Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4D66D84DD5D11EF801AC272762E951A.roa
File: C4D66D84DD5D11EF801AC272762E951A.roa (raw, json)
Hash identifier: xrwoseSESBw121e1Muq0X48ytethF5kSVhuk/4UY6Oo=
Subject key identifier: 15:B7:04:97:04:C3:5C:83:38:8F:9F:F0:BD:91:23:36:3E:00:0B:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4D66D84DD5D11EF801AC272762E951A.roa
Signing time: Tue 28 Jan 2025 09:53:48 +0000
ROA not before: Tue 28 Jan 2025 09:53:44 +0000
ROA not after: Tue 04 Feb 2025 09:53:44 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85168 (0x14cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:53:44 2025 GMT
Not After : Feb 4 09:53:44 2025 GMT
Subject: CN=6798a92c-7543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ee:d5:86:06:82:52:8a:4c:bc:c5:5f:5c:2a:
26:da:53:cd:be:cf:48:aa:47:a1:a6:d6:e0:6d:bd:
8b:4f:3e:15:e0:18:5e:aa:d4:f9:fb:97:e6:6d:dd:
72:a8:2e:36:1d:02:af:e4:2c:9c:15:1b:a8:34:94:
52:f3:3a:99:d5:d5:6c:04:29:52:b7:e7:ee:c7:64:
68:b2:20:94:b0:53:c4:45:b2:65:1d:a7:e6:5d:f7:
3d:8a:d0:04:1a:0d:67:d8:a8:35:9c:b5:13:27:a2:
62:d7:c2:37:41:c6:61:2a:91:b6:63:81:ad:65:16:
b4:13:6f:6e:db:20:e6:96:3d:af:8f:34:be:c9:58:
e8:be:af:00:86:93:5a:f1:60:d2:57:4d:d4:10:3a:
10:41:85:39:64:e6:31:08:39:ad:b4:57:40:0c:d4:
78:b5:f4:dd:9a:0d:14:1e:d8:24:22:94:39:6c:27:
2a:d6:48:97:42:c6:df:db:a1:9f:f3:15:87:48:29:
0c:2d:2a:be:19:ae:5f:06:af:10:8f:69:cf:29:f4:
87:cf:18:f7:8c:07:18:f1:cb:ab:73:ac:b1:35:cf:
21:31:dd:e5:f4:e6:b9:66:6d:4b:68:bb:b8:7e:03:
13:99:fb:18:0f:28:d2:e8:e0:83:86:2b:ea:79:e0:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:04:97:04:C3:5C:83:38:8F:9F:F0:BD:91:23:36:3E:00:0B:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4D66D84DD5D11EF801AC272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1a:5e:37:9b:2a:89:86:f7:62:a3:70:47:b3:a8:9d:07:4d:
16:cc:42:ce:5b:ff:99:09:6e:93:02:7f:fc:06:12:98:95:4f:
b0:bb:09:2c:ac:df:13:e8:43:1d:d9:b1:b2:da:12:91:57:c1:
3e:f3:75:2c:35:b4:4f:22:c9:f0:e7:95:35:b5:d4:2e:19:2a:
d4:0f:4b:95:56:80:d7:48:9b:81:e9:10:38:69:cf:88:8c:34:
df:9c:24:cb:11:a3:de:76:d4:8b:26:1a:da:01:e6:fd:23:71:
21:86:f6:82:5a:03:79:45:19:a6:04:a0:26:d7:74:4a:c7:3c:
d9:a8:f3:69:42:74:78:09:93:f0:a1:cd:cb:cc:dc:7d:fe:0c:
d4:1b:8a:4a:59:75:5b:56:56:44:3a:83:d1:0e:7f:f0:2a:5d:
7f:37:cf:df:78:9d:f7:5f:de:9d:14:1f:d5:1d:5b:ce:19:45:
60:55:db:60:e0:60:9e:6b:2f:ec:9b:9a:2d:64:97:55:fa:70:
58:f0:d1:2f:bf:a2:35:a2:af:f1:d9:8b:d3:c4:6c:75:6a:fd:
db:c0:6d:d7:07:f0:b3:ce:fc:9d:db:82:a8:ab:41:0a:e0:3c:
d7:b7:eb:71:88:c7:bd:bd:e8:75:c9:f8:8d:81:c6:e9:83:dc:
f1:ac:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:55 2025 by rpki-client