Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6B3BBF4D8AC11EFA7F37F4A762E951A.roa
File: B6B3BBF4D8AC11EFA7F37F4A762E951A.roa (raw, json)
Hash identifier: ze4AWs6Sx5twt+O15E8vG0qIXHOn4AGJJbevaMYO7y4=
Subject key identifier: 91:22:6D:31:79:E4:F5:92:16:23:7D:2C:2A:A1:8F:E9:D0:0C:5D:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ECA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6B3BBF4D8AC11EFA7F37F4A762E951A.roa
Signing time: Wed 22 Jan 2025 10:36:18 +0000
ROA not before: Wed 22 Jan 2025 10:36:14 +0000
ROA not after: Sat 08 Feb 2025 10:36:14 +0000
asID: 150008
IP address blocks: 154.210.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81610 (0x13eca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:36:14 2025 GMT
Not After : Feb 8 10:36:14 2025 GMT
Subject: CN=6790ca22-e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:9f:b7:82:6a:36:63:99:c3:bb:a5:79:20:
4e:94:b6:68:00:5c:7b:8f:eb:99:dc:c5:e9:22:c9:
96:5a:80:01:e0:c0:19:e1:87:38:e3:3e:20:03:4b:
50:f4:4c:fd:8e:c6:4d:e7:2c:9b:b9:de:bf:a6:36:
72:0b:3b:ee:0b:f7:56:99:cc:14:dd:61:93:d9:55:
24:3a:ec:58:83:f9:06:da:9d:f1:db:ae:11:dd:17:
2a:27:6c:d2:80:cb:26:6d:be:c2:ac:c8:4f:65:d9:
cb:39:28:eb:fd:83:20:bb:c8:46:f7:98:15:fe:d9:
15:61:1f:a6:08:bc:bf:b5:61:cb:16:f3:57:94:09:
51:d8:35:e9:0c:f4:24:5e:f9:62:0e:24:39:ef:82:
72:42:92:8b:e5:04:ca:8d:fe:28:6b:81:df:91:77:
e0:6f:2d:b1:d9:37:c1:5a:14:e6:c5:ff:b2:fc:ee:
b9:aa:8b:27:a1:b9:85:72:88:f6:d4:06:90:b4:78:
16:f6:f3:80:0f:22:e4:92:a9:aa:f3:b9:e0:3c:10:
97:23:18:83:fb:36:47:20:e5:27:f3:b4:8b:b8:02:
27:7a:90:80:b7:60:7c:04:3b:79:ac:59:44:d5:a1:
f2:94:1c:59:59:99:1c:73:e2:36:ec:76:ae:54:ea:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:6D:31:79:E4:F5:92:16:23:7D:2C:2A:A1:8F:E9:D0:0C:5D:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6B3BBF4D8AC11EFA7F37F4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e4:e7:93:be:9c:23:02:01:71:81:61:4b:f4:62:46:1a:a4:
96:30:01:ee:2f:85:d2:cd:98:5f:11:69:d1:7d:7f:27:fe:4f:
b7:ed:ce:6b:09:a6:81:85:7d:1e:56:a9:c0:2e:e2:98:40:f4:
14:90:49:e1:9f:1e:71:a4:cd:34:34:80:48:8b:ec:4c:3e:65:
b9:86:6c:27:d5:5d:25:ee:72:8b:d8:be:42:af:94:99:cd:8b:
69:31:36:59:2c:fa:c4:c1:83:55:25:2b:f4:83:9b:99:cf:07:
f5:84:88:66:39:74:eb:8c:a3:be:1a:27:ad:09:1c:21:07:57:
b7:c4:7d:ed:5c:64:c8:30:e4:92:ab:9e:69:a8:25:15:36:72:
3a:cf:22:ac:fb:81:ef:32:6f:72:03:91:51:c3:46:7b:89:5d:
33:e7:c9:7a:10:0e:00:d3:34:30:96:67:3a:26:ac:12:f3:bd:
f6:65:a8:d5:20:44:3c:18:1b:1e:96:d7:0a:fb:3c:58:24:3a:
c1:4e:28:6b:b3:02:2e:c9:9e:f1:d7:5a:bf:68:ca:b6:07:40:
49:35:f6:fe:96:23:76:2b:ff:01:d6:bc:52:c2:81:3d:44:30:
71:b9:27:e6:2c:72:b7:8c:c4:b1:34:e7:ae:1f:b8:73:c7:7a:
81:c4:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:09 2025 by rpki-client