Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1365DBEDA5311EF8A83D36D762E951A.roa
File: B1365DBEDA5311EF8A83D36D762E951A.roa (raw, json)
Hash identifier: Vz4tOzGTG2o/GIKM8K+wxQSKNreOFaGxkj+y8TNRSw8=
Subject key identifier: 7F:8C:2E:19:0B:86:46:61:05:DC:A1:85:9C:53:13:FF:AA:B8:8C:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01473A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1365DBEDA5311EF8A83D36D762E951A.roa
Signing time: Fri 24 Jan 2025 13:04:06 +0000
ROA not before: Fri 24 Jan 2025 13:04:03 +0000
ROA not after: Wed 05 Mar 2025 13:04:03 +0000
asID: 44559
IP address blocks: 154.209.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83770 (0x1473a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:04:03 2025 GMT
Not After : Mar 5 13:04:03 2025 GMT
Subject: CN=67938fc6-51fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:d6:2d:c2:5f:cd:bd:f8:9a:c8:4e:8a:78:
14:62:37:02:d6:c3:dd:c0:db:5a:ba:91:b1:a1:6d:
75:80:14:e1:d3:e8:21:3c:e4:6f:7b:94:aa:28:01:
1f:2a:b6:a7:62:b7:f8:eb:2b:78:f0:0a:2f:80:3e:
e4:50:6e:2f:90:5b:82:89:42:0a:06:15:a2:96:44:
a7:6e:80:3b:af:89:32:37:2e:0b:e9:22:3f:ef:2d:
e1:0d:45:5b:bc:dd:97:92:3c:c1:b3:a5:c3:bd:0b:
c7:40:e3:7d:02:59:65:d5:d7:97:05:5e:93:2a:6e:
e7:77:10:35:69:66:58:40:d8:84:9e:f8:cf:7b:b5:
ee:f3:03:2c:6e:4b:a5:9a:08:d1:45:4b:89:05:8c:
3e:30:60:18:4c:41:3f:78:6b:da:68:f8:ca:f2:d5:
87:f7:df:69:e4:48:24:71:0c:e7:db:24:47:c9:6f:
42:38:46:00:e3:44:a0:98:61:60:a0:41:7e:d2:11:
31:36:20:fc:7a:0b:10:39:d9:10:f8:21:5a:c5:40:
ef:c3:e3:75:cc:5a:4c:d9:00:8a:98:b1:5b:c6:da:
48:60:a5:b2:c9:38:0f:76:42:d3:6a:c7:df:9f:ab:
00:98:be:b3:e6:5e:5d:f3:42:a0:bf:78:84:56:ec:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:2E:19:0B:86:46:61:05:DC:A1:85:9C:53:13:FF:AA:B8:8C:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1365DBEDA5311EF8A83D36D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3e:ba:68:af:8e:62:4d:0e:26:a3:04:d1:13:e2:fd:bf:90:
cf:5b:f3:70:e4:f0:0a:ef:45:99:28:60:61:bd:f6:66:af:7e:
53:40:5b:f8:5a:13:b3:93:58:c2:37:b1:d4:19:a3:1c:80:6e:
c0:75:fa:cc:13:03:1c:35:7d:2d:e9:5b:9b:06:df:22:ee:ce:
84:a6:e8:50:84:52:29:74:11:10:4a:ef:9e:69:e4:8a:e6:8c:
76:61:fc:a8:b5:51:c9:df:e3:85:1a:4e:19:35:ff:b1:47:30:
b3:03:05:f2:9d:a9:eb:3d:92:0f:a3:26:97:d1:a0:a4:d1:76:
c3:90:d3:ed:11:3e:e8:51:16:9f:e7:b6:1f:63:dd:53:7b:aa:
7b:4a:0c:3d:b9:e1:32:76:94:6d:91:a8:dc:4e:d7:c1:cf:99:
89:d2:0f:b4:48:77:65:ad:b8:fe:1e:3c:ac:b9:b4:27:89:09:
bb:e0:e0:81:d5:d3:0d:d9:77:14:3b:bf:49:30:75:62:9f:b7:
f0:fb:9f:b6:4d:36:05:64:61:e6:87:11:95:67:a8:f1:bd:b0:
53:76:cc:f3:8f:3a:df:c7:d5:eb:fe:46:95:f6:b3:0c:41:37:
92:05:df:72:3b:1b:ed:49:75:9b:fc:25:6a:0d:0a:ec:b1:a4:
00:a4:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:36 2025 by rpki-client