not before: Fri 17 Jan 2025 20:50:24 +0000
ROA not after: Sat 22 Feb 2025 20:50:24 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81219 (0x13d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 20:50:24 2025 GMT
Not After : Feb 22 20:50:24 2025 GMT
Subject: CN=678ac293-13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:74:49:62:dc:1e:f1:ba:b0:6d:d2:7d:f1:
0c:e6:5b:59:51:37:70:08:2c:fa:48:95:86:1a:61:
b2:a2:74:4a:03:56:1b:dd:d3:8c:e0:dd:39:a1:2b:
25:62:17:bc:a0:e1:85:e5:72:e9:69:6b:fe:32:34:
6e:6c:1e:7c:9f:41:5f:e3:29:75:49:67:da:ff:41:
40:27:2c:99:04:d9:8c:2f:01:2e:7d:7f:dc:b6:5b:
1f:5e:60:71:4e:db:ae:97:6d:c0:20:34:4c:30:4e:
56:bc:84:0f:29:fc:4a:fe:4f:11:4e:6d:50:66:a1:
8b:cb:b4:14:00:fd:be:e7:b8:be:ac:8e:5b:5d:36:
7a:35:d6:80:db:64:f2:9b:d5:28:00:ac:4a:7c:9b:
ee:ec:69:af:33:e6:69:1f:ad:e9:d2:8e:b5:3c:91:
2c:de:e2:6b:d6:4b:71:3f:8a:32:42:c2:ed:fa:b4:
81:e8:a0:ab:a9:65:6b:54:6b:78:bb:60:e4:a2:13:
0c:2a:91:c8:2b:ee:05:0f:a1:86:83:f1:b9:f7:c2:
28:c1:c5:be:3f:74:c9:7d:88:d2:0a:5f:d5:41:ea:
2a:f9:1b:32:16:2b:aa:c9:ff:58:38:14:a7:f4:15:
c7:b8:ec:08:e0:91:97:fa:cf:d8:60:cf:45:37:58:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:AF:32:B3:A1:8D:61:6C:BD:C0:1E:52:55:D5:8D:3B:D3:01:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE78FC06D51411EF8B7BF8B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:18:00:12:04:3a:a4:52:9c:a8:03:d4:a2:56:b8:fd:76:ea:
40:d7:c9:2b:e5:5c:bd:d5:13:06:60:67:16:47:22:b2:66:c4:
04:a0:b1:03:6e:14:38:d7:57:82:44:a7:f9:08:a3:cc:99:e1:
dd:83:b3:7f:dc:bc:23:41:53:79:15:b8:82:d4:0b:ce:00:f6:
95:16:c8:ed:3a:c1:7f:5e:7f:9f:07:36:16:4e:34:31:bb:0e:
3c:f7:49:2d:c3:ca:82:b2:24:0e:73:08:5b:a6:4c:59:33:c8:
f8:c6:76:9d:45:f0:cd:08:ee:7e:4d:f5:8f:33:37:41:e2:d9:
ad:22:d6:df:78:aa:a0:a5:81:1b:05:2f:9b:a4:54:34:77:0f:
d8:29:54:1f:2c:8f:a9:d6:35:00:ea:cd:46:c4:ef:f5:bf:35:
9f:a8:eb:f8:28:e1:04:7e:dc:92:bb:ca:9c:df:76:90:83:63:
9b:08:0d:3c:c9:65:61:21:8a:69:84:b1:fa:fd:6c:9b:f9:eb:
4d:1a:d1:1b:f0:ff:1d:48:55:df:45:7a:ba:65:44:aa:9c:be:
f2:ba:33:df:0c:0d:c7:36:61:98:b6:ca:30:ab:27:4f:2c:f3:
92:54:d0:95:a5:2a:3f:fc:d8:d7:54:97:6f:1d:af:5f:13:5e:
c9:2c:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:02 2025 by rpki-client