Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1E71CDA2D11EFA100516D762E951A.roa
File: B6A1E71CDA2D11EFA100516D762E951A.roa (raw, json)
Hash identifier: n5lFTSgrBC2CiMtD5lZMaLTX3snMzuKk4hbK0r2gn7M=
Subject key identifier: 19:63:8A:0D:70:0B:1C:07:F2:99:55:72:F0:C0:A4:66:A2:E3:83:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014473
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1E71CDA2D11EFA100516D762E951A.roa
Signing time: Fri 24 Jan 2025 08:32:14 +0000
ROA not before: Fri 24 Jan 2025 08:32:10 +0000
ROA not after: Wed 05 Mar 2025 08:32:10 +0000
asID: 202656
IP address blocks: 154.221.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83059 (0x14473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:32:10 2025 GMT
Not After : Mar 5 08:32:10 2025 GMT
Subject: CN=6793500e-7e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:f8:72:fb:62:5d:97:d8:e7:d8:e6:e9:bd:
2f:52:19:a6:cb:d4:d1:ca:67:ab:33:36:0a:7e:2d:
ce:fd:d4:5c:5c:d1:ed:5b:2d:47:8b:ac:cb:4f:33:
7f:83:6f:ea:79:ae:71:67:fe:fb:10:ed:9a:95:2d:
78:89:4e:e7:42:06:8a:05:3b:66:00:3b:4e:e8:a3:
68:ad:94:17:96:93:b4:b7:0d:02:30:e3:17:92:20:
44:e8:a9:06:b3:20:f0:ba:27:0d:75:ac:0c:d4:5f:
d7:e8:2d:55:83:13:18:39:26:14:27:a1:65:b9:20:
45:dd:71:6a:c8:7d:de:50:e0:58:77:eb:a9:3c:b1:
fc:09:6d:f9:8a:60:24:e4:b3:4c:56:f7:c5:62:fc:
8e:47:bc:97:ae:0a:d0:13:bf:5e:cf:8b:c9:be:66:
5c:ce:c7:e9:c9:b7:74:86:ae:c6:8f:01:75:a7:be:
bf:6f:ef:12:4c:06:59:0b:a1:ec:47:b4:94:70:47:
47:5b:25:6e:27:bb:08:7c:4d:3e:b5:bc:ad:45:be:
27:30:73:df:96:b5:d0:ad:23:fa:33:e0:91:58:ea:
26:4d:a3:3f:91:40:5e:0d:20:ef:33:99:02:36:26:
34:08:e1:d5:5d:1a:8b:33:53:cd:14:f8:64:1a:8c:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:8A:0D:70:0B:1C:07:F2:99:55:72:F0:C0:A4:66:A2:E3:83:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1E71CDA2D11EFA100516D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:60:0e:66:47:b7:db:0d:a9:a6:f9:c6:13:80:92:29:a5:bf:
6a:34:47:58:c4:be:0f:8c:dd:15:6e:be:20:a4:1d:16:92:04:
3e:97:da:8e:11:d8:26:f6:12:a7:cb:a8:19:5d:c6:c5:dc:83:
59:10:26:46:16:b1:f0:6f:32:14:b3:ce:5f:68:2d:60:4a:26:
88:ee:53:c6:93:4e:4e:c4:76:2f:f8:e2:a2:cd:0d:f6:3b:7d:
a3:b3:d0:6f:d1:b1:ca:c1:f3:f7:f5:5c:ec:0f:59:96:c2:e0:
84:25:c2:00:0e:2b:a4:97:a0:e9:ce:56:05:f1:5c:fe:7a:0d:
b1:7c:c8:32:c0:be:1e:c1:3a:57:f7:98:a4:8f:15:0c:2d:d7:
cc:54:d3:88:4b:5c:82:84:13:9b:a3:33:65:83:c0:df:1c:30:
f3:92:f4:7a:99:06:25:0c:5f:ad:8b:2a:bf:ce:57:be:24:24:
6d:29:5c:23:15:a3:1f:5a:37:1c:7e:55:68:84:5c:26:15:63:
02:b2:49:c5:b7:fb:27:10:3d:a0:34:b6:7f:b7:36:f9:87:e3:
8d:59:cd:7f:5d:dc:05:4b:68:e0:1a:c7:dd:c4:26:9e:93:9f:
ee:82:17:37:6c:5b:90:4e:a7:ed:a4:34:c0:a4:12:7e:84:c6:
b7:d7:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:25 2025 by rpki-client