Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE99B594D97011EFA2413A71762E951A.roa
File: AE99B594D97011EFA2413A71762E951A.roa (raw, json)
Hash identifier: 6whTUFIOo+XfDowPeUn4SWb9UoWge6XHaRJvzZSA2uc=
Subject key identifier: 60:CB:96:74:C3:66:C8:A4:D9:A5:CC:99:5F:71:B0:B1:36:6D:6F:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01410A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE99B594D97011EFA2413A71762E951A.roa
Signing time: Thu 23 Jan 2025 09:59:06 +0000
ROA not before: Thu 23 Jan 2025 09:59:02 +0000
ROA not after: Fri 28 Feb 2025 09:59:02 +0000
asID: 62240
IP address blocks: 154.194.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82186 (0x1410a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:59:02 2025 GMT
Not After : Feb 28 09:59:02 2025 GMT
Subject: CN=679212ea-ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:16:b9:ac:48:ff:8c:d6:c5:8b:57:fb:72:
62:06:f6:ec:30:cb:55:c9:e7:38:0a:8d:8f:91:6e:
a1:a7:cd:56:2d:eb:88:52:dc:a4:42:23:63:4d:79:
94:4f:10:17:9a:7b:71:55:03:7a:a6:97:ea:78:e7:
41:e5:6c:a1:30:4a:4e:ed:ad:00:34:10:cd:c4:53:
5b:d6:7f:19:2e:77:93:f9:af:71:a1:20:3f:71:95:
6a:92:d2:80:91:8b:64:b6:02:97:16:14:f9:9d:0e:
93:00:24:3c:56:04:b2:f0:66:49:4c:9f:51:94:ec:
38:4d:d1:79:78:5a:64:f8:6c:b3:b2:e3:1b:59:73:
33:ea:bd:c0:a7:a9:4a:05:2f:2a:0e:f3:19:71:5f:
6e:38:b0:5a:f1:78:3a:1c:d6:bf:33:80:7e:d7:92:
ec:da:78:ac:00:5d:5e:e5:a0:20:38:85:4f:e0:70:
9e:89:73:62:eb:c8:7e:5c:85:55:12:fc:58:e5:98:
35:ca:42:57:97:7e:88:a4:63:4a:3e:f1:57:b2:85:
d9:45:22:eb:0b:ac:0e:a5:91:95:26:a2:ce:79:f5:
41:cf:5b:87:fc:69:10:39:f9:55:dc:7c:55:ed:ea:
6b:3a:c6:42:d0:06:b8:c9:81:ce:eb:7b:ee:9d:f1:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:96:74:C3:66:C8:A4:D9:A5:CC:99:5F:71:B0:B1:36:6D:6F:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE99B594D97011EFA2413A71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.127.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0e:d8:17:0c:cd:db:69:ca:89:9a:70:60:4b:0d:6d:93:d4:
e2:ae:42:b9:9a:3f:d7:e4:32:3c:a1:3b:e4:d8:2b:2f:ce:19:
77:b4:f4:bb:14:25:14:9c:84:5b:0a:cb:63:c5:9d:84:52:de:
e6:ac:06:9d:08:3e:fe:2f:d4:21:7a:ad:b9:58:59:30:aa:9e:
08:ab:61:27:4b:38:10:e2:7e:85:4a:91:47:61:88:7b:66:ca:
df:c6:db:0a:f7:29:47:c0:93:1c:fd:cc:98:da:e8:09:20:56:
95:ac:d3:5b:6c:b0:5b:53:19:b4:d3:14:4d:d0:6d:10:59:8d:
6f:66:d8:93:d4:aa:e2:d1:49:24:f5:89:6b:19:44:b7:73:83:
26:ce:29:d2:f9:f9:5e:01:69:9b:96:35:d1:e7:88:81:87:19:
78:74:ee:2f:12:8c:ee:e2:89:40:22:36:21:6b:7a:be:a5:85:
67:dc:65:98:a9:49:7e:2d:31:9b:76:f3:e0:0a:4f:91:fc:a4:
a3:56:c6:56:d2:e5:d0:c0:5b:b6:10:93:a4:36:42:9e:bc:aa:
2d:d5:f6:da:00:0c:4a:e0:4b:47:67:ca:53:7b:d7:ac:95:25:
27:00:6e:54:8b:59:f8:a1:ac:d7:51:a3:55:17:f1:9d:1a:1c:
56:1f:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:52 2025 by rpki-client