Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A6B832D9D811EFA62F17A1762E951A.roa
File: C5A6B832D9D811EFA62F17A1762E951A.roa (raw, json)
Hash identifier: 1/FQ0B+N8b21pJrznnqEzR9GzveaMwWg9IwuGwYqo0I=
Subject key identifier: FC:B7:F5:1B:1B:70:8D:CA:19:F5:B8:B0:F3:30:DF:A7:D7:C6:F7:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014349
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A6B832D9D811EFA62F17A1762E951A.roa
Signing time: Thu 23 Jan 2025 22:24:12 +0000
ROA not before: Fri 24 Jan 2025 22:24:09 +0000
ROA not after: Sat 01 Mar 2025 22:24:09 +0000
asID: 44559
IP address blocks: 154.205.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82761 (0x14349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:24:09 2025 GMT
Not After : Mar 1 22:24:09 2025 GMT
Subject: CN=6792c18c-8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:26:81:5f:36:e0:f3:93:ca:d3:5a:bf:6d:
6c:59:17:ad:ae:86:e8:f7:b9:47:fb:33:5e:c8:6a:
29:58:46:43:e1:fc:e4:47:51:22:e2:98:8c:86:10:
5f:87:62:e9:da:da:91:d7:79:7d:2a:bb:aa:a1:93:
92:53:73:19:db:b0:59:4f:46:f5:e5:50:55:81:16:
77:d8:27:ca:35:2f:84:b5:50:d5:80:b2:21:a9:1b:
bd:6e:36:3b:1f:e0:76:34:5b:d6:22:9d:cf:92:af:
c6:de:e2:91:ac:0a:50:42:f4:49:0a:e3:aa:18:a4:
90:86:81:cf:46:eb:07:e8:84:56:4a:1b:2f:66:20:
5f:ba:3a:15:a8:35:94:74:2e:6e:2a:42:5e:11:25:
4b:3f:30:89:fc:18:77:85:83:b5:a1:32:82:71:d9:
f3:f1:70:8c:64:2d:11:b9:28:7a:bb:65:45:81:7d:
28:b7:53:41:b8:1d:15:38:77:88:8f:4d:d3:7d:5b:
34:6f:2e:3d:67:ee:20:74:78:6b:35:e9:20:ea:0f:
72:fa:cf:d5:9f:7e:25:b0:3f:56:43:c1:ff:b9:fc:
3f:a1:22:f9:0b:30:20:a5:e0:db:84:e5:56:3e:26:
c2:fc:66:22:32:c4:84:f6:e9:0e:1d:22:6b:6b:6c:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:F5:1B:1B:70:8D:CA:19:F5:B8:B0:F3:30:DF:A7:D7:C6:F7:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A6B832D9D811EFA62F17A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.235.0/24
Signature Algorithm: sha256WithRSAEncryption
81:aa:0c:c6:86:99:ca:1d:19:50:1c:55:50:a1:70:22:33:4e:
b1:34:78:e4:0e:e8:eb:00:4e:03:50:3d:cf:b5:95:1d:51:10:
cd:7f:25:36:ae:15:be:19:45:bf:cc:b8:08:a5:7f:78:19:e7:
dc:50:60:45:29:48:7a:fc:99:05:85:af:b3:43:4b:21:67:b8:
83:7f:99:36:24:ff:eb:55:3c:f4:99:ee:cf:b2:61:69:2a:7e:
3d:0e:11:82:3b:7d:aa:0f:e1:fa:fe:37:a9:d6:82:5e:b3:68:
ed:4a:b2:9c:3c:a1:e6:21:32:16:99:49:a4:27:3a:6b:2c:46:
e8:43:2f:63:65:24:60:ee:a1:a4:43:56:bc:b4:3d:90:29:09:
61:16:a2:ab:02:50:a3:a8:9d:b6:5a:32:8e:ba:91:db:b4:61:
8a:7b:b6:ed:77:8f:fc:14:43:a0:dc:d8:ed:d0:5d:97:d1:a5:
42:e8:5c:eb:f0:f6:3d:d4:24:8d:e2:42:9a:49:5b:b1:4e:94:
ea:5c:f4:2b:d0:c6:76:f1:c8:fa:7c:dd:79:1b:27:66:d0:e9:
fb:60:ec:f6:3b:22:78:35:b1:17:00:41:04:25:c3:d0:d5:db:
df:5b:f4:7d:fb:b0:46:6c:86:53:b6:9a:8f:de:47:21:cd:03:
10:07:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:17 2025 by rpki-client